PRIVACY POLICY

INTRODUCTION

At Midfield of Dreams, we are committed to protecting your privacy and ensuring that your personal information is handled in compliance with the UK General Data Protection Regulation (UK GDPR). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you visit our website or purchase our products.

PERSONAL DATA

Personal data refers to any information that identifies you as an individual. This may include your name, email address, billing and delivery addresses, phone number, and payment information.

HOW WE USE YOUR INFORMATION

We collect and use your personal data for the following purposes:

Order Fulfilment: To process and deliver your orders.
Customer Support: To assist with any enquiries, requests, or complaints you may have.
Marketing Communications: To send you updates about new arrivals, special offers, and promotions, provided you have opted in to receive them.
Improving Our Services: To analyse website traffic and enhance your shopping experience.

LEGAL BASIS FOR PROCESSING

We process your personal data under the following legal bases:

Contractual Obligation: To fulfil our agreement to provide products or services to you.
Consent: When you have explicitly agreed to receive marketing communications.
Legitimate Interests: To improve our website and services, provided it does not override your rights.

DATA SHARING

We may share your personal data with trusted third-party service providers, such as:

Payment processors: To securely handle your transactions.
Delivery partners: To ensure your orders reach you promptly.
Analytics providers: To help us understand website usage and improve performance.

These third parties are required to protect your data and use it only for the purposes we specify.

DATA RETENTION

We will retain your personal data only for as long as necessary to:

Fulfil the purposes for which it was collected.
Comply with legal obligations.
Resolve disputes and enforce agreements.

YOUR RIGHTS

Under the UK GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of any inaccurate or incomplete data.
Deletion: Request the deletion of your personal data, subject to legal requirements.
Restriction: Request a limitation on how we process your data.
Portability: Receive your data in a portable format.
Objection: Object to processing based on legitimate interests or for marketing purposes.

To exercise your rights, please contact us at [insert email address].

SECURITY MEASURES

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, or loss.

COOKIES

For information about how we use cookies and similar technologies, please refer to our Cookie Policy.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we encourage you to review it regularly.

CONTACT US

If you have any questions or concerns regarding this Privacy Policy or your personal data, please contact us here.

Last updated: December 2024