Privacy notice

Who is responsible for your data

Daniel Tolenaar, trading as Packwren, is responsible for your personal data.

Contact: support@packwren.com.

What we collect and why

Order details — your name, email, phone number and delivery address — to take payment, deliver your order and handle returns. Lawful basis: performing our contract with you.

Payment and fraud-prevention information. Payment details are entered on Stripe's checkout page; we never see or store your full card number. Stripe and we use some device and payment information to prevent fraud (legitimate interests).

Messages you send us, to answer them (contract or legitimate interests).

Records needed for tax, accounting and product safety, such as which product and batch you bought, so we can contact you about a recall (legal obligation).

Optional, with your consent: an analytics identifier, and, if you allow advertising cookies, the Meta Pixel. If you allowed advertising cookies before you bought, we also send Meta a hashed (scrambled) copy of your email, phone and postcode, your browser type and IP address, and the order value, so Meta can tell us whether an ad led to the purchase. You can change your choice at any time with 'Cookie settings' at the bottom of every page.

Optional: marketing emails, only if you tick the box on your order page. Every email has an unsubscribe link.

Who we share it with

Stripe (payments), our fulfilment partner and carriers (to pack and deliver your order — your name, address, phone and order contents), our email provider Resend (order emails), our hosting and database providers Vercel and Supabase, and, only with advertising consent, Meta.

International transfers: several of these providers process data in the United States, using the UK's data bridge or standard contractual clauses. Our fulfilment partner is located in China, which the UK does not consider to have equivalent data-protection law. We send it only what it needs to deliver your order (name, delivery address, phone and the items ordered). [Required before launch: name the fulfilment partner and the data-protection terms it has agreed to]

How long we keep it

Order and payment records: 6 years after the order, for tax and accounting. Support messages: 2 years. Cookie-choice records: 2 years. Browser and IP details kept for Meta measurement: deleted within 30 days.

Your rights

You can ask for a copy of your data, correction, deletion, or to object to or restrict our use of it, and you can withdraw consent at any time. Contact us using the details above.

If you are unhappy with how we have used your data, please tell us first (by email or our contact page); we will acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office (ico.org.uk).