Privacy Policy
Last updated: 30-08-2026
This policy explains what we collect, why, and what we do with it. We've written it in plain English because you deserve to understand it.
What we collect
When you place an order: your name, email address, phone number, shipping address and billing address. We need these to make and deliver your order — there is no way around it.
When you create an account: your email address and a password. Passwords are stored encrypted; nobody here can read yours.
When you pay: we never see or store your card number. Payments are handled entirely by PayPal and our card processor. We receive only a confirmation that payment succeeded, and the last four digits of the card for our records.
When you contact us: whatever you write in your message, plus your email address so we can reply.
When you sign up for our newsletter: your email address, and nothing more.
When you browse: basic technical information — your IP address, browser type, the pages you looked at, and how you reached us.
Why we collect it
- To make, package and ship your order
- To email you order confirmations, tracking and delivery updates
- To answer your questions
- To handle returns, refunds and warranty claims
- To keep the accounting records the law requires
- To understand which products people are interested in, so we make more of what you actually want
- To send you our newsletter, if you asked for it
We do not use your data for anything else, and we do not make decisions about you automatically.
Who we share it with
We share only what is necessary, only with companies that help us run the shop:
- PayPal and our card processor — to take payment securely
- DHL, FedEx and USPS — your name, address and phone number, so your parcel arrives
- Supabase — our database and hosting provider, where your account and order records are stored
- Our email provider — to send order emails and, if you subscribed, the newsletter
- Google Analytics — anonymous statistics about site visits
We never sell your data. We never rent it, trade it, or hand it to advertisers. If we ever change that, this policy changes first and you'll be told.
We may also disclose information where the law requires it, or to protect our rights in a legal dispute.
Cookies
Cookies are small files your browser stores. We use them for:
- Essential cookies — keeping you logged in and remembering what's in your basket. The site cannot work without these.
- Analytics cookies — Google Analytics, to count visits and see which pages are popular. These can be refused without breaking anything.
You can clear or block cookies in your browser settings at any time. If you block the essential ones, your basket and login will stop working.
International transfers
We operate from Pakistan and our service providers are based in various countries, including the United States and the European Union. If you order from the EU, EEA, Switzerland or the UK, this means your data may be processed outside your own country. We only work with providers who apply appropriate safeguards to protect it.
How long we keep it
- Order records — 7 years, because tax and accounting law requires it
- Account details — until you ask us to delete the account
- Newsletter subscription — until you unsubscribe
- Support emails — 2 years
- Analytics data — 14 months
Your rights
Wherever you live, you can ask us to:
- See a copy of everything we hold about you
- Correct anything that's wrong
- Delete your data, except records we're legally required to keep
- Stop using it for marketing
- Send it to you in a portable format
Email handforgedwork.info@gmail.com and we'll respond within 30 days. We won't charge you and we won't ask why.
If you're in the EU or EEA, you also have the right to complain to your national data protection authority. If you're in California, you have the right to know what we collect, request deletion, and not be discriminated against for exercising those rights.
Marketing emails
We'll only send you the newsletter if you asked for it. Every one of those emails has an unsubscribe link at the bottom, and one click is enough — no login, no form, no "are you sure".
Unsubscribing from the newsletter does not stop order and shipping emails. Those are part of the purchase, and you'd want them.
Security
Your connection to this site is encrypted. Passwords are hashed. Card details never touch our servers. Access to customer records is limited to the people who need it to fulfil orders.
No system is perfectly secure, and anyone claiming otherwise is selling something. If a breach ever affected your data, we would tell you and the relevant authority without delay.
Children
This site is not intended for anyone under 18, and we don't knowingly collect data from children. If you believe a child has given us information, email us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top. Significant changes will be announced on the site.
Contact
HandForgedWork LLC
Email: info@handforgedwork.com