Privacy Policy

When you place an order or browse our site, we may collect:

• Name and delivery address — provided at checkout to fulfil your order.
• Email address — provided at checkout for order confirmation and dispatch updates.
• Payment information — card details are collected and processed securely by Stripe. We do not store your full card number on our servers.
• Browsing data — if you accept advertising cookies, we use the Meta Pixel (running in your browser) and Meta's Conversions API (sent from our own server) to tell Meta when you view a page or take an action such as joining our list. The server-side version includes a cryptographically hashed version of your email address plus your IP address and browser type, so Meta can match the event to the right ad — this is not anonymous data, it is designed to be matched back to you. Neither runs if you decline. See our Cookie Policy for the full detail.

• Order fulfilment — to produce, frame and deliver your order.
• Communications — to send order confirmations, dispatch notifications and respond to enquiries.
• Marketing — to serve relevant advertising via Meta (Facebook/Instagram) based on your browsing behaviour, and to measure whether that advertising works. You can change this choice at any time via the Cookie Preferences link in our footer.

• Contract — processing your name, address, email and payment data is necessary to fulfil the contract of sale when you place an order.
• Legitimate interest — we have a legitimate interest in understanding how visitors use our site and in promoting our products through targeted advertising.
• Consent — where we use cookies and matching server-side data for advertising (Meta Pixel and Meta Conversions API), we rely on your consent. Both stop the moment you decline or withdraw consent via the Cookie Preferences link in our footer.

Order data (name, address, email, transaction records) is retained for six years from the date of purchase to comply with UK tax and accounting obligations. Browsing data collected by the Meta Pixel and Meta Conversions API is retained by Meta in accordance with their own data retention policies. You may request deletion of your personal data at any time — see Your Rights below.

We share your data only with the third parties necessary to operate our business:

• Stripe — payment processing. Stripe handles all card data securely under PCI DSS Level 1 compliance.
• Our fulfilment partner — your name and delivery address are shared with our fulfilment partner so they can produce, frame and dispatch your order.
• Our email service provider — your email address is shared with our email service provider to send order confirmation and dispatch notification emails.
• Meta (Facebook) — advertising. If you accept advertising cookies, the Meta Pixel (browser) and Meta Conversions API (our server) both send browsing and, for server-side events, hashed identifying data to Meta for the purpose of serving and measuring targeted advertisements. If you decline, neither runs.
• Vercel — website hosting. Our site is hosted on Vercel, which may process server logs containing IP addresses.

We do not sell your personal data to any third party.

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct any inaccurate data.
• Erasure — ask us to delete your personal data, subject to our legal obligations.
• Portability — request your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interest, including profiling for advertising.

To exercise any of these rights, email orders@thelostaxis.com. We will respond within 30 days.

Our site uses cookies placed by the Meta Pixel, plus matching data sent from our own server via Meta's Conversions API, for advertising purposes — both track your browsing behaviour so that we can serve and measure relevant ads on Facebook and Instagram. You can review or change your choice anytime via the Cookie Preferences link in our footer, manage cookies through your browser settings, or see the full inventory of what we set in our cookie policy.