Last updated August 2026
Privacy policy
This policy explains what we do with your personal data. ALVANIA LIMITED (company number SC878205) is the data controller.
What we collect
When you order
- Name, email address, telephone number
- Delivery and billing address
- Order contents, value and history
We do not receive or store your card number. Payment details go directly to Stripe, which is PCI-DSS compliant. We see only the last four digits, card type and result.
When you browse
- Pages visited, referring site, approximate location from IP address
- Device and browser type
When you contact us or subscribe
- Your email address and the content of your message
Why we use it, and our lawful basis
- Fulfilling your order — performance of a contract.
- Fraud prevention and site security — legitimate interests.
- Accounting and tax records — legal obligation.
- Marketing emails — consent, which you may withdraw at any time.
- Improving the site — legitimate interests, using aggregated data.
Who we share it with
We do not sell personal data. We share only what is necessary with:
- Stripe — payment processing and fraud checks
- Netlify — website hosting
- Delivery carriers — name, address and phone number, to deliver your parcel
- Our accountants — transaction records
Some of these providers process data outside the UK. Where that happens, transfers are covered by adequacy decisions or standard contractual clauses.
How long we keep it
- Order and transaction records: six years, as HMRC requires
- Marketing contacts: until you unsubscribe, then removed within 30 days
- Support correspondence: two years
- Analytics data: 14 months
Cookies
We use cookies and similar storage that are strictly necessary for the site to work — remembering your bag between pages, and Stripe's fraud-prevention cookies during checkout. These do not require consent.
Any analytics or advertising cookies are set only if you agree. You can clear cookies through your browser at any time; the bag will empty if you do.
Your rights
Under UK GDPR you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it elsewhere. You may also withdraw consent to marketing at any time.
Email hello@alvania.co.uk. We respond within one month.
If you are unhappy with our response you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
The site runs over HTTPS. Access to order data is limited to people who need it. We will tell you and the ICO without undue delay if a breach puts your rights at risk.
Children
This site is not intended for under-16s and we do not knowingly collect their data.
Changes
We will post any update here and change the date at the top of this page.
Contact
ALVANIA LIMITED, registered in Scotland, company number SC878205.
Registered office: Office 288, 18 Young Street, Unit LGE, Edinburgh, EH2 4JB, United Kingdom.
Email: hello@alvania.co.uk