Privacy Policy

• Your name, phone number, email (if you give one) and delivery address, to deliver your order.
• An optional map pin, so the courier can find you.
• Your order history, saved cart, wishlist and any reviews you write, if you have an account.
• Your password, stored only as a one-way hash we cannot read.
• Basic technical data such as your IP address, used to block abuse and too many login attempts.

To process and deliver orders, contact you about them, run your account, prevent fraud and fake orders, and keep records our business needs. We do not sell your personal information.

• Our delivery couriers, who receive your name, phone and address for your order.
• Brevo, which sends our order and account emails.
• Cloudflare Turnstile, which checks that sign-ups and logins come from real people.
• Google, only if you choose to sign in with Google.
• Supabase, which hosts our database and product images.

We use one essential sign-in cookie to keep you logged in. Your cart is saved in your browser, or in your account when you are signed in. We do not use advertising cookies.

We keep order records for as long as we need them for accounting and legal reasons. You can ask us to delete your account and the personal information we do not need to keep.

You can view and update your details in your account, reset your password at any time, and contact us at aquasteps.lb@gmail.com to ask for a copy of your data or to have it deleted.