Privacy Policy

Introduction

This privacy policy is for this website and is served by Milo & Me and governs the privacy of its users who choose to use it.

The policy sets out the different areas where user privacy is concerned and outlines the obligations and requirements of the users, the website and the website owners. Furthermore, the way this website processes, stores and protects user data and information will also be detailed within this policy.

This website and its owners take a proactive approach to user privacy and ensure the necessary steps are taken to protect the privacy of its users throughout their visiting experience. This website complies with all UK national laws and requirements for user privacy.

Who we are

Milo & Me is a UK-based sole trader creating handcrafted crochet pieces. We are the data controller for the personal information collected through this website.

If you have any questions about how we handle your data, please contact us at care[at]miloandme.uk or at our registered address listed at the bottom of this page.

What information we collect

When you place an order, we collect the following personal data:

Your name
Delivery address
Email address
Order details
IP address (recorded automatically by our store platform for fraud prevention purposes)

We do not collect payment card details directly. Card information is handled securely by Stripe, as described in the Payments section below.

How we use your information

We use your personal data only for the following purposes:

To process and fulfil your order
To provide customer service and order updates
To manage refunds or returns
To prevent fraud and protect both you and us
To comply with our legal, tax, and accounting obligations

Your data is never sold, rented, or used for marketing without your explicit consent.

Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

Contract – to fulfil your order and provide the services you have requested
Legal obligation – to meet our tax and accounting requirements under UK law
Legitimate interests – to prevent fraud and protect the security of our store; we have assessed that these interests are not overridden by your rights and freedoms

Cookies

Our website uses cookies to make it function correctly. These include session cookies (to keep your cart active) and security cookies. No tracking or advertising cookies are set.

For full details of the cookies used on this website, please refer to our cookie policy.

Your personal data may shared only with the following third parties, solely to the extent necessary to operate our store:

Royal Mail or other delivery providers, to deliver your order,
Stripe, to process your payment securely,
WooCommerce (Automattic), our store platform, which processes order and account data on our behalf.

We do not share your data with any other third parties, and your data is never sold.

International data transfers

Stripe and WooCommerce (Automattic) may process some data outside the United Kingdom. Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses approved for use under UK data protection law.

How long we keep your data

We retain your personal data only for as long as necessary for our operational needs:

Order and transaction records are kept for up to 6 years from the end of the relevant accounting period, in line with HMRC requirements
Customer service correspondence is retained for up to 2 years, or until the matter is resolved
IP addresses logged for fraud prevention are retained for a shorter period in line with our platform’s default settings

When data is no longer needed, it is securely deleted.

Your rights

Under UK GDPR, you have the following rights:

Access – to request a copy of the personal data we hold about you
Correction – to request that inaccurate data is corrected
Deletion – to request that your data is deleted, where we are not legally required to retain it
Restriction – to request that we restrict how we process your data in certain circumstances
Objection – to object to processing based on legitimate interests
Portability – to receive your data in a structured, machine-readable format where processing is based on contract or consent and carried out by automated means

To exercise any of these rights, please contact us at care[at]miloandme.uk. We will respond within 28 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk, or by calling 0303 123 1113.

Payments

Payments are processed securely by Stripe. Stripe acts as a data processor and handles your payment details in accordance with PCI DSS standards. We do not have access to your full card details at any point.

Where Stripe processes data outside the UK, it applies appropriate safeguards including Standard Contractual Clauses.

For more information, see Stripe’s privacy policy.

External links

Although this website only looks to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website.

The owners of this website cannot guarantee or verify the contents of any externally linked website despite their best efforts. Users should therefore note they click on external links at their own risk. This website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.

Embedded content from other websites

Content on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Communication, engagement and actions taken through external social media platforms that this website and its owners participate in are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

Users are advised to use social media platforms wisely and communicate/engage with them with due care and caution regarding their privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

Changes to this policy

We may update this policy from time to time. This policy was last revised on 26 July 2026. We encourage you to check back periodically.

Contact

Milo & Me
care[at]miloandme.uk

20 Wiston Avenue, Chichester, PO19 8RJ

Users contacting this website and/or its owners do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use, as detailed in the Data Protection Act 1998. Every effort has been made to ensure a safe and secure form-to-email submission process, but it is advised that users using such form-to-email processes do so at their own risk.

This website and its owners use any information submitted to provide you with further information about the products/services they offer or to assist you in answering any questions or queries you may have submitted.