Privacy Policy

Allhallow Trim collects order details needed to complete a purchase. Those details include name, email address, delivery and billing addresses, items ordered, and order value.

Technical data may include browser type, device type, IP-derived location, pages viewed, and the path taken through the site. This information is used to keep the store working.

Payment data is handled by the processor. Allhallow Trim receives the card brand, final four digits, transaction result, and any confirmation needed to match the payment to an order.

Messages sent to support are stored with the related order. The content is used to answer the question and keep a record of what was agreed.

The site does not request health details, biometric data, government identifiers, or other sensitive personal information.

A delivery address may include a recipient name, building name, unit number, and carrier access note. Those fields exist only to complete delivery.

Analytics records do not include the contents of a basket after the session ends. Order data is kept separately from aggregate browsing statistics.

Contact and address details are used to take payment, deliver the order, send updates, and manage returns or refunds.

Order history supports customer questions, accounting, fraud checks, and legal record keeping. Technical data helps detect errors and unusual activity.

Information is not sold and is not used to build advertising profiles. Data is used only for a stated business purpose or a legal obligation.

Where consent supports a use, that consent can be withdrawn for future activity. Withdrawal does not undo processing that already occurred lawfully.

Fraud signals may be used to pause an order for review. A paused order is not automatically cancelled, and the customer is told what is needed.

Aggregate reports show page performance, conversion counts, and common errors. They do not identify a shopper by name or reveal order contents.

A service message about an order is not marketing. It may be sent even when promotional email has been switched off.

Essential cookies and local storage keep the basket, session, and checkout working. Without them, a basket may empty between pages and checkout may not complete.

Analytics storage records page views with a random identifier. It is used in aggregate and is not joined to an order record.

Advertising and retargeting cookies are not used. Browser settings can block or remove cookies, though essential checkout storage must remain available.

Where consent is required for non-essential storage, it is requested before those entries are set.

A session entry expires after a period of inactivity. Browser privacy tools can clear the basket earlier, and the site cannot recover it afterwards.

Cookie choices apply to this store. Clearing site data removes the saved choice and may cause the consent prompt to appear again. Essential storage is set only when needed for the basket or checkout. A blocked analytics cookie does not stop an order from being completed. The basket remains usable with essential storage.

Order information is shared only with service providers needed to complete the purchase. These include the payment processor, delivery carrier, hosting provider, and email service.

Each provider receives the minimum data required for its task. The carrier receives delivery details, not full payment information.

Providers are required by contract to follow instructions and apply appropriate safeguards. Information is not sold or added to unrelated mailing lists.

A legal request may require disclosure to an authority. Where permitted, Allhallow Trim tells the affected customer about the request.

A provider may use aggregated service data to maintain its platform. That use does not allow the provider to market another company's products using order data.

If a provider changes, the replacement must meet the same privacy and security requirements before order data is transferred. A provider that cannot meet those terms is not used for customer information. A current list can be requested through the privacy contact. The reply explains what each provider handles.

Order records are retained for the period required by tax and accounting rules. The record includes the items purchased, payment result, and delivery details.

Support messages are kept only as long as needed for service history and dispute handling. Older messages are deleted or anonymised.

Analytics remain in aggregate form. Abandoned baskets and expired sessions are cleared automatically after a limited period.

A legal hold can extend retention for a specific record. Once the hold ends, the same deletion rules apply.

A deletion request is checked against accounting, tax, fraud, and dispute duties. Any part that must remain is limited to that legal purpose.

Backup copies are replaced on a rolling schedule. A record removed from the live system may remain briefly in a protected backup before it expires. Backup access is restricted and used only for recovery. A deletion request does not require the customer to remove browser history. The live record is removed first.

Site traffic is encrypted in transit. Payment data is entered on the processor's secure page and is not stored on Allhallow Trim systems.

Access to order information is limited to staff who need it. Individual accounts are used, and access is removed when a person leaves the role.

Systems are monitored for unusual payment patterns, repeated failed attempts, and other signs of misuse. Suspicious activity may pause an order for review.

No system is perfect. If a breach affects personal information, affected people will be informed and told what action is being taken.

Administrative access requires authentication, and routine support work does not expose full payment data. Staff are instructed not to copy order data into personal tools.

Security reviews cover access, provider settings, payment flow, and software updates. Findings are corrected before they are treated as closed. Important fixes are tracked with an owner and a completion date. A critical issue receives priority over routine work.

A customer may ask for a copy of personal information, request correction, or ask for deletion where no legal duty requires retention.

A request can also seek restriction, object to a use, or ask for portable data. Rights are exercised free of charge.

Marketing messages can be stopped through the unsubscribe link. Order, delivery, and refund messages are service notices and continue while needed.

A request is answered within the period set by applicable law. If more time is needed, the reason is explained.

A request should identify the information involved and the outcome wanted. A broad question about privacy can be answered without a formal form.

Where a request cannot be granted, the applicable rule is named. The reply also states any remaining option, such as review or complaint. A refusal is not left as a single unexplained sentence. A copied request can be supplied in a common electronic format. The response explains any limit on the copy.

The store is intended for adults. Allhallow Trim does not knowingly collect personal information from a child under 13.

There are no child accounts, contests, newsletters, or advertising targeted at children. Checkout does not ask a shopper to state an age.

When an adult buys an item for a child, the order and contact details belong to the adult. A parent or guardian may exercise privacy rights for a child.

If a child has sent personal information, one email is enough to request deletion. The record is removed unless a legal rule requires retention.

An age range shown on a product page describes safe use. It is not a request for the shopper's age and does not create a child account.

A guardian request follows the same contact route as any privacy request. Identity may be checked before data is disclosed or deleted. The request is handled without asking the child to contact the store. A parent may also ask for an explanation of how a child-related record is used.

Privacy questions and requests go to support@tessasite.shop. Use a clear subject line and state the action wanted.

Identity may be checked before data is released or deleted. The check prevents someone else from obtaining another person's information.

A reply normally follows within one working day. Formal rights requests are answered within the legally required period.

If the response is unsatisfactory, ask for a review. The reviewer and the outcome are confirmed in writing.

A privacy message can ask how a specific record is used or how long it is kept. A short question is enough to begin.

If this policy changes in a material way, the update appears on this page. Continued use of the store is governed by the revised notice. A question about an older notice can still be raised through the contact address. The reply identifies the notice and date that apply to the request. A formal request is logged for review.