Privacy Notice

MML is committed to protecting your privacy and ensuring we operate in accordance with the EU General Data Protection Regulation ("GDPR") and other Relevant Data Protection Legislation.

By law, we need to let you know;

How we collect personal data about you
What we collect, how we use it, and how long we keep it
How we share this information
What rights you have to control your data
How to get in touch with us

This privacy notice sets out the above. It was last updated on the 5th November 2020.

What is "Personal Data"

Where we use the term personal data, we mean information that can connect to you (such as your name, eMail address, address, order information etc). There is a different category of sensitive personal data (such as political views, medical data etc) which obviously we do not collect under any circumstances.

Personal data collected from our Customers

When you order from us via the website, or by any other means, we collect some personal data about you in order to fulfil your order. This information typically includes; your full name, telephone number, address, and eMail address.

We use a third party (“Wix") to process your payment card details in order to complete your purchase that you made through the Website, who may disclose your personal data to trusted third parties (such as your bank) to verify your identity when making payment.

We may retain any correspondence including eMail and telephone calls, and use the personal data provided by any means to contact you for legitimate purposes relating to your purchase.

We use this information to perform our obligations under Contract to provide services to you and for the prevention and detection of fraud.

We will keep your information until we no longer have any need to communicate with you, in accordance with our Data Retention Policy.

Personal data for Marketing

We will use your personal data to send you occasional eMails that may be of interest to you in the legitimate interest of promoting our business and to keep you informed of future products. You may, at any time, object to the use of your data in this way. The eMails will be individual and sporadic in nature, we will not at any time add you to a bulk mailing list or disclose your details to any third party for marketing purposes.

Additionally, we may send marketing emails on the basis of consent (e.g. the mailing list which you can opt-in to during the checkout process). You have the right to withdraw this consent at any time.

In each marketing message we send, we provide the means to opt-out from that type of message, or all further marketing communications. You may also do this at any time by contacting us.

Information Sharing

We may share your personal data with other service providers to process personal information on our behalf. We use third party providers to help provide services to you, including to; communicate with you, process payments, and manage deliveries.

Where a third party is engaged by MML as a processor, we still control your personal data. We only share the data for the purpose which have been explained to you above. We ensure that all our third party processors give sufficient guarantees as to the security and confidentiality of your personal data.

Information is not transferred outside of the EU in most cases. On occasion, we may process your personal data in countries recognised by the European Commission as providing adequate privacy protection.

We may disclose personal data to third parties as may be required if compelled to do so by law, or for the purposes of fraud prevention, the prevention and detection of crime.

Protecting your Information

We will protect your personal data, and have strict procedures and measures in place to do so and employ suitably technical measures to protect your information where appropriate.

The personal information that we hold will be held securely to ensure no unauthorised disclosure or access. The Internet is not a secure medium. We have put in place various security measures, but you are advised to treat the internet as an insecure medium in all of your communications with us.

We do not store Credit Card information.

Data Retention

We will keep your data for an appropriate period of time, and not for a longer period than is necessary for the fulfilment of the purpose it was held for (as detailed above)

We will typically retain your name, address, billing address, products you have ordered, correspondence (including images etc) for a period of six years in accordance with legal requirements (e.g. accounting law).

If you have any concerns about how long specific information is held for, please don't hesitate to contact us for clarification.

Cookies

We (or our website provider, Wix) may use information tracking and gathering technologies that record and store information about users of the Website automatically. This can include using a "cookie" which would be stored on your browser. This information does not identify you personally.

We use this information to help us identify click stream patterns, to improve our Websites and to learn about the number of visitors to our Website and the types of technology our visitors use.

We use cookies based on your 'implied consent', which means that if you continue to use our website, we will assume you are happy for us to set cookies. If you aren't, there are a number of things you can do, including adjusting your computer's settings to block cookies, or to accept them only on confirmation from you.

Your browser's 'help' option will tell you how to adjust your cookie settings. However, please be aware that if you choose to delete or restrict cookies, some features of our website(s) may not work. You can also visit www.allaboutcookies.org, for more information about cookies and how to manage them.

Your Rights

You have lots of rights in respect of our processing of your personal data:

You have the right to be informed how we process your data (hence this notice)

You have the right to get a copy of the personal data we process about you.

You have the right to correct the personal data we hold if it is inaccurate.

You have the right to withdraw your consent freely where it has previously been given.

You have the right to erasure if:

the personal data is no longer necessary for the purposes it was collected for;
processing the personal data has been unlawful; or
there is a legal obligation under law for us to erase the data.

You have the right to request us to restrict the processing of your data if:

the personal data we have about you is inaccurate;
the processing is unlawful and you ask us to restrict the use of the personal data instead of erasing it;
we no longer need the personal data for the purposes of the processing, but if we still need it for the establishment, exercise or defence of legal claims; or
you have objected to the processing claiming that the legal basis of legitimate interest is invalid and are waiting for the verification of this claim.

You have the right to object to the processing of your data if:

you can show that your interests, rights and freedoms regarding the personal data outweigh our interest to process your personal data; or
we process your personal data for direct marketing purposes without your consent.

Please note that the same personal data about you may be used for more than one purpose; so if you object to processing of your data for some purpose, we may still have to retain this information and use it for other purposes as explained above (e.g. retaining order details for tax purposes)

You have the right to data portability:

for personal data that you provided to us; and
if the legal basis for the processing of the personal data is the fulfilment of contract or by consent.

We will send a copy of your data in a machine-readable format to you.

If you want to exercise any of these rights, please just contact us.

You also have the right to lodge a complaint about our processing with the Information Commissioner's Office.

General

Should you wish to obtain a copy of the personal data that we hold on you, please send an e-mail to martin@mmlx.co.uk. As soon as we are satisfied as to your identity, we will send to you a copy of all the data that we hold concerning you.

If you have a complaint regarding any breach of this privacy policy, please contact us at martin@mmlx.co.uk in the first instance.

Third Party Processors

We use the following third party processors when processing your personal data;

Google Apps (for eMail communication)
Wix (to provide the Website and accept payments)
Royal Mail (to facilitate dispatch and tracking of orders)