PRIVACY POLICY (UK GDPR Compliant)
Last Updated: 10 August 2026

At MaMute Accessories, we are committed to protecting and respecting your privacy. This Privacy
Policy explains how we collect, use, and safeguard your personal data when you visit our website,
make a purchase, or communicate with us.

1.1 Important Information and Who We Are
• Data Controller: MaMute Accessories is the controller responsible for your personal data ("we," "us,"
or "our").
• Contact: If you have any questions about this policy, please contact us at: [Your Email Address].
• Regulatory Authority: You have the right to make a complaint at any time to the Information
Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
 

1.2 The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:
• Identity Data: Includes your first name and last name.
• Contact Data: Includes your billing address, delivery address, email address, and telephone number.
• Financial Data: Includes payment details. Note: We do not store full payment card details; these are
handled securely by third-party processors.
• Transaction Data: Details about transactions and accessories purchased.
• Technical Data: Includes IP address, browser type, and operating system collected via IONOS.

1.3 How We Use Your Personal Data
We use your data for: Contract Performance (delivering orders), Legal Obligation (tax record
compliance), and Legitimate Interests (answering customer service queries).

1.4 Data Sharing and Third-Party Services
We never sell your data. We share relevant records with:
• IONOS: Hosts our infrastructure, secure storefront database, and files.
• Royal Mail: Provided with your identity and address for tracking and transit.
• Payment Gateways: Secure authorization systems processing transaction funds.

1.5 Data Retention and Security
Appropriate security thresholds prevent accidental loss or exposure. Under UK tax regulations,
fundamental financial records (Identity, Contact, and Transaction data) are retained for 6 years
following transaction closure.
1.6 Your Legal Rights Under UK GDPR you retain the right to: Access your files, request Correction of errors, demand
Erasure, or object/Restrict Processing. Reach us via email to invoke these rights.