PRIVACY POLICY
PRIVACY POLICY
1. INTRODUCTION
This privacy notice provides you with details of how we collect and process your
personal data through your use of our site https://muubaa.com including any
information you may provide through our site when you purchase a product or
service, sign up to our newsletter, or take part in a prize draw, award, or competition.
By providing us with your data and using this site to make a purchase, you
warrant to us that you are over 18 years of age.
Muubaa Trading Ltd is the data controller responsible for the collection, processing,
and protection of your personal data when you visit our website, create an account,
or make a purchase from our online store. We are officially registered with the
Information Commissioner’s Office (ICO). We are fully committed to handling your
personal information in strict compliance with the UK Data Protection Act, the UK
GDPR, and relevant international data protection laws.
If you have any questions, concerns, or requests regarding this privacy policy or how
we manage your personal information, you can contact our data team directly at:
Email: customerservice@muubaa.com
Postal Address: Office 196, 58 Peregrine Road, Hainault, Ilford, IG6 3SZ,
United Kingdom
If you are not happy with any aspect of how we collect and use your data, you have
the right to complain to the Information Commissioner’s Office (ICO), the UK
supervisory authority for data protection issues (www.ico.org.uk). We should be
grateful if you would contact us first if you do have a complaint so that we can try to
resolve it for you.
It is very important that the information we hold about you is accurate and up to date.
Please let us know if at any time your personal information changes by emailing us
at customerservice@muubaa.com or logging into your account at muubaa.com.
2. WHAT DATA DO WE COLLECT ABOUT YOU
Personal data means any information capable of identifying an individual. It does not
include anonymised data. We may process certain types of personal data about you
as follows:
Identity Data: May include your first name, maiden name, last name,
username, marital status, title, date of birth, and gender.
Contact Data: May include your billing address, delivery address, email
address, and telephone numbers.
Financial Data: Includes payment card details. We do not store or retain your
full payment card details on our servers; all online payments are securely
processed and handled directly by our third-party payment gateways (such as
Stripe, PayPal, and any Buy Now Pay Later options like Klarna/Clearpay if
selected).
Transaction Data: May include details about payments between us and other
details of purchases made by you.
Technical Data: May include your login data, internet protocol (IP)
addresses, browser type and version, browser plug-in types and versions,
time zone setting and location, operating system and platform, and other
technology on the devices you use to access this site.
Profile Data: May include your username and password, purchases or
orders, your interests, preferences, feedback, and survey responses.
Usage Data: May include information about how you use our website,
products, and services.
Marketing and Communications Data: May include your preferences in
receiving marketing communications from us and our third parties and your
communication preferences.
We may also process Aggregated Data from your personal data, but this data does
not reveal your identity and as such in itself is not personal data. An example of this
is where we review your Usage Data to work out the percentage of website users
using a specific feature of our site. If we link the Aggregated Data with your personal
data so that you can be identified from it, then it is treated as personal data.
Sensitive Data
We do not collect any Sensitive Data about you. Sensitive Data refers to data that
includes details about your race or ethnicity, religious or philosophical beliefs, sex
life, sexual orientation, political opinions, trade union membership, information about
your health, and genetic and biometric data. We do not collect any information about
criminal convictions and offences.
Where we are required to collect personal data by law, or under the terms of the
contract between us, and you do not provide us with that data when requested, we
may not be able to perform the contract (for example, to deliver goods or services to
you). If you don’t provide us with the requested data, we may have to cancel a
product or service you have ordered, but if we do, we will notify you at the time.
3. HOW WE COLLECT YOUR PERSONAL DATA
We collect data about you through a variety of different methods including:
Direct interactions: You may provide data by filling in forms on our site (or
otherwise) or by communicating with us by post, phone, email, or otherwise,
including when you order our products or services, create an account on our
site, subscribe to our service or publications, request marketing to be sent to
you, enter a competition, prize draw, promotion, or survey, or give us
feedback.
Automated technologies or interactions: As you use our site, we may
automatically collect Technical Data about your equipment, browsing actions,
and usage patterns. We collect this data by using cookies, server logs, and
similar technologies. We may also receive Technical Data about you if you
visit other websites that use our cookies.
Third parties or publicly available sources: We may receive personal data
about you from various third parties and public sources as set out below:
o Analytics providers such as Google Analytics based outside the UK.
o Social media tracking pixels (such as Meta or TikTok pixels) used for
digital fashion advertising.
o Search information providers based inside the UK or EU.
o Contact, Financial, and Transaction Data from providers of technical,
payment, credit assessment, and delivery services (such as Stripe,
PayPal, Klarna, or Royal Mail/couriers).
o Identity and Contact Data from publicly available sources such as
Companies House and the Electoral Register.
o In-person interactions where you have given us your name and email
address on a handwritten list at an event or have handed us your
business card.
