Privacy Policy

 

This Privacy and GDPR Policy explains how HCH Commerce Limited, operating as Millie & Jones ("we," "us," or "our"), collects, processes, and safeguards your personal information. By using our website or engaging with our services, you agree to the terms outlined in this policy.

We are committed to protecting your privacy and ensuring the confidentiality of your personal information in compliance with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

1. Data Processing Questions & Requests

If you have any questions, requests, or concerns, please contact us at:

2. Information We Collect

We collect and process various types of personal data to provide you with our services. This includes:

  • Identity Data: Name, title, and other identifiers.
  • Contact Data: Billing and delivery addresses, email addresses, and phone numbers.
  • Financial Data: Payment card details (processed securely via third-party payment processors).
  • Transaction Data: Details of orders, payments, and communications.
  • Technical Data: IP address, browser type, device information, and location data.
  • Marketing Preferences: Your preferences for receiving communications from us.
  • Profile Data: Order history, account details, and interactions with our website.

We may aggregate anonymized data (e.g., statistical or demographic) to improve our services. Aggregated data is not considered personal data under the law as it does not identify individuals.

3. Legal Bases for Processing

We process your personal data under the following legal bases:

  • Contractual Necessity: To fulfill your orders, process payments, and provide customer support.
  • Consent: For marketing communications and certain optional services.
  • Legitimate Interests: To enhance website functionality, improve services, and protect against fraud.
  • Legal Obligation: To comply with applicable laws or legal requirements.

4. How We Use Your Information

We use your personal data to:

  • Process and deliver your orders.
  • Communicate updates, promotions, and offers (with your consent).
  • Improve website functionality and customer experience.
  • Respond to inquiries and provide customer support.
  • Prevent fraud and ensure secure transactions.

5. Sharing Your Information

We do not sell or trade your personal information. However, we may share your data with trusted third parties, including:

  • Service Providers: Delivery couriers, payment processors, and IT support.
  • Legal Authorities: To comply with legal obligations or requests.
  • Marketing Partners: For remarketing and advertising, with your consent.

All third parties are contractually obligated to handle your data securely and in compliance with GDPR.

6. Data Retention

We retain your personal data only as long as necessary to:

  • Fulfill your orders and provide customer support.
  • Comply with legal and tax obligations.
  • Protect our legal rights and resolve disputes.

7. Cookies

We use cookies to improve your browsing experience, track website performance, and support marketing efforts. You can manage or disable cookies through your browser settings. For more details, see our Cookies Policy.

8. Data Security

We implement robust measures to protect your personal data from unauthorized access, loss, or misuse, including:

  • Secure Sockets Layer (SSL) encryption for transactions.
  • Regular security audits and updates.
  • Restricted access to sensitive data.

9. Your Rights

Under GDPR, you have the following rights:

  • Access: Request a copy of your personal data.
  • Correction: Update incomplete or inaccurate information.
  • Erasure: Request deletion of your data under certain conditions.
  • Objection: Opt out of specific data processing activities.
  • Data Portability: Receive your data in a structured, commonly used format.

To exercise your rights, contact us at privacy@millieandjones.co.uk. We may verify your identity before processing requests.

10. Children’s Privacy

Our services are not intended for children under 18. We do not knowingly collect personal data from children.

11. International Data Transfers

Your data may be processed outside the UK or EU. In such cases, we ensure that adequate safeguards are in place to protect your information, such as standard contractual clauses.

12. Complaints

If you are dissatisfied with how we handle your data, please contact us at privacy@millieandjones.co.uk. You also have the right to file a complaint with the UK Information Commissioner’s Office (ICO).

13. Policy Updates

We may update this policy from time to time. The updated version will be posted on our website with the revision date.

Contact Us

For questions about this policy or your personal data, please contact us at:

HCH Commerce Limited
Bury Farm, Church Street, Bovingdon, Hertfordshire, HP3 0LU