Privacy Policy
This policy explains what personal information mellowstitch.com collects, why we collect it, who it is shared with, and what rights you have over it.
[TO BE COMPLETED — registered business name and address of the data controller]
Information we collect
When you place an order
- Name, billing address and shipping address
- Email address and, if you provide it, phone number
- Order contents, order value and order history
- The last digits and card type reported back by our payment provider — we never receive or store your full card number
When you create an account
- Your email address and password (stored encrypted)
- Saved addresses and past orders
When you contact us
- Your name, email address and the content of your message
Automatically
- IP address, browser type and pages visited, kept in standard server logs for security and troubleshooting
Why we use it
- To take payment for, produce, ship and support your order
- To send transactional emails: order confirmation, shipping confirmation, refund notices
- To answer your support messages
- To detect and prevent fraud and abuse
- To meet our legal, tax and accounting obligations
We do not sell your personal information, and we do not share it with third parties for their own marketing.
Who we share it with
- Our payment provider — to process payments and refunds. Your card details go to them directly, not to us.
- Our print and fulfilment partner — receives your name, shipping address and order contents so your item can be made and posted.
- The delivery carrier — receives your name and shipping address to deliver the parcel.
- Our web host and email provider — store this site’s data and send our emails on our behalf.
- Authorities — where we are legally required to disclose information.
[TO BE COMPLETED — name the actual payment provider, fulfilment partner, host and email provider once they are final]
Marketing email
[TO CONFIRM] We do not currently run a marketing newsletter. If one is added, you will only receive it if you opt in, and every message will contain an unsubscribe link.
Cookies
Cookies are covered separately in our Cookie Policy.
How long we keep it
Order and invoice records are kept for as long as tax and accounting law requires. Account data is kept until you ask us to delete your account. Support emails are kept for up to two years. Server logs are kept for a short period for security purposes.
Security
This site is served over HTTPS. Passwords are stored encrypted. Payment card data is handled by our payment provider and never stored on this website. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
Your rights
Depending on where you live, you may have the right to:
- Ask for a copy of the personal information we hold about you
- Ask us to correct information that is wrong
- Ask us to delete your information, where we are not required to keep it
- Object to or restrict certain uses of your information
- Ask for your information in a portable format
- Withdraw consent where our use is based on consent
To exercise any of these, contact us through the Contact Us page. We may need to verify your identity before acting on a request.
Children
This store is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
Changes
If this policy changes we will update this page and revise the date below.
Last updated: [TO BE COMPLETED]