The Keep

Privacy

Last revised — February 2026

We take only what we need to send you your parcel and remember you the next time.

What we collect

Email address — for receipts, dispatch notes, and (if you subscribe) our editorial list.
Shipping details — name and postal address, collected by Stripe at checkout and passed to us for fulfilment.
Order history — items purchased, price paid, tracking number, dispatch date.
Site behaviour — anonymous session data (pages viewed, cart contents) stored in your browser's localStorage. This never leaves your device.

We do not collect or store credit-card numbers. Payment details go directly to Stripe over an encrypted connection; we only receive confirmation that a payment succeeded.

Why we collect it

To fulfil the order you placed with us (legal basis: contract).
To send you order updates, tracking, and after-sale support (legal basis: contract).
To send editorial dispatches if you subscribed to our list (legal basis: your consent, withdrawable any time).
To comply with tax and accounting law (legal basis: legal obligation).

Who else sees your data

We share the minimum necessary data with these partners:

Stripe (payments) — receives your name, email, shipping address, and payment card at checkout. Stored on Stripe's PCI-compliant infrastructure.
Resend (email delivery) — receives your email address and the content of order-related messages. Delivered from orders@aethelred.shop.
Shipping carriers (USPS, AusPost, DHL, and similar depending on the parcel) — receive your name and shipping address in order to deliver.
MongoDB Atlas (our database) — stores your order records on our behalf, in encrypted form.

We do not sell, rent, or trade your personal data with anyone else. Ever.

How long we keep it

Order records are kept for 7 years after purchase — the retention period required by Australian tax law. Newsletter subscribers are kept on the list until you unsubscribe. Anonymous localStorage data lives on your device until you clear your browser.

Your rights

You can, at any time, ask us to:

Show you what personal data we hold about you.
Correct anything that's wrong.
Delete your data (except records we're legally required to retain, e.g. tax invoices).
Export a copy of your data in a portable format.
Withdraw consent for marketing at any time (usually just by unsubscribing).

Write to hello@aethelred.shop and we'll act on the request within 30 days.

Cookies

We use a small number of essential cookies and browser storage to make the site work — remembering your cart, whether you've dismissed the welcome offer, and your wishlist. We do not use tracking or advertising cookies, and we do not embed third-party analytics that follow you across the web.

International visitors

We're based in Australia, and our servers hold your data primarily in the United States (MongoDB Atlas) and the United States/EU (Resend). If you're in the EU or UK, your data is processed under standard contractual clauses that provide the level of protection required by the GDPR and UK GDPR.

Complaints

If you feel we've handled your data poorly, please write to us first. If we can't resolve it, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC), or with your local data-protection authority if you're outside Australia.

Contact

Privacy questions, data requests, and everything in between — hello@aethelred.shop. We aim to reply within two business days.