Privacy Policy

We take your privacy seriously and only collect what we need to run the shop. This policy explains what we collect and your rights under the UK GDPR and the Data Protection Act 2018. The data controller is the company named in the footer.

What we collect

• Order information — your name, email, delivery address, phone number and order details. Card payments are processed by Stripe; we never see your full card number.
• Newsletter — if you subscribe, your email address and the date you consented.
• Technical data — essential cookies needed to operate your basket. We do not run advertising or third-party analytics trackers.

Why we use it, and our lawful basis

• To fulfil your order and provide customer support — performance of a contract.
• To meet accounting and tax obligations — legal obligation (we keep order records for six years as HMRC requires).
• To send you our newsletter, if you asked — consent, which you can withdraw at any time.

Who we share it with

We share data only with the processors that help us operate: our payment provider (Stripe), our delivery carrier, and our hosting provider. Each acts on our instructions under a data-processing agreement. We never sell your data.

How long we keep it

Order records are kept for six years to satisfy HMRC. Newsletter data is kept until you unsubscribe. Everything else is kept only as long as needed.

Your rights

You have the right to access, correct, erase, restrict or object to our use of your data, and to data portability. To exercise any of these, email hello@minza.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Contact

For any privacy question, write to hello@minza.co.uk.