1. Who we are

Mayflower Munchies is responsible for deciding how your personal information is used when you visit our website, place an order, create an account, sign up for marketing, or contact us.

If you have any questions about this Privacy Policy or how we use your information, please contact us at contact@mayflower-munchies.co.uk.

2. The information we collect

We may collect and use personal information including your name, billing and delivery address, email address, telephone number, order details, purchase history, account information, messages you send to us, and technical information about how you use our website.

This can include IP address, browser type, device type, pages visited, referral source, cookie data, analytics data, and marketing preferences where relevant.

3. How we use your information

We may use your personal information to process and fulfil orders, arrange delivery, manage customer accounts, respond to enquiries, handle refunds and complaints, keep business records, detect fraud, improve our store, and send marketing communications where you have agreed or where permitted by law.

4. Lawful bases

Depending on the reason for processing, we may rely on one or more lawful bases including contract, legal obligation, legitimate interests, and consent.

For example, we use contract to process your order, legal obligation to keep certain records, legitimate interests to run and improve our business and help prevent fraud, and consent for some marketing or cookie-related activities where required.

5. Accounts and marketing

If you create an account, we use your information to provide account features such as saved details, order history, and account access.

If you sign up for marketing emails, we may use your email address to send updates, offers, and promotional messages. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

6. Cookies, analytics and advertising

Our website may use cookies and similar technologies to keep the site working properly, remember preferences, measure performance, understand how visitors use the site, and support advertising or remarketing where used.

We currently use tools and services including Shopify, Google Analytics and Google Ads, and our store displays a cookie banner to help manage cookie preferences.

7. Who we share your information with

We may share personal information with service providers where needed to run the business and provide our services. This may include Shopify, payment providers, delivery providers, analytics services, advertising services, and other professional or legal advisers where necessary.

For payments, your information may be processed through providers such as Shopify Payments, PayPal, and Clearpay, depending on the payment method you choose.

8. International transfers

Some of the third-party providers we use may process or store personal information outside the UK. Where this happens, appropriate safeguards are expected to be used in line with applicable data protection law.

9. How long we keep your information

We keep personal information only for as long as we need it for the purposes described in this policy, including fulfilling orders, supporting customers, keeping business records, resolving disputes, preventing fraud, and meeting legal, tax, or accounting requirements.

Where we do not have a fixed retention period, we decide how long to keep information based on the reason we collected it, whether we still need it, and any legal or operational requirements that apply.

10. Your rights

Depending on the circumstances, you may have the right to ask for access to your personal information, ask us to correct it, ask us to erase it, ask us to restrict how we use it, object to certain processing, ask for data portability, and withdraw consent where consent is the basis we rely on.

If you want to exercise any of these rights, please contact us at contact@mayflower-munchies.co.uk.

11. Children

Our website is not intended for children to use independently, and we do not knowingly collect personal information directly from children without appropriate authority or supervision.

12. Complaints

If you have concerns about how we use your personal information, please contact us first and we will do our best to help.

You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK data protection regulator.