popular searches

    THEGRAY logo

    legal

    Privacy

    What this site collects, where it goes, and how to have it removed. It describes what the code actually does, not what a template says.

    What we collect

    If you open an account: your first and last name, email address, phone number if you give one, and the addresses you save. Your password is stored as a hash, never as text. If you sign in with Apple or Google we keep the identifier they return and nothing else from them.

    If you place an order: the shipping address, a contact email, what you bought, and the totals. Orders can be placed as a guest, in which case there is no account, only the order.

    If you subscribe to the newsletter: your email address, and nothing beside it.

    If you write to us through the contact form: your name, email and message.

    Card details

    We never see them. Payment is handled by Stripe; your card is entered on their form and stays with them. What reaches us is a payment reference and whether it succeeded.

    What is kept in your browser

    Five things, all in local storage on your own device: your bag, your session token if you are signed in, your account summary, your language, and whether you chose the dark or light view.

    There is no analytics script on this site, no advertising pixel, and no third-party tracker. Nothing here follows you to another site. This is a statement about the code as it stands, and it is worth checking rather than trusting.

    Who else sees it

    Stripe, to take the payment. The courier, who is given the delivery address and a phone number. DigitalOcean, where the site and its database are hosted. No one else, and nothing is sold to anyone.

    How long it is kept

    Order records are kept for as long as accounting and warranty obligations require. An account and its saved addresses are kept until you ask for them to be deleted. A newsletter subscription is kept until you unsubscribe.

    Having it removed

    Write to us and ask. You may ask for a copy of what we hold, ask us to correct it, or ask us to delete it. An order we are legally required to keep is the one thing we may not be able to erase, and we will say so plainly if that is the case.

    Who we are

    [FACT REQUIRED] The registered company name, its licence number and the emirate of registration belong here, along with the law this policy is read under. A privacy policy that does not name the party bound by it is not one.

    Last updated 20 August 2026

    newsletter

    First refusal

    A short note when new pieces are listed. Nothing else.