Privacy

One, named diorite.cart. It is written the first time you add a stand to your cart and not before — opening a page, reading a policy or browsing all six stands sets nothing at all.

It holds a single identifier for a cart held by our commerce provider. Not your name, not your email, not what is in the cart, and nothing derived from you or your device. It is marked HttpOnly, so no script on any page — including ours — can read it, and it expires ten days after the cart was last touched, because the cart itself does.

It is strictly necessary to provide something you asked for, so there is no consent banner. Clearing your site data deletes it and empties your cart; nothing else is lost.

The moving field behind these pages has a display mode, and your choice of it is written to localStorage under the key diorite.field.mode.

It holds one short word. It never leaves your device, it is not sent with any request, and nobody here can read it. Clearing your site data removes it and nothing is lost but the preference.

Your browser still talks to one server: this one. Typefaces are the ones already on your system, the product images are served from this domain and resized here, and no script on any page contacts another host. The shop is queried from our server, not from your browser, so browsing this site does not announce you to anybody.

Two things cross that line, both of them visible to you when they happen. Pressing Checkout takes you to a page hosted by Shopify, on a Shopify domain, where their own privacy terms and their own cookies apply — your card details are entered there and never reach this site. And if you buy something, Shopify processes your name, delivery address, email and order in order to fulfil it, as our processor.

We see the order and the address it ships to, because we have to pack and post it. We do not see your card number at any point.

Any web server records the requests it answers — an IP address, a timestamp, a path, a browser string — for as long as its host keeps them. This site is not yet deployed anywhere, so its host is hosting provider — not set and its log retention is unknown. When a host is chosen, this section will name it and say how long the logs live.

There is no form on this site. Every way of reaching us is a plain address you write to from your own mail client — you write it, you send it, and nothing about it touches this server.

Once you do send it, we hold what you wrote: your email address, the device you named, anything else you chose to include. That mailbox is hosted by Google, so Google processes it in the ordinary way any mail provider processes mail. We keep correspondence while it is useful — an unanswered question, a live return, a device on the list to draw — and delete it when it is not.

We do not add you to a mailing list. There is no mailing list.

Checkout runs on Shopify. When you buy a stand they hold your name, delivery address, email address, the order itself and whatever their payment processor needs to take the money, for as long as tax and accounting rules require the record to exist — which in most of Europe is six years, and is not a period either of us can shorten.

We use that data to make, pack, post and, if it comes to it, refund your order. We do not profile you with it, we do not sell it, and we do not pass it to anyone but the carrier who has to find your door.

You are entitled to ask what personal data is held about you, to have it corrected, to have it deleted, to object to its processing and to receive a copy of it. In practice, for this site, the answer to the first question is almost always “an email thread you started, and nothing else” — and the second request we can usually act on the same day.

Ask at cam@diorite.pro. You also have the right to complain to your national data protection authority if you think we have handled something badly.

The data controller is SOULCORE LTD, at Flat 1, 132 Haverstock Hill, London NW3 2AY. Contact for anything on this page: cam@diorite.pro.