Privacy Policy

For the purposes of data protection law, REWICKED is the “data controller” responsible for your personal data. If you have any questions about this policy or how we handle your information, you can reach us at hello@rewicked.com.

• —Order details: your name, email address, delivery address, and the items you buy.
• —Payment information: processed securely by Stripe. We never see or store your full card number — Stripe handles that on our behalf.
• —Correspondence: any messages you send us by email, so we can answer your questions and keep a record of our exchange.
• —Basic technical data: limited information your browser sends (such as approximate location and device type) that helps the website function and stay secure.

We do not knowingly collect data from anyone under 18, and we do not sell or rent your personal data to anyone — ever.

• —To fulfil your order — process payment, dispatch your lighter, and send confirmation and delivery updates. Legal basis: performance of a contract.
• —To provide customer support — respond to enquiries, returns, and refund requests. Legal basis: performance of a contract and our legitimate interests.
• —To meet our legal obligations — for example, keeping records required for tax and accounting. Legal basis: legal obligation.
• —To keep the site secure and working — preventing fraud and technical abuse. Legal basis: our legitimate interests.

We only share your data with the trusted service providers we rely on to run the shop, and only to the extent they need it:

• —Stripe — to take payment securely.
• —Resend — to send your order confirmation and related emails.
• —Our hosting and database providers — to store order records and operate the website.
• —Delivery carriers — to ship your lighter to you.

Each of these providers acts under their own privacy terms. Where data is processed outside the UK, it is protected by appropriate safeguards as required by UK data protection law.

We keep order and transaction records for as long as needed to fulfil your order and to meet our legal and accounting obligations (HMRC generally requires business records to be kept for six years). Email correspondence is kept only as long as it is useful for support. After that, we delete or anonymise your data.

We keep cookies to a minimum. The website uses only the essential cookies needed for it to work and for secure checkout via Stripe. We do not use advertising or third-party tracking cookies. You can block or delete cookies in your browser settings, though some parts of the site (such as your basket) may not work properly without them.

Under UK data protection law you have the right to:

• —Ask for a copy of the personal data we hold about you.
• —Ask us to correct anything that is inaccurate or incomplete.
• —Ask us to delete your data, where we are not required to keep it.
• —Object to or ask us to restrict how we use your data.
• —Ask us to transfer your data to another provider, where applicable.

To exercise any of these, just email hello@rewicked.com. We’ll respond within one month.

We’d always prefer to put things right ourselves, so please contact us first. If you’re not satisfied with how we’ve handled your data, you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.

We may update this policy from time to time as our business or the law changes. The date at the top of the page shows when it was last revised. Material changes will be reflected here.