Privacy Policy

MISSIOX LIMITED (Company No. 16670499), registered in England and Wales, is the data controller responsible for your personal data. Our registered address is 98 Titchfield Road, Carshalton, SM5 1PU, United Kingdom.

We collect the following types of personal data:

• Contact details: name, email address, phone number, and delivery address when you place an order or create an account.
• Order data: products purchased, order history, payment method (processed securely by Stripe and PayPal — we never store full card details).
• Account data: email and password (encrypted) when you register for an account.
• Marketing data: your email address when you subscribe to our newsletter.
• Usage data: pages visited, device type, and approximate location (derived from IP) to improve site performance.
• Support data: messages sent via our chat widget, contact form, or support tickets.

We process your personal data for the following purposes:

• To process and fulfil your orders, including delivery and returns.
• To communicate with you about your orders, account, and customer service enquiries.
• To send marketing emails and newsletters where you have given explicit consent.
• To prevent fraud and protect the security of our platform.
• To improve our website, products, and services.
• To comply with our legal and tax obligations.

Under UK GDPR, we rely on the following lawful bases:

• Contract: to fulfil orders you place with us.
• Consent: when you opt in to receive marketing emails or create an account.
• Legitimate interests: to improve our services, personalise recommendations, and ensure security.
• Legal obligation: to maintain tax and accounting records as required by UK law.

We do not sell, trade, or rent your personal data to third parties. We share data only with trusted service providers who help us operate our business:

• Payment processors: Stripe and PayPal to securely process payments.
• Delivery partners: Royal Mail and DPD to ship your orders.
• Email service providers: to send order confirmations and newsletters.
• Cloud hosting: to host our website and store data securely.

All processors act under contract and are bound by confidentiality and data-protection obligations.

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (SSL/TLS), secure password hashing, and restricted internal access. All payment card data is handled entirely by our PCI-DSS-compliant payment processors — we never store full card numbers on our servers.

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy. Order and accounting records are retained for 6 years as required by UK tax law. Marketing data is retained until you unsubscribe. You may request deletion of your account and associated data at any time.

As a UK resident, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a machine-readable format.
• Right to object: object to processing based on legitimate interests or for marketing.
• Right to withdraw consent: withdraw consent at any time where we rely on it.

To exercise any of these rights, email us at hello@missiox.co.uk. We respond to all requests within 30 days.

We use essential cookies to enable core site functionality such as your shopping cart, login session, and security features. We do not use advertising cookies. You can control cookies through your browser settings; disabling them may affect some site features.

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections approved by the UK government.

Our website is not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page and revising the "Last updated" date.

If you have any questions about this Privacy Policy or wish to exercise your rights:

• MISSIOX LIMITED (Company No. 16670499)
• 98 Titchfield Road, Carshalton, SM5 1PU, United Kingdom
• Email: hello@missiox.co.uk
• Phone: 07467 492523

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.