Privacy Policy

This Privacy Policy explains how 4Lesstech (“we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you visit our website, browse our catalogue, place an order, or otherwise interact with our services. It applies to all visitors and customers, whether you shop as a guest or with a registered account.

By using our store you agree to the practices described here. If you do not agree, please do not use the service. Where local law grants you stronger protections, those protections take precedence over anything in this document.

This page is written to be readable first and legally complete second. The plain-language summaries at the top of the page are part of the policy, not a replacement for it.

We collect information in three ways: data you give us directly, data created when you use the store, and data we receive from trusted partners.

Account information

Your name, email address, password (stored only as a salted hash), and any phone number or profile details you choose to add.

Order & delivery information

Billing and shipping addresses, the items you buy, order history, and any notes or gift messages you include at checkout.

Payment information

Card and payment details are entered directly into our PCI-DSS compliant payment processor. We receive only a token, the card brand, and the last four digits — never the full card number.

Communications

Messages you send through support chat, contact forms, product reviews, or email, along with our replies.

Technical & usage data

IP address, device and browser type, pages viewed, referring URLs, and approximate location derived from your IP — collected automatically to keep the store secure and working.

We do not knowingly collect special-category data (such as health, biometric, or political information). Please do not send it to us through reviews or support messages.

We use your information only for the purposes below, and never for purposes that are incompatible with them:

• Process, fulfil, and deliver your orders, and manage returns or refunds.
• Create and secure your account, and authenticate you when you sign in.
• Provide customer support and respond to your enquiries.
• Send transactional messages such as order confirmations, shipping updates, and password resets.
• Send marketing emails where you have opted in — you can unsubscribe at any time.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Understand how the store is used so we can improve performance, accessibility, and product selection.
• Comply with legal, tax, and accounting obligations.

If you are in the United Kingdom or European Economic Area, we rely on the following legal bases under the GDPR:

Contract

Processing necessary to take and fulfil your order and provide the service you have asked for.

Legitimate interests

Running and securing our business, preventing fraud, and improving the store — balanced against your rights and freedoms.

Consent

Marketing communications and non-essential cookies. You may withdraw consent at any time without affecting prior processing.

Legal obligation

Keeping records required by tax, consumer-protection, and accounting law.

We use cookies and similar technologies to keep the store working and to understand how it is used. Our full Cookie Policy explains each category and how to control them.

• Strictly necessary cookies power sign-in, your cart, and secure checkout.
• Preference cookies remember choices such as currency, language, and theme.
• Analytics cookies help us measure traffic and improve the experience, only where permitted.

You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the store, including checkout, from working.

We share personal information only with the service providers that help us operate the store, and only to the extent each one needs to do its job. Every provider is bound by a contract that limits how they may use your data.

Payment processors

To take payment securely and screen for fraud. They handle card data under their own PCI-DSS certified systems.

Shipping & fulfilment

Carriers and logistics partners receive the name and address needed to deliver your order.

Cloud & media hosting

Infrastructure, database, and image-delivery providers that store and serve the site on our behalf.

Communications

Email and messaging providers that deliver transactional and (where opted in) marketing messages.

We may also disclose information when required by law, to enforce our terms, to protect the rights and safety of our users, or as part of a merger, acquisition, or sale of assets — in which case we will notify you of any change in ownership or use of your data.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We keep personal information only for as long as it is needed for the purpose it was collected, or as long as the law requires:

• Account data is kept while your account is active and deleted on request shortly after closure.
• Order and transaction records are retained for the period required by tax and accounting law (typically up to seven years).
• Support messages are kept only as long as needed to resolve your enquiry and maintain a service history.
• Marketing preferences are kept until you unsubscribe or ask us to erase them.

When data is no longer needed we either securely delete it or irreversibly anonymise it so it can no longer identify you.

Depending on where you live, you have some or all of the following rights over your personal information:

Access & portability

Request a copy of the data we hold about you, in a portable, machine-readable format.

Rectification

Ask us to correct information that is inaccurate or incomplete.

Erasure

Ask us to delete your data where we no longer have a lawful reason to keep it.

Restriction & objection

Object to or limit certain processing, including direct marketing and profiling.

Withdraw consent

Withdraw any consent you previously gave, at any time, without affecting earlier processing.

Non-discrimination

Exercise your rights without being denied service or charged a different price.

To exercise any of these rights, use the contact form linked at the bottom of this page. We will respond within the timeframe set by applicable law (usually within 30 days) and may need to verify your identity first. You also have the right to lodge a complaint with your local data-protection authority.

We take security seriously and apply technical and organisational measures appropriate to the risk, including:

• TLS encryption for all data in transit and encryption of sensitive fields at rest.
• Passwords stored only as salted, one-way hashes — never in plain text.
• Card data handled entirely by a PCI-DSS compliant processor; it never reaches our servers.
• Role-based access controls so staff can reach only the data they need.
• Continuous monitoring, regular updates, and prompt patching of our systems.

No method of transmission or storage is ever completely secure. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

Some of our service providers operate outside your country, so your information may be transferred internationally. When we transfer data out of the UK or EEA, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses to ensure your data remains protected to the same high standard.

Our store is intended for adults and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, use the contact form linked at the bottom of this page and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. When we make material changes we will update the “last updated” date at the top of this page and, where appropriate, notify you by email or a prominent notice on the site.

We encourage you to review this page periodically. Continuing to use the store after an update means you accept the revised policy.