Privacy

• Your account. Your email address, and the name, phone number, address and language preference you choose to add. The phone number exists so a delivery can be arranged; nothing else uses it. The address is kept so you do not have to type it again at checkout.
• How you sign in. If you chose a password, we store a scrambled (“hashed”) version of it — never the password itself, and it cannot be turned back into one. If you sign in with Google, we store the fact that your IFRSH account is linked to that Google account, and nothing from your Google profile beyond the email address.
• Designs you save. The configuration itself — dimensions, material, colour, shelves, doors. Nothing about you is embedded in a design beyond the fact that it is yours.
• Orders. The full design, the manufacturing specification and the price as they stood at the moment you ordered, plus your delivery address, the order's status history, and when a deposit was recorded.
• Email we send you. Which messages were sent about your order and what happened to them — delivered, bounced, or never confirmed. We store the delivery outcome, not the contents of your inbox.

No card or bank details. IFRSH does not take card payments at all — a deposit is paid by bank transfer or BenefitPay, directly, and no payment instrument ever reaches this site.

No password in readable form. If you set one, what we hold is a one-way hash — we cannot see your password, tell it to you, or recover it, which is why resetting is the only way back in if you forget it.

No advertising trackers, no third-party analytics, no cookie banner — because there are no cookies to consent to beyond the one that keeps you signed in. Choosing to sign in with Google sends you to Google briefly, and they will know you did; nothing on this site tracks you before or after.

• Supabase — the database and the sign-in system. Everything above is stored there.
• Google — only if you choose to sign in with Google. They confirm to us that you control the email address, and we tell them nothing about you, your designs or your orders.
• Resend — sends account emails and order emails, and reports back whether they arrived.
• Vercel — hosts the site and serves every page.
• The workshop building your piece. When an order is sent to a partner workshop, they receive the manufacturing specification and what they need in order to deliver it. They do not receive your account, your other designs, or what you paid.

An order is kept as a permanent record of what was sold and at what price. That is deliberate: months later we must still be able to say exactly what was ordered and what it cost, whether for a guarantee claim or a dispute — so an order is never rewritten after the fact.

Saved designs and wishlist items are yours to delete at any time, from your account. Deleting your account removes them with it.

To see what we hold, correct it, or have it deleted, get in touch. Most of it you can already see and edit yourself under your account.