Privacy Policy

Privacy Policy

 

Last Updated: 2025

 

At MIAZ MEMORIES, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and disclose your personal data when you visit our website [Insert Website Address], purchase our products, or otherwise interact with us. We comply with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

 

1. Who We Are (Data Controller)

 

MIAZ MEMORIES is the data controller responsible for your personal data.  You can contact us regarding data protection matters at contact@miazcollection.co.uk

 

2. What Personal Data We Collect*

 

We collect the following types of personal data:

 

*   **Identity Data:** Name, title, date of birth (optional), username, password.

*   **Contact Data:** Billing address, delivery address, email address, telephone number.

*   **Financial Data:** Payment card details (processed securely through our payment gateway provider – we do not store these details directly), bank account details (if you choose direct debit).

*   **Transaction Data:** Details about purchases you have made and payments to and from you.

*   **Technical Data:** Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.

*   **Profile Data:** Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.

*   **Usage Data:** Information about how you use our website, products, and services.

*   **Marketing and Communications Data:** Your preferences in receiving marketing from us and our third parties and your communication preferences.

 

3. How We Collect Your Personal Data

 

We collect your personal data in the following ways:

 

*   **Direct Interactions:** You may provide us with your personal data by filling in forms on our website or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:

    *   Create an account on our website.

    *   Purchase our products.

    *   Subscribe to our newsletter or marketing communications.

    *   Enter a competition, promotion, or survey.

    *   Contact us with inquiries or complaints.

*   **Automated Technologies or Interactions:** As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. See our Cookie Policy (Section 10) for more information.

*   **Third Parties or Publicly Available Sources:** We may receive personal data about you from various third parties and public sources, such as:

    *   Analytics providers (e.g., Google Analytics).

    *   Advertising networks.

    *   Payment gateway providers.

 

4. How We Use Your Personal Data

 

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

 

*   Where we need to perform a contract we are about to enter into or have entered into with you.

*   Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

*   Where we need to comply with a legal or regulatory obligation.

 

Specifically, we use your personal data for the following purposes:

 

*   To process and fulfil your orders.

*   To manage your account.

*   To deliver customer support and respond to inquiries.

*   To personalize your experience on our website.

*   To send you marketing communications (where you have opted-in).

*   To improve our website and services.

*   To prevent fraud and illegal activities.

*   To comply with legal and regulatory requirements.

 

5. Legal Bases for Processing

 

Our legal bases for processing your personal data include:

 

*   **Consent:** We rely on your consent to send you marketing communications. You have the right to withdraw your consent at any time.

*   **Contract:** Processing is necessary for the performance of a contract with you (e.g., to fulfil your order).

*   **Legitimate Interests:** Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and freedoms.  Our legitimate interests include: providing and improving our services, marketing our products, preventing fraud, and ensuring the security of our website.

*   **Legal Obligation:** Processing is necessary for compliance with a legal obligation to which we are subject.

 

**6. Sharing Your Personal Data**

 

We may share your personal data with the following categories of recipients:

 

*   **Service Providers:**  We share your data with third-party service providers who provide services to us, such as payment processing, website hosting, data analytics, email marketing, and delivery services. We have contracts in place with these providers to ensure they protect your data.  Examples include: [List specific providers, e.g., Shopify (for website hosting and e-commerce platform).

*   **Professional Advisors:**  We may share your data with professional advisors, such as lawyers, accountants, and auditors.

*   **Government Authorities:** We may disclose your data to government authorities if required by law or legal process.

*   **Business Partners:** In limited circumstances, we may share data with business partners where necessary to provide a product or service you have requested.

 

**7. Data Security**

 

We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. These measures include:

 

*   Using encryption to protect your data in transit and at rest.

*   Implementing access controls to restrict access to your data.

*   Regularly monitoring our systems for security vulnerabilities.

*   Training our staff on data protection best practices.

 

**8. Data Retention**

 

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

 

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

 

Typically:

 

*   We retain order information for [Number] years for tax and accounting purposes.

*   We retain customer account information for as long as the account is active.  If an account is inactive for [Number] years, we may delete it.

*   We retain marketing contact information until you unsubscribe.

 

**9. Cookies**

 

We use cookies on our website to improve your browsing experience. A cookie is a small text file that is stored on your device when you visit our website. We use the following types of cookies:

 

*   **Strictly Necessary Cookies:** These cookies are essential for the operation of our website.

*   **Performance Cookies:** These cookies collect information about how you use our website, such as which pages you visit and how long you spend on each page.

*   **Functionality Cookies:** These cookies allow our website to remember your preferences, such as your language settings.

*   **Targeting Cookies:** These cookies are used to deliver advertisements that are relevant to you and your interests.

 

You can control cookies through your browser settings. You can block or delete cookies, but this may affect your browsing experience.

 

**10. Your Rights**

 

Under the GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

 

*   **The right to be informed:** You have the right to be informed about how we collect and use your personal data.

*   **The right of access:** You have the right to access your personal data that we hold.

*   **The right to rectification:** You have the right to have inaccurate personal data corrected.

*   **The right to erasure (right to be forgotten):** You have the right to have your personal data erased in certain circumstances.

*   **The right to restrict processing:** You have the right to restrict the processing of your personal data in certain circumstances.

*   **The right to data portability:** You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

*   **The right to object:** You have the right to object to the processing of your personal data in certain circumstances.

*   **Rights in relation to automated decision making and profiling:** You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

*   **The right to withdraw consent:** If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.

 

To exercise any of these rights, please contact us at [Insert Email Address].

 

**11. Complaints**

 

If you have any concerns about how we are handling your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator. You can contact the ICO.

 

**12. Changes to This Privacy Policy**

 

We may update this Privacy Policy from time to time. We will post any changes on our website.  We encourage you to review this Privacy Policy periodically.

 

**13. Contact Us**

 

If you have any questions or concerns about this Privacy Policy, please contact us at:

 

MIAZ COLLECTION

CONTACT@MIAZCOLLECTION.CO.UK