Legal
Privacy policy
Plain English, because a policy nobody reads protects nobody. This covers what we collect, why we collect it, and how to get rid of it.
Last updated August 2026
What we collect
Only what an order actually needs, plus what you volunteer.
- Account details: name, email address, and a scrypt hash of your password — never the password itself.
- Order details: delivery address, phone number for carrier updates, and the contents and value of each order.
- Optional details: saved addresses, wishlist contents, product reviews, and newsletter subscription.
- Technical details: standard server logs, and a single cookie that keeps you signed in.
What we do not collect
We do not store card numbers. Payment details go directly to the payment provider and never touch our servers.
We do not run advertising trackers, sell data to third parties, or build profiles for resale.
Why we hold it
To take payment, ship your order, tell you where the parcel is, handle returns, and answer you when you write in.
If you opted into the newsletter, to send one email a month. That consent is separate from your account and can be withdrawn without closing it.
How long we keep it
Order records are retained for seven years, because tax law requires it. Everything else is deleted within thirty days of you asking.
Reviews are anonymised rather than removed when an account is deleted, so the rating history on a product stays honest.
Your rights
You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. One email is enough and we do not require a reason.
- Access — a machine-readable export of your account, orders and reviews.
- Correction — anything wrong, fixed.
- Erasure — your account and personal details removed, subject to the retention period above.
- Objection — unsubscribe from marketing at any time, from any email.
Getting in touch
Privacy requests go to hello@foreverliving.example and are answered within thirty days, usually within two working days.