Privacy Policy

Last updated: 25 October 2026

This policy explains what personal information we collect when you use maccun.co.uk, how we use it and the choices you have. We may update it from time to time; the date above shows when it last changed.

What we collect

  • Your name, email address, phone number and billing and delivery addresses when you place an order.
  • Details of the orders you place with us.
  • Any messages you send us by email or WhatsApp.
  • Information about how you use our website, such as pages viewed and products added to your basket, only if you accept statistics cookies (see Cookies below).

We never see or store your full card details. Card payments are handled by Stripe, a PCI DSS level 1 certified payment provider.

How we use it

  • To process, send and support your orders, including returns and refunds.
  • To reply to your questions and keep a record of our correspondence.
  • To keep the accounting and tax records required by UK law.
  • To understand how our website is used so we can improve it, only if you accept statistics cookies.
  • To protect our shop and customers against fraud and misuse.

We rely on the following legal bases: performing our contract with you (your orders), complying with legal obligations (tax and accounting records) and our legitimate interests (customer service, security and fraud prevention) and your consent (statistics cookies). You can withdraw your consent at any time. We do not send marketing emails unless you have agreed to receive them.

Who we share it with

We never sell or rent your personal information. We only share what is necessary with:

  • Stripe, to take payments and help prevent fraud.
  • Google (Google Analytics), to measure how our website is used, only if you accept statistics cookies.
  • Royal Mail and other delivery companies, to deliver your parcel.
  • WhatsApp (Meta), if you choose to message us there. WhatsApp’s own privacy policy applies to those chats.
  • Our website hosting and email providers, who store and send information on our behalf.
  • Public authorities, where the law requires us to.

Some of these providers may process information outside the UK. When they do, they use safeguards recognised under UK data protection law.

How long we keep it

Order and invoice records are kept for as long as UK tax law requires, usually six years. Emails and WhatsApp messages are kept for as long as we need them to deal with your request.

Security

Our site uses HTTPS encryption, and access to customer information is restricted. Card details go straight to Stripe and never reach our servers.

Cookies

Cookies are small files your browser stores. We use essential cookies to run the shop. Statistics cookies (Google Analytics) are only set if you accept them in the cookie banner, and you can change your choice at any time using the Manage consent button on our website. Our Cookie Policy lists every cookie we use.

Essential cookies (always on)

Cookie Set by Purpose Lasts
woocommerce_cart_hash, woocommerce_items_in_cart WooCommerce Keep track of what is in your basket Session
wp_woocommerce_session_* WooCommerce Keep your basket and checkout details between pages 2 days
__stripe_mid, __stripe_sid Stripe Process card payments securely and prevent fraud 1 year / 30 minutes
cmplz_*, wp_consent_* This site Remember your cookie choices 1 year

Statistics cookies (only with your consent)

Cookie Set by Purpose Lasts
_ga, _ga_CL34D38718 Google Analytics Count visits and see which pages and products are viewed, added to the basket and ordered 2 years

If you do not accept statistics cookies, Google may still receive limited, cookieless signals (for example that a page was viewed) without identifiers, as part of Google Consent Mode. You can also block or delete cookies in your browser settings, but the basket and checkout will not work without essential cookies.

Your rights

Under UK data protection law you can ask us, free of charge, to:

  • give you a copy of the personal information we hold about you;
  • correct anything that is wrong or incomplete;
  • delete your information where we are not legally required to keep it;
  • restrict or object to how we use it;
  • send your information to you or another organisation in a portable format.

To make a request, email sales@maccun.co.uk. We will reply within one month.

If you are not happy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.