Privacy Policy
This is a placeholder. A proper UK GDPR privacy policy is needed before launch. It should cover what data we collect (orders, accounts, newsletter), why, how long we keep it, who we share it with (Stripe, Supabase, Resend) and how to contact us.

