Your name, address, email and order history — the things required to send you a parcel and answer you about it. Card numbers are handled by the payment processor on their own page. We never see or store your card details.
We do not sell personal information, and we never will.
Who does receive your details, and why: the payment processor (Stripe) takes your card on its own page; the supplier who packs and ships your order receives your name, address and phone, because a parcel cannot be addressed without them; and the carrier receives the same in order to deliver it. That is the whole list. Nobody else gets your information, and none of it is used for anything but getting your order to you and answering you about it.
We use an advertising pixel to measure whether our ads work, and our own analytics to see how the store is used. Being specific, because vague is how this gets abused: we record the pages you open, how far you scroll and what you click, and our server logs your IP address, the approximate city and country it maps to, and your browser type. It is stitched into a step-by-step record of the visit so we can find what breaks. We do not record what you type, and card details never touch our servers.
You can block all of it with any tracker blocker and the store still works normally.
Write to us through the contact page and we remove what we hold, apart from records we are legally required to keep for tax purposes. You can also ask us for a copy of it, or tell us to stop the analytics described above — one message, no form to fill in twice, and a person answers within 24 hours on business days.