Privacy policy

1 Introduction

This policy explains what personal information Xtend Digital collects when you use this website, why we collect it, how we look after it, and what control you have over it. It applies to this website and to orders placed through it.

By using the site you agree to this policy. If you disagree with any part of it, please stop using the site and contact us with your concerns.

2 Information we collect

We collect only what we need to deliver an order and support you afterwards:

• Account details — your name, email address and mobile number.
• Delivery details — the shipping address and contact number you provide.
• Order history — the items you bought, their prices and each order's status.
• Technical data — your IP address and browser type, recorded in server logs.

Your password is never stored in a readable form. It is kept only as a one-way hash, which means nobody, including us, can read it back.

We do not knowingly collect information from children, and we do not ask for information we have no operational need for.

3 How we use your information

• To process orders and arrange delivery
• To contact you about an order's status or a delivery problem
• To answer support requests and handle returns
• To keep your cart, wishlist and saved addresses available when you sign in
• To detect and prevent fraud or misuse of the site

We do not sell your data, and we do not share it for advertising.

4 Cookies

We use a single session cookie. It keeps you signed in and holds the contents of your cart while you browse. It expires when you close your browser or sign out.

We do not use advertising or cross-site tracking cookies. Blocking cookies entirely will stop the cart and sign-in from working, since both depend on that session.

5 How we protect your data

• Passwords are stored as one-way hashes, never as readable text
• Database queries use prepared statements to guard against injection
• Forms are protected against cross-site request forgery
• Session cookies are HttpOnly, and marked Secure when the site is served over HTTPS
• Access to order and customer records is limited to authorised staff

No system is perfectly secure. We take reasonable measures, but we cannot guarantee absolute security, and we encourage you to use a strong, unique password.

6 Third-party services

Some information is necessarily shared to complete an order:

• Courier partners receive the recipient's name, address and phone number.
• Payment providers, where used, process payment details on their own systems. We never see or store full card details.
• Our hosting provider stores the site and its database on our behalf.

These parties may only use the information for the service they provide to us.

7 Your rights

You can ask us to:

• Show you the personal data we hold about you
• Correct anything inaccurate
• Delete your account and associated personal data
• Stop sending you non-essential messages

Write to support@xtenddigital.online and we will respond within a reasonable period. Some records, such as completed order invoices, may need to be retained where the law requires it.

8 Contact us

Questions about this policy, or about the data we hold on you: