Privacy Policy – MallCart
Last Updated: [01/04/2025]
At MallCart, accessible via https://mallcart.co.uk, we are steadfast in our commitment to preserving the confidentiality, integrity, and security of your personal information. This Privacy Policy outlines our data collection practices, usage protocols, retention policies, and your rights under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR).
1. Identity and Contact Details of the Data Controller
The data controller for the purposes of this Privacy Policy is:
MallCart
Lancashire, United Kingdom
✉️ [email protected]
📞 1800 97 97 69
2. Nature of Data Collected
We may, in the course of your interaction with this website, collect and process the following categories of personal data:
- Identifying information including name, contact number, and postal/email addresses
- Financial data including payment method and transaction history (processed externally via PCI-DSS compliant third-party gateways)
- Technical identifiers such as IP address, browser type, device specifications, time zone settings, and usage data
- Marketing and communication preferences where applicable
- User-generated content, including reviews, comments, and uploaded media (if any)
3. Legal Basis for Processing
We process your data under the following lawful bases:
- Contractual necessity – to fulfil orders and provide customer services
- Legal obligation – to comply with statutory requirements
- Legitimate interests – to optimise website performance and detect fraud
- Consent – where explicitly provided, such as for marketing communications
4. Comments and Gravatar Integration
When visitors submit comments, we collect the data provided in the comment form, including the user’s IP address and browser user-agent string, to assist in automated spam detection. An anonymised string derived from your email may be transmitted to the Gravatar service to ascertain if you are a registered user thereof. Their privacy policy is available at: https://automattic.com/privacy. Upon approval, your profile image may be publicly associated with your comment.
5. Media Uploads
Should you choose to upload media content to the site, you are strongly advised to ensure that any embedded location metadata (such as EXIF GPS data) is removed, as visitors may extract such data from downloaded images.
6. Cookies and Tracking Technologies
This website utilises cookies and similar technologies to:
- Facilitate login persistence and user session continuity
- Store user preferences and display settings
- Enable basic site functionality and analytics
Cookies related to user login sessions, comment preferences, and content editing may persist for durations ranging from one day to two weeks, contingent upon user interaction. You retain the ability to manage cookie settings via your browser configuration.
7. Embedded Third-Party Content
Certain content on this website (e.g. videos, articles, images) may originate from external domains. Such embedded content behaves in accordance with the external site’s own privacy practices, which may include cookie deployment and user interaction tracking. MallCart disclaims responsibility for third-party data practices and recommends reviewing their respective privacy policies.
8. Disclosure of Data to Third Parties
MallCart does not engage in the commercial sale of personal data. However, we may disclose data to the following processors or categories of recipients where necessary:
- Payment gateways (e.g. PayPal, Stripe) for secure transaction handling
- Courier services for order fulfilment
- Anti-fraud and spam detection tools
- Legal authorities where mandated by law
In the event of a password reset request, your IP address may be included within the corresponding email for security auditing purposes.
9. Data Retention Periods
- Comment metadata is retained indefinitely to facilitate automated approval of subsequent comments.
- Registered user account data (where applicable) is retained until the user requests deletion or the account remains inactive beyond a reasonable threshold.
- Data retention periods may also be governed by legal, regulatory, or operational requirements.
10. Your Statutory Rights
Pursuant to applicable data protection laws, including the UK GDPR, you are entitled to the following rights:
- Right to access the personal data we hold about you
- Right to rectification of inaccurate or incomplete data
- Right to erasure (“right to be forgotten”)
- Right to data portability
- Right to object to processing or withdraw consent (where applicable)
To exercise any of these rights, you may contact us directly at [email protected]. We shall respond within the legally mandated timeframe.
11. Data Transfer and International Processing
Although MallCart is based in the United Kingdom, certain data processors or hosting providers may reside in jurisdictions outside of the UK. We ensure that any such transfers are conducted in accordance with recognised safeguards and standard contractual clauses where applicable.
12. Security Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- SSL encryption protocols
- Limited access to personal data
- Secure authentication for admin-level users
Despite these efforts, no transmission method over the internet is entirely secure, and we advise you to take standard precautions when submitting personal data online.
13. Automated Processing and Profiling
MallCart does not engage in any automated decision-making or profiling that has legal or significant effects on individuals.
14. Changes to This Policy
We reserve the right to amend or update this Privacy Policy at any time. Modifications will be published on this page, and where appropriate, notified to you via email or prominent notice on our website.
15. Contact and Complaints
Should you have any queries or wish to raise a complaint regarding the handling of your data, please contact:
Data Protection Officer
MallCart
Lancashire, United Kingdom
✉️ [email protected]
📞 1800 97 97 69