Privacy Policy

Who we are

Outpost LDN, [Company registration number], registered office [Registered office address]. You can contact us about anything in this policy at info@outpostldn.co.uk.

What we collect, and why

We only collect what we need to run the shop and your account. That's:

• Account details — name, email, password (stored as a salted hash, never in plain text), and optionally phone/delivery address — to create and run your account.
• Order details — items purchased, delivery address, order value — to fulfil your order and provide order history/tracking.
• Payment data — we never see or store your card details. Payment is handled entirely by Stripe; we only receive confirmation that a payment succeeded and a reference ID.
• Support/contact information — anything you send us directly, e.g. via email, to help us respond.
• Technical data — basic, privacy-preserving analytics on which pages are viewed (see our Cookie Policy), and error reports if something breaks, to keep the site working.

Our legal basis for processing

• Contract — processing your order, running your account, and customer support all rely on this being necessary to provide the service you've asked for.
• Legal obligation — e.g. keeping order/invoice records for tax purposes.
• Legitimate interests — keeping the site secure (rate limiting, fraud prevention) and understanding site usage so we can improve it, balanced against your rights.

Who we share data with

We use a small number of trusted processors to run the site — each only receives what they need to do their specific job:

• Stripe — payment processing (they handle and store your card details directly; we never do).
• Vercel — website hosting, image storage, and privacy-preserving, cookie-less traffic analytics.
• Resend — sending transactional emails (order confirmations, password resets).
• Sentry — error monitoring, so we can find and fix bugs. Error reports may incidentally include technical details like your IP address.
• Neon — our database host, where account and order records are stored.

We never sell your personal data, and we don't share it for third-party marketing.

How long we keep it

Account data is kept for as long as your account is active. Order records are kept for at least 6 years to meet UK tax and accounting obligations. You can ask us to delete your account at any time (see "Your rights" below) — we'll remove what we're not legally required to keep.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (subject to our legal obligations, e.g. tax records)
• Ask us to restrict or object to certain processing
• Request a portable copy of your data

To exercise any of these, email info@outpostldn.co.uk. If you're unhappy with how we've handled your data, you also have the right to complain to the Information Commissioner's Office (ICO).

Changes to this policy

We'll update this page if how we handle your data changes, and update the "last updated" date above.