1. The short version
We collect what is needed to send you a parcel and answer your email. We do not sell data, we do not run advertising trackers, and the only things stored in your browser are your bag and a note of how you arrived.
2. What we collect
- Order details — name, delivery address, email, and what you bought. Necessary to fulfil the order.
- Payment — handled entirely by our payment provider. We never see or store your card number.
- Correspondence — emails you send us, kept so we can resolve the issue and remember the outcome.
- Basic usage — pages viewed and referrer, in aggregate, so we know which product pages are confusing.
3. What is stored in your browser
Two small values live in your browser's local storage and never leave your device: mm.cart, which holds your bag so it survives a refresh, and a short referrer note. No account is created, and clearing your browser data removes both. You can check for yourself in your browser's developer tools.
4. Why we are allowed to hold it
Order data is processed to perform our contract with you. Correspondence is processed on the basis of our legitimate interest in supporting customers. Aggregate analytics is processed on the basis of legitimate interest in improving the shop. Marketing email is only sent if you asked for it, and every message has a one-click unsubscribe.
5. Who sees it
- Our payment provider, to take payment and handle refunds.
- Our carrier, to deliver the parcel and provide tracking.
- Our email provider, to send order confirmations and replies.
- Our accountant, when the law requires records.
We do not sell, rent or trade personal data, and we do not share it with advertising networks.
6. How long we keep it
Order records are kept for seven years because tax law requires it. Support email is kept for three years. Marketing subscriptions are kept until you unsubscribe. Analytics is aggregated and retained for 12 months.
7. Your rights
Depending on where you live, you may have the right to ask for a copy of your data, to correct it, to delete it, to restrict how it is used, to object to processing, or to receive it in a portable format. Write to [email protected] and we will respond within 30 days. You also have the right to complain to your local data protection authority.
8. Where it is processed
Our providers are based in the United States and the European Union. Where data leaves the EU or UK, it is transferred under standard contractual clauses or an equivalent safeguard.
9. Children
This shop is not directed at children and we do not knowingly collect their data. If you believe a child has given us personal information, write to us and we will delete it.
10. Cookies
We do not use advertising or cross-site tracking cookies. Any cookie set by our payment provider exists only during checkout, to keep the payment session secure.
11. Contact
Questions about any of this, or a request about your data: [email protected]. We answer within one business day.