- We don't sell your data, and we don't run ad trackers.
- Your card details go to Stripe, never to us.
- Ask us at any time to see, correct or delete what we hold: hello@mildfeelings.com.
Who we are
The data controller is [Your full legal name, or company name], trading as Mild Feelings, [Your business address, UK]. Contact: hello@mildfeelings.com.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Name, email, delivery address, what you ordered | To make, post and support your order, and send order emails | Contract |
| Order and payment records | Accounts and tax | Legal obligation |
| Account details: name, email, password (stored scrambled, we can't read it) | So you can log in and see your account | Contract |
| Newsletter email address, when and where you signed up | To email you about new drops | Consent (unsubscribe any time) |
| Basic technical data: IP address, browser, pages requested | To keep the site running, secure and free of fraud | Legitimate interests |
We don't make automated decisions about you, and we don't build profiles for advertising.
Who we share it with
Only with companies that help us run the shop, under contracts that require them to protect it:
- Stripe: payments and fraud checks.
- Supabase: our database and logins, stored in London.
- Cloudflare: hosting and security for the website.
- Resend: sends our order and newsletter emails.
- Inkthreadable: our UK printer, who receives your name, address and order to print and post it.
- Royal Mail or the courier delivering your parcel.
Some of these companies process data outside the UK, for example in the US. When that happens, it's covered by UK adequacy regulations or the UK's approved data transfer agreements.
We'll share data with authorities only when the law requires it.
How long we keep it
- Order and payment records: 6 years, because HMRC requires it.
- Your account: until you ask us to delete it, or after 3 years of inactivity.
- Newsletter: until you unsubscribe. We keep a note that you unsubscribed so we don't email you again.
- Technical logs: a few weeks.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the data we hold about you;
- correct anything that's wrong;
- delete it (unless we must keep it, like tax records);
- restrict or object to how we use it;
- send it to you or another company in a common format;
- stop newsletter emails, at any time, using the link in every email.
Email hello@mildfeelings.com. We'll reply within a month. It's free.
If you're not happy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.
Cookies
The cookies we use are listed on the cookies page.
Changes
If we change this notice, we'll update the date at the top. If it's a big change, we'll tell you by email.