Privacy policy

Effective November 3, 2026 · Policy version 2026-11-03.3. Sapden is operated by Spotbo, Inc., United States. Customer and legal enquiries: [email protected].

Information and purposes

We collect the contact, account, delivery, basket, order, payment-reference and support information needed to run the shop, plus limited device, IP, session and security records. We use it to provide shopping and account functions, fulfil and track orders, answer requests, process refunds, prevent abuse, comply with law and maintain appropriate records. We do not ask for a Social Security number or an identity document for ordinary shopping. Verification for an exceptional rights or fraud request is limited to what is proportionate.

Providers and disclosure

Stripe receives payment-card details in its hosted payment interface; we do not store a full card number or card security code. Necessary order and delivery details go to payment processors, fulfilment and retail partners, carriers, hosting/security and transactional-email providers. These companies act for the requested service and may have independent obligations. We may disclose records where legally required, to protect rights or safety, or in a business transfer with appropriate safeguards. We do not sell personal information or share it for cross-context behavioural advertising in the current storefront.

Cookies, browser signals and email

Essential cookies maintain the basket, authentication and security. The current storefront does not use advertising pixels or cross-site behavioural advertising analytics. Global Privacy Control therefore does not have a sale/sharing activity to switch off; we maintain that choice without requiring an account. Do Not Track is not a standardized consent mechanism and does not disable necessary security or transaction functions. Payment and other providers may process information under their own policies when you use their services. Service emails concern your order or request; marketing, if introduced, requires a separate choice and an unsubscribe route and is not a condition of purchase.

Retention and security

We keep information for the purposes above and the applicable legal, tax, dispute and security periods, then delete or de-identify it when it is no longer needed. Account closure does not require deletion of records we must lawfully retain. Access is restricted to appropriate personnel and providers; reasonable safeguards reduce risk but no system guarantees perfect security. Do not share a private order link, password or reset link. Information may be processed in the United States and other countries where our providers operate, subject to applicable protections.

Your privacy choices and applicable state rights

You may contact us to request access, correction, deletion or an export, and to raise a privacy concern. Depending on applicable law, rights can also include opting out of sale/sharing, targeted advertising or certain profiling, limiting sensitive-data use, using an authorized agent and appealing a denied request. We do not claim that every state privacy statute applies to every shop or request. We explain a lawful denial and how to seek review, respond within applicable periods, verify proportionately and do not discriminate for exercising protected rights. If dissatisfied, reply with Privacy Appeal for review and you may contact your state regulator. See privacy choices for the contact method. We do not use sensitive information for unrelated profiling.

Children and updates

This store is for adults and is not directed to children under 13. We do not knowingly collect their personal information. A parent who believes a child supplied information should contact us so we can investigate and remove it where required. We identify the effective date above and post material changes; an order acknowledgement of terms is not consent to unrelated future uses of personal data.

Address verification provider

When checkout is activated, delivery-address fields are sent to Google Maps Platform for address validation; US processing can use USPS data. We do not send card details or the contents of your basket for address validation. We use the result to identify incomplete or inconsistent delivery details and ask you to confirm corrections. See Google’s privacy policy and terms. We retain the address you provide or explicitly confirm for the order, with limited verification evidence and security controls. We do not build or sell an address database from provider responses.