Privacy Policy

We respect your privacy and comply with UK GDPR. This notice explains what we collect, why, and how you can exercise your rights.

Data We Collect

• Account & order details (name, addresses, email, phone).
• Payment confirmation from our payment providers (we do not store full card details).
• Operational data such as IP address, device/browser info, cookies (to run the basket, checkout and analytics).

How We Use Your Data (Lawful Bases)

• Contract: process and deliver your order, support and returns.
• Legitimate interests: fraud prevention, site security, service improvement.
• Consent: email newsletters (only if you opt in — you can unsubscribe at any time).
• Legal obligations: tax and accounting record-keeping.

Sharing

We share data only with essential processors: payment gateways, couriers, hosting and analytics providers — strictly for providing our services. We do not sell your data.

Retention

Order records are kept for up to 7 years (accounting). Newsletter data is kept until you unsubscribe or we delete inactive lists. Server logs rotate regularly.

Your Rights

You can request access, correction, deletion, restriction, portability or object to processing. Contact: privacy@mallowsource.com (or support@mallowsource.com).

Cookies

We use essential cookies for the cart/checkout and optional analytics cookies to improve the site. You can control cookies in your browser settings.

Updates

We may update this notice; the latest version will always appear here.