Privacy Policy
Last updated August 2026
What we collect
We collect only what the site needs to work: your email address and name when you create an account, sign in or subscribe to the newsletter; your delivery address and order details when you make a purchase; and the contents of any enquiry or message you send us. Your cart, enquiry list and curated lists are stored in your own browser until you sign in.
How we use it
To fulfil orders, respond to enquiries, let you sign in and see your order history, and — with your consent — send occasional news from the archive. We do not sell or share your data for advertising, and we do not use advertising trackers.
Who processes it
We rely on a small number of processors to run the site: Stripe (payments — we never see your card details), Vercel (hosting and anonymous, cookie-free visit statistics), Neon (our database) and Resend (transactional email and the newsletter). Each processes data only on our instructions.
Cookies & local storage
We use a session cookie to keep you signed in, and your browser’s local storage for your cart and lists. We set no third-party advertising or analytics cookies.
Retention
Order records are kept as required for tax and accounting. Enquiries and messages are kept while we correspond with you. You can unsubscribe from the newsletter at any time from your account page or any newsletter email.
Your rights
Under UK GDPR you may request access to, correction of, or deletion of your personal data, and you may object to or restrict processing. Write to hello@mirellaricciardi.com and we will respond promptly. You may also complain to the ICO (ico.org.uk).