Privacy policy

Smush operates this online store and is responsible for deciding how personal information collected through it is used. Questions about this policy or requests concerning your information can be submitted through our Contact us page.

We collect information that is necessary to operate the store, process purchases and provide customer support. Depending on how you use the website, this may include:

• Account and contact information, including your name, email address, telephone number, password hash, billing address and delivery address.
• Order and transaction information, including items purchased, prices, discounts, delivery method, payment status, returns and refund history.
• Payment-related information supplied to our payment processors. Smush does not receive or store your complete card number.
• Customer-service communications, including messages, attachments and notes needed to resolve an enquiry.
• Technical and usage information, such as IP address, browser type, device information, pages viewed, referring page and approximate location derived from IP.

Most information is provided directly by you when you create an account, place an order, join the mailing list or contact us. Some technical information is collected automatically through essential cookies, server logs and similar technologies. We may also receive status information from payment, delivery and fraud-prevention providers.

We use personal information only where we have a valid reason to do so. The main purposes are:

• To process payment, fulfil and deliver orders, provide receipts and manage returns or refunds.
• To create and administer customer accounts and display order history.
• To answer questions, investigate delivery problems and provide product support.
• To protect customers and the store by detecting fraud, abuse, security incidents and prohibited activity.
• To comply with tax, accounting, consumer-protection and other legal obligations.
• To analyse and improve the website, products and customer experience.
• To send marketing where you have consented or where otherwise permitted by law. You can opt out at any time.

Payments are processed by the payment method selected at checkout. The relevant provider receives the information required to authorise and complete the transaction. Payment providers process information under their own privacy notices and security standards. Smush receives confirmation, transaction identifiers and limited payment details such as card brand and last digits, but not complete card credentials.

We do not sell personal information. We disclose it only when required to operate the store, protect legal rights or comply with law. Recipients may include:

• Payment processors and fraud-prevention services.
• Delivery companies, fulfilment partners and address-validation providers.
• Website hosting, database, analytics, email and customer-support providers.
• Professional advisers, insurers, regulators, courts or law-enforcement bodies where disclosure is required or reasonably necessary.
• A purchaser or successor if all or part of the business is reorganised, sold or transferred, subject to appropriate safeguards.

Essential cookies keep the store working, remember basket contents, maintain secure sessions and support checkout. Optional analytics or marketing technologies should be used only in accordance with the consent choices presented on the website. Browser settings can block cookies, although disabling essential cookies may prevent parts of the store from functioning.

We retain information only for as long as needed for the purpose for which it was collected. Order and transaction records may be retained for the period required by tax, accounting and consumer-protection laws. Account information is kept while an account remains active, and support records are retained for a reasonable period to resolve disputes and improve service. Information is deleted or anonymised when it is no longer required.

We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, loss, alteration or disclosure. No internet service can guarantee absolute security. Customers are responsible for keeping account passwords confidential and should contact us promptly if they suspect unauthorised account activity.

Your rights depend on the law that applies where you live. Subject to applicable conditions and exceptions, you may be entitled to:

• Request access to the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion or restriction of eligible information.
• Object to certain processing or withdraw consent where processing relies on consent.
• Request a portable copy of certain information.
• Opt out of marketing by using the unsubscribe link in an email.
• Complain to the relevant data-protection authority.

The store is not directed to children who are below the age at which they may independently consent to online services in their location. We do not knowingly collect personal information from such children. A parent or guardian who believes a child has provided information should contact us so it can be reviewed and, where appropriate, deleted.

Some service providers may process information in countries other than the country where you live. Where required, we use recognised contractual or legal safeguards intended to protect information transferred internationally.

We may update this policy when the website, our providers or legal requirements change. The revised version will be published on this page with a new last-updated date. To ask a privacy question or exercise a privacy right, use the Contact us page and clearly describe your request. We may need to verify your identity before responding.