Privacy

When you buy: your name, email, delivery address, and optionally a phone number for the courier. That is the whole list, and every field on it exists because a parcel cannot be delivered without it.

When you pay: the invoice, the asset, the amount, and the transaction identifier. Blockchain transactions are public by their nature — that is a property of the networks, not a choice we make.

When you browse: ordinary server logs, including IP address, for security and diagnostics.

We do not run third-party analytics, advertising pixels, or social trackers. There is no cookie banner on this site because there is nothing on it that would require one — the only cookie we set is the session cookie for staff signing in to our own dashboard.

We never see your card details, bank details, exchange account, or identity documents. Those stay with whichever service you bought your crypto from; we are not a party to that transaction.

We do not sell, rent, or share your data with anyone for marketing. Ever.

Three parties, each for one purpose:

The carrier gets your name, address, and phone number, because otherwise they cannot deliver. Our payment processor gets the invoice amount and your email. Our accountants and tax authorities get the transaction records the law requires us to keep.

We will disclose data to law enforcement where we are legally compelled to. We will not do so on request alone.

Order and payment records: seven years, because tax law requires it. Delivery details: seven years, as part of the order record. Server logs: ninety days.

Enquiries that never became orders: two years, then deleted.

You can ask what we hold on you, ask for it to be corrected, or ask for it to be deleted. Email enquiries@hobbymannor.com and we will respond within forty-five days.

One honest limit: we cannot delete a completed order record before its seven-year retention period expires, because keeping it is a tax obligation rather than a preference. We can delete everything else, and we will.

California residents have specific rights under the CCPA, including the right to know what personal information we have collected and the right to request deletion. We do not sell or share personal information as those terms are defined by the CCPA, and we never have. Exercise either right at the address above.

The site is served over TLS. Staff access to the dashboard is password protected and every action against an order is logged with the account that took it.

We hold no private keys for customer funds, and we cannot spend from any wallet you send from. Our own receiving wallets are watch-only on this server — the spending keys live offline, on hardware that is not connected to it.