Skip to content
ebag.im home

Privacy

Your data, looked after

ebag.im is the data controller for personal data collected on this website.

What we collect

  • Account and contact details: name, email, phone number.
  • Delivery details: addresses and delivery instructions.
  • Orders: what you bought, substitutions, receipts and prices paid.
  • Payments: handled by Stripe. We receive the payment status and, if you save a card, its brand and last four digits; never the full number.
  • Age confirmation: that you confirmed you’re 18+, and whether ID was checked on delivery. We don’t copy or store your ID.
  • Technical data: a session cookie to keep you signed in and a basket cookie so your basket is saved. We don’t use advertising cookies.

Why we use it (lawful bases)

  • To fulfil your order (contract): shopping, delivery, payment, receipts, contacting you about swaps.
  • To meet legal duties (legal obligation): age-restricted sales, tax and accounting records.
  • To run and improve the service (legitimate interests): preventing fraud, understanding which products people need.
  • Marketing: only if you ask for it. You can stop at any time.

Who we share it with

Only the services we need to run ebag.im: Stripe (payments), Resend (email), Netlify (website hosting), Neon (database) and Cloudflare (image storage). Your shopper and driver see your name, phone, address and order to do their jobs. We never sell your data.

How long we keep it

Account data until you delete your account. Order and payment records for six years for tax purposes, after which they’re deleted or anonymised.

Your rights

You can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent. You can delete your account yourself from Your details. For anything else, email info@ebag.im and we’ll reply within a month.

Complaints

Please talk to us first. You can also complain to the Isle of Man Information Commissioner (inforights.im), or, if you’re in the UK, the Information Commissioner’s Office (ico.org.uk).

International transfers

Some of our service providers process data outside the Isle of Man and UK. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.