Privacy Policy

Information We Collect

We collect the information needed to run the store, including contact details, shipping details, order details, payment status, and messages you send to us.

How We Use Information

We use this information to process orders, arrange delivery, send order updates, respond to customer support requests, prevent fraud, improve the store, and send launch updates if you joined the mailing list.

Customer Accounts

If you create an account, we store your name, email address and a salted password hash. We do not store readable passwords. We send account verification and password reset emails through Brevo and use an essential session cookie to keep you signed in for up to 24 hours, with a 30-minute inactivity limit. Resetting your password signs out previous sessions. Creating an account does not subscribe you to marketing emails. To request account deletion, contact enquiries@pret-a-pot.com.

When you create or reset a password, we check it against Have I Been Pwned’s breach database. Only the first five characters of a password-derived hash are sent to that service; we never send your password, the full hash or your email address. This check is separate from the salted hash we store for sign-in.

Payments

Card payments are processed by the payment provider shown at checkout (currently Yoco). We do not store full card numbers on our own servers.

Service Providers

We may share the minimum necessary information with providers that help us operate the store, such as payment, delivery, email, analytics, and hosting providers.

Shopping Activity

We use a first-party shopping identifier to record cart changes, the page and recommendation where items were added, and the last observed checkout step. This helps us understand abandoned carts and improve the shop. Activity is anonymous until you join the newsletter or submit your contact details by continuing at checkout. We do not record unfinished typing or payment card details in this activity history.

Identified cart and checkout events are shared with Brevo, our email provider. Newsletter subscription is separate from checkout. If you joined the newsletter, Brevo may send one cart reminder after 12 hours of inactivity or one checkout reminder after 2 hours of inactivity. Cart activity resets the relevant timer, and clearing the cart or completing payment cancels a pending reminder. We do not send these reminders to checkout contacts who have not joined the newsletter. Raw shopping history and abandoned checkout contact records are kept for up to 90 days; completed order records are retained separately for fulfilment and business recordkeeping. Only authorised staff can access the private dashboard.

Marketing

We remember the most recent identifiable traffic source in your browser for up to 30 days, including the referring website, landing page and campaign tags. When you place an order, we save that source with the order so authorised staff can understand which search results and advertising bring customers to the shop.

If you join the mailing list, we may email you about launches and store updates. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting enquiries@pret-a-pot.com.

Contact

For privacy questions or requests, email enquiries@pret-a-pot.com.