Privacy Policy
Privacy Policy for Madley Melts
Effective Date: 01.06.25
Last Updated: 01.06.25
At Madley Melts (“we,” “us,” or “our”), your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Madley Melts
Email: madleymelts@gmail.com
We are the “data controller” for the purposes of the UK GDPR.
2. What Data We Collect
We may collect and process the following personal data:
a. Identity & Contact Information
Name
Email address
Phone number
Billing and shipping address
b. Transaction Information
Products purchased
Payment method (processed securely through third-party processors like Stripe or PayPal — we do not store card details)
c. Technical Information
IP address
Browser type and version
Device type
Operating system
d. Usage Information
Pages visited
Referring website
Time spent on the site
(Collected via cookies and analytics tools)
3. Lawful Basis for Processing
We process your personal data under the following lawful bases:
Contract: To fulfil your order or provide services you request
Consent: For sending newsletters or marketing communications
Legal Obligation: For accounting, tax, or compliance requirements
Legitimate Interests: To improve our website and customer experience
4. How We Use Your Data
We use your data to:
Process and deliver your orders
Communicate with you about your purchases or enquiries
Send marketing communications (if you’ve opted in)
Improve our website and services
Comply with legal obligations
5. Sharing Your Data
We do not sell your data. We may share it with:
Payment processors (e.g., Stripe, PayPal)
Courier services (e.g., Royal Mail, Hermes)
Website hosting or marketing service providers
Legal or regulatory authorities when required by law
All third parties must adhere to data protection regulations and may only process your data on our instructions.
6. International Transfers
If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions approved by the UK government.
7. How Long We Keep Your Data
We keep your personal data only as long as necessary for the purposes it was collected, including legal, tax, or accounting requirements. Typically, we retain order information for 6 years in line with UK tax law.
8. Your Rights
Under the UK GDPR, you have the right to:
Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request erasure (“right to be forgotten”)
Restrict or object to processing
Data portability (receive your data in a usable format)
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/concerns
To exercise any of these rights, contact us at: madleymelts@gmail.com
9. Cookies
We use cookies to improve your browsing experience, understand how our website is used, and provide relevant content. You can manage or disable cookies through your browser settings.
For more information, please see our [Cookie Policy].
10. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or your data, please contact:
Madley Melts
Email: madleymelts@gmail.com