Privacy Policy

This Privacy Policy explains how MTK DIGITAL LIMITED ("we", "us", "our") collects, uses, and protects your personal information when you visit or shop with us. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, MTK DIGITAL LIMITED is the data controller responsible for your personal information.

SECTION 1 - PERSONAL INFORMATION WE COLLECT

When you make a purchase on our store, as part of our buying and selling process, we collect the personal information you provide to us, such as your name, address, and email address.

When you browse our store, we also automatically receive your computer's Internet Protocol (IP) address, which allows us to obtain further details about the browser and operating system you're using, as well as information about your visit, such as pages viewed and the site you were referred from.

Email marketing (if applicable): with your permission, we may send you emails about our store, new products, and other updates.

SECTION 2 - CONSENT

How do you obtain my consent?

When you provide us with personal information to complete a transaction, verify your payment card, place an order, arrange delivery, or return a purchase, we imply that you consent to our collecting and using it for that specific reason only.

If we ask for your personal information for a secondary reason, such as marketing, we will either ask you directly for your express consent, or provide you with an opportunity to say no.

How do I withdraw my consent?

If, after opting in, you change your mind, you may withdraw your consent for us to contact you, to continue collecting, using, or disclosing your information, at any time, by contacting us at support@mylittlenecklace.co.uk.

SECTION 3 - HOW WE USE YOUR INFORMATION

We use the personal information we collect to: process your orders and payments; communicate with you about your order, account, or customer service enquiries; send you marketing communications where you've consented to receive them; personalise and improve your experience on our site; detect and prevent fraud; and comply with our legal and regulatory obligations.

SECTION 4 - OUR LEGAL BASIS FOR PROCESSING

Under the UK GDPR, we rely on the following legal bases to process your personal information:

  • Performance of a contract - to process and fulfil your order, arrange delivery, and manage returns or refunds.
  • Consent - for marketing emails and SMS notifications, which you can withdraw at any time.
  • Legitimate interests - to operate, secure, and improve our website and services, and to prevent fraud, provided this does not override your rights and interests.
  • Legal obligation - where we need to retain or disclose information to comply with the law.

SECTION 5 - DISCLOSURE

We may disclose your personal information if required to do so by law, or if you violate our Terms of Service.

SECTION 6 - DATA RETENTION

We retain your personal information only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are generally kept for as long as needed to handle returns, warranty, and tax obligations, after which they are securely deleted or anonymised.

SECTION 7 - SHOPIFY

Our store is hosted on Shopify Inc., which provides us with the online e-commerce platform that allows us to sell you our products and services.

Your data is stored through Shopify's data storage, databases, and general Shopify application. Your data is stored on secure servers behind a firewall.

Payment

If you make a purchase through a direct payment gateway, Shopify stores your payment card information. This information is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is retained only as long as necessary to complete your order, and is deleted once the order is finalised.

All direct payment gateways adhere to the PCI-DSS standard, as managed by the PCI Security Standards Council, which is a joint effort of brands such as Visa, MasterCard, American Express, and Discover.

PCI-DSS requirements help ensure the secure handling of card data by our store and its service providers.

For more information, you can review Shopify's Terms of Service and Privacy Policy.

SECTION 8 - THIRD-PARTY SERVICE PROVIDERS AND INTERNATIONAL TRANSFERS

In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we're required to provide them for your purchase-related transactions. We recommend that you read their privacy policies so you can understand how they handle your personal information.

Some of these providers may be located outside the United Kingdom, including in the United States or the European Economic Area. Where we transfer your personal information outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or reliance on a jurisdiction covered by UK adequacy regulations.

Once you leave our site or are redirected to a third-party website or application, you're no longer governed by this Privacy Policy or our Terms of Service.

Links

You may be directed away from our website by clicking on links within our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECTION 9 - SECURITY

To protect your personal information, we take reasonable precautions and follow industry best practice to ensure it isn't inappropriately lost, misused, accessed, disclosed, altered, or destroyed.

If you provide us with payment card information, it's encrypted using the SSL security protocol and stored with AES-256 encryption. Although no method of transmission over the internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

SECTION 10 - COOKIES

We use cookies to help our site function properly and to understand how it's used. In line with the UK's Privacy and Electronic Communications Regulations (PECR), you can manage or withdraw your cookie preferences at any time through your browser settings or via our cookie banner where shown.

SECTION 11 - CHILDREN'S PRIVACY

By using this site, you confirm that you're at least 18 years old, or that you have your parent's or guardian's consent to use this website. We do not knowingly collect personal information from children under the age of 13, in line with UK GDPR requirements for children's data.

SECTION 12 - YOUR RIGHTS UNDER THE UK GDPR

If you are located in the UK, you have the right to:

  • request access to the personal information we hold about you;
  • request that we correct any inaccurate or incomplete information;
  • request that we delete your personal information, in certain circumstances;
  • request that we restrict the processing of your information;
  • request a copy of your information in a portable, machine-readable format;
  • object to our processing of your information, including for direct marketing; and
  • withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at support@mylittlenecklace.co.uk. We will respond to your request within one month, as required by law.

If you're unhappy with how we've handled your personal information, you also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

SECTION 13 - SMS AND NOTIFICATIONS

Text marketing and notifications: by subscribing to SMS notifications, you agree to receive automated, recurring marketing messages at the phone number provided. Consent is not a condition of purchase. Reply STOP to unsubscribe, or HELP for assistance.

SECTION 14 - CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it periodically. Changes and clarifications will take effect immediately upon being posted to the website. If we make material changes to this policy, we'll notify you here that it has been updated, so you're aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

If our business is acquired by or merged with another company, your information may be transferred to the new owners so we can continue to provide our products and services to you.

SECTION 15 - QUESTIONS AND CONTACT INFORMATION

If you would like to access, correct, amend, or delete any personal information we hold about you, file a complaint, or simply want more information, please contact our Privacy team at support@mylittlenecklace.co.uk.