Privacy policy
Draft: this page will be replaced with Amidae's own terms before launch.
Last updated 26 October 2026
This policy explains what personal data Amidae collects when you use amidae.com or buy from us, why we collect it, who we share it with and the rights you have over it.
Who we are
Amidae is a trading name of [Company name] Ltd, a company registered in England and Wales (company number [company number]), with its registered office at [registered office address]. We are the controller of your personal data and are registered with the Information Commissioner's Office (registration number [ICO registration number]).
For any question about this policy or your data, email hello@amidae.com.
What we collect
- Contact and delivery details: your name, email address, phone number, and billing and delivery addresses.
- Account details: your login email and a securely hashed password, saved addresses and order history.
- Order details: what you bought, prices, payment status, dispatch and tracking information, and any notes you add.
- Your buyer declaration: the confirmations you give at checkout (that you are 18 or over, that you are buying for research use only, and that you accept our terms), with the date and time you gave them.
- Trade account details: if you apply for a trade account, your organisation's name and address, company or VAT number, your role, and the purpose you give for your purchases.
- Payment details: card payments are handled by our payment provider, and we never see or store your full card number. We receive the payment outcome and limited details such as the card type and last four digits. For bank transfers, we see the payer's name, account details and payment reference.
- Messages: anything you send us by email or through the site.
- Technical data: your IP address, browser and device type, and the pages you request, which our servers and security provider log to keep the site running and protect it from abuse.
- Your cookie choices: what you chose, when, and the IP address and browser you chose it from, so we can show what you agreed to.
We don't collect special category data, and we ask you not to send us any.
How we use it, and our lawful basis
Data protection law requires a lawful basis for each use of your data. Ours are:
- To take, deliver and support your order, run your account and handle returns and refunds. Basis: performing our contract with you.
- To keep tax and accounting records. Basis: legal obligation.
- To keep a record of your buyer declaration and to check orders and trade applications before we accept them. We sell for research use only and review orders that suggest otherwise, such as unusual quantities or notes about personal use. A person makes each decision; we don't make decisions about you by automated means alone. Basis: our legitimate interest in selling lawfully and being able to show that we do.
- To prevent fraud and keep the site secure. Basis: legitimate interests.
- To understand how the site is used, such as which pages people visit, where they came from and where they leave checkout, and to count orders. We use PostHog for this, and we don't send it your name, email or address. Basis: legitimate interests. If you accept the analytics cookie, PostHog also recognises your later visits; for that, the basis is your consent, which you can withdraw at any time (see Cookies).
- To tell you when a product is back in stock, if you ask on its page. We send one email for that size and don't add you to any list. Basis: consent.
- To send you news and offers by email, only if you have opted in. You can unsubscribe at any time using the link in every email. Basis: consent.
- To respond to legal claims, or to requests from regulators, HMRC or the police where we are required to. Basis: legal obligation, or our legitimate interest in defending our rights.
Who we share it with
We don't sell your data. We share it only with service providers who help us run the business, under contracts that require them to protect it and use it only on our instructions:
- our website hosting, security and content delivery providers
- our email provider, to send order and account emails
- our analytics provider, PostHog, which stores data in the European Union
- our payment providers and bank, to take and refund payments
- delivery companies such as Royal Mail, and for orders outside the UK, international couriers
- our accountants, insurers and legal advisers
We may also disclose data to regulators, HMRC, the police or a court where the law requires it, or to a buyer of our business if it is ever sold.
Transfers outside the UK
Some of our providers process data outside the UK. When they do, we make sure the transfer is protected, either because the destination has UK adequacy regulations or through the UK International Data Transfer Agreement or Addendum.
How long we keep it
| Data | How long |
|---|---|
| Orders, invoices and buyer declarations | 6 years after the end of the financial year of the order |
| Your account | Until you close it, then as for orders |
| Trade applications that we decline | 12 months |
| Emails and support messages | 2 years after the conversation ends |
| Back-in-stock requests | 12 months after we send the email, or after you ask if we never do |
| Marketing preferences | Until you unsubscribe, then a suppression record so we don't email you again |
| Server and security logs | 30 days |
| Records of your cookie choices | 2 years after you make the choice |
We keep order records for six years because tax law requires it, and because that is how long a claim could be brought about an order.
Cookies
We use cookies the site needs to work, which don't need your consent, and one analytics cookie, which we only set if you agree. We don't use advertising cookies. You can change your choice at any time with "Cookie settings" at the bottom of every page.
Cookies the site needs:
| Cookie | Purpose | Lasts |
|---|---|---|
| _medusa_cart_id | Remembers your basket | 7 days |
| _medusa_jwt | Keeps you signed in to your account | 7 days |
| _medusa_pending_customer | Holds details while you create an account | 1 day |
| _medusa_cache_id | Makes sure you see up-to-date prices and stock | 1 day |
| _medusa_locale | Remembers your language setting | 1 year |
| c15t | Remembers your cookie choices | 1 year |
| c15t-vendors | Remembers your choice for each analytics provider | 1 year |
Our security provider may also set a short-lived cookie to tell people apart from automated traffic.
Analytics cookie, only if you accept:
| Cookie | Purpose | Lasts |
|---|---|---|
| ph_<id>_posthog | Lets PostHog recognise your visits, so we can see how people use the site over time | 1 year |
If you reject it, or haven't chosen yet, we still count visits, but nothing is stored on your device. PostHog combines your IP address and browser details with a code that changes every day, and keeps only the result, so it can tell one visit from another for that day without recognising you afterwards.
Your rights
You have the right to:
- get a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted, where we no longer have a reason to keep it
- restrict or object to how we use it, including for marketing
- receive data you gave us in a portable format
- withdraw your consent at any time, where we rely on it
Email hello@amidae.com to use any of these rights. We'll reply within one month. Some rights have limits: for example, we can't delete order records we are legally required to keep.
Complaints
If you're unhappy with how we've handled your data, please tell us first at hello@amidae.com. We'll acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
The site uses encrypted connections, passwords are stored hashed, and access to customer data is limited to the people who need it to run the business.
Age
Our site and products are for adults only. We don't knowingly collect data from anyone under 18.
Changes to this policy
We'll update this page if our practices change, and change the date at the top. If a change materially affects you, we'll tell you by email. See also our terms of service.