Privacy Policy — Millfield & Co

This Privacy Policy explains how Millfield & Co (“we”, “us”, “our”) collects, uses, discloses and protects personal data when you browse our website and purchase our products.

Website: www.millfieldandco.co.uk
Contact email: support@millfieldandco.co.uk

1) Who we are

Millfield & Co is the data controller for personal data processed through this website and our online store.

2) Personal data we collect

We may collect:

• Identity & contact data: name, email address, telephone number.

• Order & delivery data: billing details, delivery address, postcode, city, country.

• Transaction data: items purchased, order values, payment status and transaction IDs (payments are processed securely by third-party providers; we do not store full card details).

• Technical & usage data: IP address, device and browser information, pages viewed, referral URLs, cookie identifiers and similar analytics data.

• Marketing preferences: your choices regarding newsletters, offers and cookies.

3) How and why we use personal data

We use personal data to:

• Process and deliver orders, provide invoices, updates and customer support.

• Operate, secure and improve our website and services (including analytics, troubleshooting and fraud prevention).

• Meet legal, tax and accounting obligations.

• Send marketing communications and personalise offers where you have consented or where permitted by law (you can opt out at any time).

Our legal bases include performance of a contract, compliance with legal obligations, consent, and our legitimate interests (for example, running a secure, effective online store).

4) Cookies

We use cookies and similar technologies to keep the site running, remember preferences, analyse traffic and, where allowed, support marketing. You can manage cookies via your browser settings and any on-site cookie controls. For details, see our Cookie Policy.

5) Sharing personal data

We share personal data only as needed with trusted service providers acting under our instructions, such as:

• e-commerce platform and hosting,

• payment processors,

• warehouses, couriers and fulfilment partners,

• customer support, analytics and marketing tools, and

• professional advisers or authorities where required by law.
  We do not sell personal data.

6) International transfers

If personal data is transferred outside the UK/EEA, we use appropriate safeguards to protect it, such as recognised contractual clauses or equivalent protections.

7) Data retention

We keep personal data only for as long as necessary for the purposes described above, including to meet legal, tax and accounting requirements. When data is no longer needed, we securely delete or anonymise it.

8) Security

We apply technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or loss. No system is completely secure, but we continually work to improve our safeguards.

9) Your rights

Subject to applicable law, you may have the right to:

• access and obtain a copy of your personal data,

• rectify inaccurate or incomplete data,

• erase data or restrict its processing in certain circumstances,

• object to processing based on legitimate interests or to direct marketing, and

• receive your data in a portable format where applicable.
  To exercise your rights, contact us at support@millfieldandco.co.uk. You can also lodge a complaint with the Information Commissioner’s Office (ICO).

10) Children

Our website is not intended for children under 16. We do not knowingly collect personal data from children.

11) Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page. Please review it periodically.

12) Contact

Questions about this policy or your personal data can be sent to support@millfieldandco.co.uk