Privacy Policy

This policy explains what personal information My Store collects when you visit our online store, place an order or contact us, how we use it, who we share it with, and the rights you have over it. We handle personal information in line with the UK GDPR and the Data Protection Act 2018, and with the EU GDPR where it applies to customers in the European Union.

Who we are

My Store is the data controller responsible for the personal information described in this policy. You can reach us at contact@mytrovora.store.

Information we collect

Information you give us:

• Name, email address, phone number, delivery and billing address
• Order details, including the items bought, sizes and any note you add to an order
• Account details if you create one, including a securely hashed password
• Messages you send us by email, through the contact form or about a return
• Your email address if you sign up for our newsletter

Information collected automatically:

• Device and browser type, operating system and screen size
• IP address and approximate location derived from it
• Pages viewed, products viewed, items added to the basket and referring website
• Cookies and similar technologies, described in our Cookie Policy

Information from others:

• Payment confirmations and fraud-screening results from our payment provider
• Delivery status and tracking updates from our carriers

We never see or store your full card number, expiry date or security code. Card details are entered directly with our payment provider, which is certified to the PCI DSS security standard.

How we use your information, and our legal basis

• To take and fulfil your order — processing payment, arranging delivery, sending order and dispatch confirmations, and handling returns, exchanges and refunds. Legal basis: performance of our contract with you.
• To provide customer service — answering your questions and resolving problems. Legal basis: performance of our contract, or our legitimate interest in helping people who contact us.
• To prevent fraud and keep the store secure — screening orders and protecting against misuse. Legal basis: our legitimate interest in protecting the business and our customers, and legal obligation.
• To meet our legal duties — keeping records of sales, tax and consumer-law obligations. Legal basis: legal obligation.
• To understand and improve the store — analytics on how the site is used. Legal basis: your consent for non-essential cookies, and our legitimate interest in improving our service.
• To send marketing — newsletters and offers, where you have asked for them or bought from us and have not opted out. Legal basis: consent, or our legitimate interest in telling existing customers about similar products. Every message has an unsubscribe link.

Who we share it with

We do not sell your personal information. We share it only with the service providers we need to run the store, and only with what they need to do their job:

• Our ecommerce and hosting platform, which stores order and account data on our behalf
• Payment providers, to take payment and process refunds
• Delivery carriers, to ship your order and keep you updated
• Email and messaging providers, to send order and service emails
• Analytics providers, where you have accepted analytics cookies
• Professional advisers, and public authorities where the law requires it

If the business is ever sold or reorganised, customer information may transfer to the new owner, who would remain bound by this policy.

International transfers

Some of our providers process data outside the UK and the European Economic Area. Where that happens, we rely on an adequacy decision for that country, or on approved contract terms (the UK International Data Transfer Agreement or the EU Standard Contractual Clauses) together with additional safeguards, so your information keeps the same level of protection.

How long we keep it

• Order and transaction records: six years after the end of the tax year they relate to, as required for tax and accounting
• Account details: for as long as your account is open, and deleted on request
• Customer service messages: up to three years after the matter is closed
• Marketing contact details: until you unsubscribe
• Analytics data: no longer than needed to understand how the store is used

Your rights

You have the right to:

• Ask for a copy of the personal information we hold about you
• Have inaccurate information corrected
• Ask us to delete information we no longer need to keep
• Ask us to restrict how we use it, or object to use based on legitimate interests
• Receive certain information in a portable format, or have it sent to another provider
• Withdraw consent at any time, including for marketing and non-essential cookies
• Not be subject to decisions made solely by automated means that significantly affect you

Write to contact@mytrovora.store and we will respond within one month. There is no charge. If you are not satisfied with our response, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or, if you live in the EU, to your national data protection authority.

Security

The store runs over an encrypted connection, payment details go directly to our payment provider, and access to customer data is limited to the people who need it. No system can be guaranteed completely secure, but we take these safeguards seriously and will tell you and the regulator if a breach ever puts your rights at risk.

Children

Our store is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us their details, contact us and we will delete them.

Changes to this policy

We may update this policy as our store or the law changes. The date at the top shows when it was last revised, and the version published here is the one that applies.

Contact

For anything to do with your personal information, email contact@mytrovora.store.