Privacy policy

Privacy Statement

-----

1. What we do with your information

When you purchase something from our store, we collect the personal information you give us, such as your name, address and email address, so we can process and deliver your order.

When you browse our store, we also automatically receive your computer’s internet protocol (IP) address. This helps us understand your browser and operating system and improve your experience.

If you give us permission, we may also use your information to send you:

• Emails about our store, new products and updates

• SMS messages about our store, new products and updates

We only use your personal information where we have a lawful basis under the GDPR, such as:

• To perform a contract (for example, to process and deliver your order)

• To comply with a legal obligation

• With your consent (for example, marketing emails and SMS)

• For our legitimate interests (for example, to prevent fraud or improve services)

2. Consent

How do you give consent?
When you provide personal information to complete a transaction, verify payment details, place an order, arrange delivery, or process a return, you consent to us collecting and using it for that purpose.

If we want to use your information for anything else, such as marketing, we’ll either ask you directly for your express consent or give you a clear way to say no.

How can you withdraw consent?
You can withdraw consent at any time by:

• Clicking ‘unsubscribe’ in a marketing email

• Replying ‘STOP’ to a marketing SMS

• Contacting us at ciao@mustardmade.com

Some customer support replies may be generated with the help of AI (through our Gorgias AI Agent service). These are clearly marked as automated and are always based on the information you provide and our support knowledge base. We only use this service where we have a lawful basis under the GDPR.

3. Disclosure

We may disclose your personal information if required by law or if you breach our Terms of Service.

Some of our service providers (such as Shopify, Google, Meta/Facebook, and Gorgias AI Agent) may store or process data outside the EEA. Where data is transferred outside the EU, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or adequacy decisions where available.

4. Shopify

Our store is hosted on Shopify Inc. They provide the platform that allows us to sell our products to you.

Your data is stored through Shopify’s secure data storage, databases and application.

Payment processing
If you choose a direct payment gateway, Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase data is kept only as long as necessary to complete the transaction and then deleted.

All direct payment gateways follow PCI-DSS standards, which help ensure secure handling of credit card information.

For more details:

• Shopify Terms of Service

• Shopify Privacy Statement

5. Third-party services

We use trusted third-party providers (for example, payment processors, shipping companies, email and SMS platforms).

These providers will only collect, use and disclose your information to the extent needed to perform the services they provide. However, they may have their own privacy policies, and some are based overseas.

We also use Gorgias AI Agent to assist with customer support. This service uses the information you provide (such as your name, contact details, and order information) to help answer questions quickly and accurately. Gorgias and its subprocessors (such as large language model providers like OpenAI and Anthropic) process this data securely on our behalf, do not use it to train their models, and delete it once the request is complete.

When you leave our site or are redirected to a third-party site, this Privacy Policy no longer applies.

Google Analytics
We use Google Analytics to understand visits and page views.

6. Security

We take reasonable steps to protect your personal information from misuse, loss, or unauthorised access.

If you provide credit card details, the data is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. While no method of online transmission or storage is completely secure, we follow PCI-DSS requirements and generally accepted practices.

7. Cookies

We use cookies and similar technologies to improve your browsing experience, analyse performance, and deliver relevant ads. Non-essential cookies (such as analytics and marketing) will only be used with your consent.

Examples include:

• Google Analytics – understand visits and page views

• Google Ads – show relevant ads and track conversions

• Facebook Pixel – show relevant ads and track conversions

Shopify cookies include:

• _session_id — stores session details

• _shopify_visit — records visits (30 minutes)

• _shopify_uniq — counts store visits (daily)

• cart — stores cart contents (2 weeks)

• _secure_session_id — stores secure session data

• storefront_digest — used if store is password protected

• PREF — set by Google to track visits

Our site also uses cookies to track cart activity, which may trigger cart reminder messages via SMS.

Managing cookies:
You can manage or opt out of cookies through your browser settings. You can also install Google’s “Analytics Opt-Out Browser Add-On.”

8. Age of consent

By using this site, you confirm that you are at least the age of majority in your country of residence, or that you are the age of majority and have given us consent to allow your minor dependents to use this site.

9. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Request access to the personal information we hold about you

• Request corrections if your information is inaccurate or incomplete

• Request deletion of your personal information in certain cases (“right to be forgotten”)

• Restrict or object to how we process your information

• Request data portability for information you provided to us

• Withdraw consent where processing is based on consent

• Lodge a complaint with your local supervisory authority

To exercise your rights, contact us at ciao@mustardmade.com.

10. How long we keep your information

We keep personal information only as long as needed for the purposes described in this policy, or as required by law. When it’s no longer required, we securely delete or anonymise it.

11. Changes to this Privacy Policy

We may update this policy from time to time. Changes take effect once posted on this page. If we make significant changes, we’ll note that the policy has been updated.

If our business is acquired or merged, your information may be transferred to the new owners so we can continue to sell products to you.

12. Contact us

If you would like to access, correct, amend or delete any personal information we hold about you, make a complaint, or ask a question, please contact our Privacy Compliance Officer:

Email: ciao@mustardmade.com
Mail: Mustard Made UK Ltd, Forum 5S, The Forum Building, 74-80 Camden Street, NW1 0EG, United Kingdom