Privacy notice

We store your verified email address, an internal account identifier, session records, your saved bag and wishlist items, and your reservation items and statuses. Passwords are stored as salted, computationally expensive hashes, never readable passwords. Verification and password-reset links expire after 30 minutes. Password-reset tokens are hashed in storage. Session records are kept in the private database; the application does not store customer IP addresses or device details with them. We do not request your name, phone number, address or payment information for reservations.

We use this information to authenticate you, check availability, manage reservations, help with shopping enquiries, and send related emails, including new sign-in and password-change notifications. Vercel hosts the website, the configured PostgreSQL provider stores its private records, and Resend processes transactional emails. These service providers process information needed to provide their services. The shop's email provider also retains messages received at contact@reetcollections.com. Authorized store administrators can view registered accounts, saved bags, wishlists and reservation history. We do not sell customer information or enrol reservation customers in marketing lists.

Open reservations expire after 48 hours. Closed reservation records are deleted after 30 days. Accounts without activity for 90 days are deleted once they have no reservation records or active sessions. Scheduled cleanup removes expired verification/reset records and sessions. Security notification jobs are removed after seven days. Rate-limit counters use hashed identifiers and are removed after expiry. Cleanup runs periodically, so deletion may occur shortly after these periods.

Use Delete my account on your account page to delete the account, saved bag, wishlist and reservation records and release open stock holds. Already delivered emails, hosting logs and provider backups have separate retention periods; contact us about deletion of those records. Backup copies expire under the provider's configured retention policy.

An essential session cookie keeps you signed in. Guest bags are saved in this browser without an email address. When you sign in, your bag and wishlist are saved to your account so they can be restored on another visit or device. You can remove items at any time. Recently viewed items stay in the current page session. Hosting and email providers may process technical records such as IP addresses and delivery information to operate and secure their services.

To request access, correction or deletion, email contact@reetcollections.com. We may ask you to verify control of the account before acting on a request. Do not send payment card numbers or sensitive identification documents to us.