Privacy Policy – Moo & Yoo Ltd
At Moo & Yoo, we are committed to protecting your privacy and ensuring that your personal data is handled securely and responsibly. This policy explains how we collect, use, and protect your information when you visit our website or purchase our products.
Who We Are
Moo & Yoo Ltd is a Scottish company supplying natural and ethical vegan hair and body care products. Our registered address is [insert business address, e.g., Edinburgh, Scotland, United Kingdom].
For data protection purposes, Moo & Yoo Ltd acts as the data controller of your personal information.
You can contact us at info@mooandyoo.com with any privacy-related queries.
How the Law Protects You
We process your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are only allowed to use your personal data if we have a valid reason to do so, such as:
-
To perform a contract with you (e.g. fulfilling your order).
-
To comply with legal or regulatory obligations.
-
Where you have given consent (e.g. for marketing).
-
For our legitimate interests (e.g. improving our services).
How We Collect Your Information
We may collect information when you:
-
Place an order on our website.
-
Create an account.
-
Subscribe to our newsletter.
-
Contact us by email, social media, or through our website.
-
Use our website (via cookies and analytics tools).
If you provide us with personal data about another person (for example, when purchasing a gift), you confirm that you have their consent to share that information with us.
What Data We Collect
The information we may collect includes:
-
Name, billing and shipping address, phone number, and email address.
-
Payment details (processed securely via our third-party providers; we do not store card data).
-
Order history and communication records.
-
IP address, browser type, and usage information through cookies.
How We Use Your Data
We use your personal data to:
-
Process and deliver your orders.
-
Communicate with you about your orders or account.
-
Improve our website and customer experience.
-
Send marketing emails where you have opted in.
-
Detect and prevent fraud.
-
Meet our legal and accounting obligations.
Third-Party Services
We may share your data with trusted third-party providers that help us operate our business, including:
-
Shopify – our website and e-commerce platform.
-
Klaviyo or similar – for marketing and email communications.
-
Royal Mail / DHL / 3PlukCore – for order fulfilment and delivery.
-
PayPal, Stripe or Shopify Payments – for secure payment processing.
These third parties only process your information on our behalf and in accordance with data protection laws.
Marketing Communications
We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the link in our emails or contacting us directly.
Cookies
Our website uses cookies to enhance your browsing experience and analyse traffic. Essential cookies are required for site functionality. Non-essential cookies (such as analytics and marketing) are only used if you consent via our cookie banner.
You can manage or disable cookies at any time in your browser settings.
Data Storage and Security
We use secure servers and encryption to protect your information.
Data may be transferred and stored outside the UK or EEA (for example, by Shopify), but only where adequate safeguards are in place, in compliance with UK data protection laws.
Your Rights
You have the right to:
-
Access the personal data we hold about you.
-
Request correction of inaccurate data.
-
Request deletion of your data (“right to be forgotten”).
-
Object to or restrict processing.
-
Withdraw consent for marketing at any time.
-
Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
To exercise your rights, please contact info@mooandyoo.com.
Data Retention
We will keep your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.
In most cases, we retain order and account data for up to seven years to meet our legal obligations.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Please check this page regularly for the latest version.
Would you like me to include a short version of your Cookie Policy (a few lines you can link in your Shopify footer) to match this updated privacy wording? It would keep you fully aligned with UK GDPR cookie consent expectations.