Privacy Policy

Privacy Policy for Madley Melts

Effective Date: 01.06.25
Last Updated: 01.06.25

At Madley Melts (“we,” “us,” or “our”), your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Madley Melts
Email: madleymelts@gmail.com
We are the “data controller” for the purposes of the UK GDPR.

2. What Data We Collect

We may collect and process the following personal data:

a. Identity & Contact Information

Name

Email address

Phone number

Billing and shipping address

b. Transaction Information

Products purchased

Payment method (processed securely through third-party processors like Stripe or PayPal — we do not store card details)

c. Technical Information

IP address

Browser type and version

Device type

Operating system

d. Usage Information

Pages visited

Referring website

Time spent on the site
(Collected via cookies and analytics tools)

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:

Contract: To fulfil your order or provide services you request

Consent: For sending newsletters or marketing communications

Legal Obligation: For accounting, tax, or compliance requirements

Legitimate Interests: To improve our website and customer experience

4. How We Use Your Data

We use your data to:

Process and deliver your orders

Communicate with you about your purchases or enquiries

Send marketing communications (if you’ve opted in)

Improve our website and services

Comply with legal obligations

5. Sharing Your Data

We do not sell your data. We may share it with:

Payment processors (e.g., Stripe, PayPal)

Courier services (e.g., Royal Mail, Hermes)

Website hosting or marketing service providers

Legal or regulatory authorities when required by law

All third parties must adhere to data protection regulations and may only process your data on our instructions.

6. International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions approved by the UK government.

7. How Long We Keep Your Data

We keep your personal data only as long as necessary for the purposes it was collected, including legal, tax, or accounting requirements. Typically, we retain order information for 6 years in line with UK tax law.

8. Your Rights

Under the UK GDPR, you have the right to:

Access the personal data we hold about you

Request correction of inaccurate or incomplete data

Request erasure (“right to be forgotten”)

Restrict or object to processing

Data portability (receive your data in a usable format)

Withdraw consent at any time, where processing is based on consent

Lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/concerns

To exercise any of these rights, contact us at: madleymelts@gmail.com

9. Cookies

We use cookies to improve your browsing experience, understand how our website is used, and provide relevant content. You can manage or disable cookies through your browser settings.

For more information, please see our [Cookie Policy].

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact:

Madley Melts
Email: madleymelts@gmail.com