Mitzi & Theobald Ltd respects your privacy and is committed to protecting your personal information.
This policy explains what information we collect, why we use it, who we share it with and the rights available to you under UK data protection law.
Who we are
Mitzi & Theobald Ltd is the controller responsible for your personal information. We are registered in England and Wales under company number 17251955. Our registered office is 10 Silverdale Road, Tadley, Hampshire, RG26 4JJ, United Kingdom. You can contact us at info@mitziandtheobald.com.
Information we collect
Depending on how you use our website, we may collect:
- identity and contact information, such as your name, billing address, delivery address, email address and telephone number;
- order and transaction information, including the products purchased, delivery choice, payment status, discounts, returns and refunds;
- communications you send to us by email or through any contact form that is enabled on the website;
- marketing preferences, including whether you have subscribed to our newsletter;
- technical and usage information, such as IP address, browser type, device information and website activity collected through cookies or similar technologies.
Payments are handled by the payment provider selected at the WooCommerce checkout. We do not store your complete card details on our website. Available payment methods and their providers are shown at checkout.
The identity, contact, payment-status and delivery information requested at checkout is needed to enter into and perform the purchase contract. If it is not provided, we may be unable to accept or fulfil an order.
How and why we use your information
We use personal information only where we have a lawful basis to do so:
- Contract: to process payment, fulfil and deliver orders, provide order updates, manage cancellations, returns and refunds, and respond to order-related enquiries.
- Legal obligation: to keep tax and accounting records, comply with consumer law, prevent unlawful activity and respond to lawful requests from public authorities.
- Legitimate interests: to operate and protect our website and business, prevent fraud, maintain records, improve customer service and understand the performance of our website where this does not override your rights.
- Consent: to send you marketing emails when you subscribe to our newsletter. You may withdraw consent at any time.
Who we share information with
We may share only the information necessary with:
- SiteGround, which hosts our WordPress website; service providers that support our WooCommerce store and checkout; and the provider used to manage and send our newsletter;
- the payment provider selected by the customer at checkout, such as PayPal or a card payment provider when enabled;
- delivery providers, including Royal Mail and UPS;
- professional advisers and service providers supporting our accounting, legal, technical and security needs;
- regulators, law enforcement bodies or other authorities where disclosure is required by law.
We do not sell your personal information.
International transfers
Some of our service providers may process information outside the United Kingdom. Where UK data protection law requires it, we rely on recognised safeguards designed to protect personal information, such as adequacy regulations or approved contractual protections.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected. Order and financial records are normally retained for six years to meet legal, tax and accounting requirements. Customer service correspondence is retained only as long as needed to resolve the matter and maintain appropriate records. Newsletter information is kept until you unsubscribe or we no longer need it, subject to retaining a minimal suppression record so that we can respect your request.
Security
We use appropriate organisational and technical measures, together with the security controls provided by our website host and payment providers, to protect personal information. No internet service is completely secure, but we review access and share information only where necessary for the purposes described in this policy.
Marketing
We send marketing emails only where permitted by law. You can unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting info@mitziandtheobald.com. Unsubscribing from marketing will not stop service messages about an order.
Cookies
Our website uses cookies necessary for functions such as security and remembering the contents of your basket during checkout. These cookies do not require consent. If we add optional analytics or marketing technologies later, we will update this policy and provide the choices required by law before using them.
Your rights
Depending on the circumstances, you may ask us to provide access to your personal information, correct it, erase it, restrict its use, transfer it, or stop using it. You may also object to processing based on legitimate interests and withdraw consent at any time. To exercise a right, email info@mitziandtheobald.com. We may need to verify your identity before acting on a request.
Children
Our books are created for children, but our shop and newsletter are intended for adults. We do not knowingly ask children to place orders or subscribe to marketing, and we do not use children's personal information for profiling or targeted advertising. If you believe a child has provided personal information directly to us, please contact us so that we can review and remove it where appropriate.
Automated decisions
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Complaints and changes
Please contact us first if you have a concern about how we use your information. You also have the right to complain to the UK Information Commissioner's Office at www.ico.org.uk. We may update this policy when our services or legal obligations change. The latest version will be published on this page with a revised update date.