4. HOW WE USE YOUR PERSONAL DATA
We will only use your personal data when legally permitted. The most common uses
of your personal data are:
Where we need to perform the contract between us.
Where it is necessary for our legitimate interests (or those of a third party) and
your interests and fundamental rights do not override those interests.
Where we need to comply with a legal or regulatory obligation.
Generally, we do not rely on consent as a legal ground for processing your personal
data, other than in relation to sending marketing communications to you via email or
text message. You have the right to withdraw consent to marketing at any time by
emailing us at customerservice@muubaa.com.
Purposes for Processing Your Personal Data
Set out below is a description of the ways we intend to use your personal data, the
legal grounds on which we will process such data, and our legitimate interests where
relevant.
Purpose / Activity Type of Data Legal Basis for Processing
To register you as a new
customer
(a) Identity
(b) Contact Performance of a contract with you
To process and deliver your
order including:
(a) Manage payments, fees, and
charges
(b) Collect and recover money
owed to us
(a) Identity
(b) Contact
(c) Financial
(d)
Transaction
(e) Marketing
& Comms
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to
recover debts due to us)
To manage our relationship with
you including:
(a) Notifying you about changes to
our terms or privacy policy
(b) Asking you to leave a review or
take a survey
(a) Identity
(b) Contact
(c) Profile
(d) Marketing
& Comms
(a) Performance of a contract with you
(b) Necessary to comply with a legal
obligation
(c) Necessary for our legitimate interests (to
keep our records updated and study how
customers use our products/services)
To enable you to partake in a
prize draw, competition, or
complete a survey
(a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing
& Comms
(a) Performance of a contract with you
(b) Necessary for our legitimate interests (to
study how customers use our
products/services, to develop them and grow
our business)
To administer and protect our
business and website
(a) Identity
(b) Contact
(a) Necessary for our legitimate interests (for
running our business, provision of
(including troubleshooting, data
analysis, testing, system
maintenance, support, reporting,
and hosting of data)
(c) Technical administration and IT services, network
security, to prevent fraud)
(b) Necessary to comply with a legal
obligation
To deliver relevant website
content and advertisements to
you and measure the
effectiveness of the advertising
(a) Identity
(b) Contact
(c) Profile
(d) Usage
(e) Marketing
& Comms
(f) Technical
Necessary for our legitimate interests (to
study how customers use our
products/services, to develop them, to grow
our business and to inform our marketing
strategy)
To use data analytics to improve
our website, products/services,
marketing, customer
relationships, and experiences
(a) Technical
(b) Usage
Necessary for our legitimate interests (to
define types of customers for our products
and services, to keep our site updated and
relevant, to develop our business and to
inform our marketing strategy)
5. INTERNATIONAL DATA TRANSFERS
Many of our external third parties (such as cloud hosting providers, e-commerce
infrastructure platforms, and payment processors like PayPal or Stripe) are based
outside the UK, so their processing of your personal data will involve a transfer of
data outside the UK.
Whenever we transfer your personal data out of the UK, we ensure a similar degree
of protection is afforded to it by ensuring at least one of the following safeguards is
implemented:
We will only transfer your personal data to countries that have been deemed
to provide an adequate level of protection for personal data by the UK
government.
Where we use certain service providers, we may use specific contracts
approved for use in the UK which give personal data the same protection it
has in the UK (the UK International Data Transfer Agreement or Addendum).
6. DATA SECURITY
We have put in place appropriate security measures to prevent your personal data
from being accidentally lost, used or accessed in an unauthorised way, altered or
disclosed. In addition, we limit access to your personal data to those employees,
agents, contractors and other third parties who have a business need to know. They
will only process your personal data on our instructions and they are subject to a
duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach
and will notify you and any applicable regulator of a breach where we are legally
required to do so.
7. DATA RETENTION
We will only retain your personal data for as long as necessary to fulfil the purposes
we collected it for, including for the purposes of satisfying any legal, accounting, or
reporting requirements.
To determine the appropriate retention period for personal data, we consider the
amount, nature, and sensitivity of the personal data, the potential risk of harm from
unauthorised use or disclosure of your personal data, the purposes for which we
process your personal data and whether we can achieve those purposes through
other means, and the applicable legal requirements.
By law, we have to keep basic information about our customers (including Contact,
Identity, Financial and Transaction Data) for 6 years plus the current financial
year (7 years total) after they cease being customers for UK tax (HMRC) purposes.
8. YOUR LEGAL RIGHTS
Under certain circumstances, you have rights under data protection laws in relation
to your personal data. These include the right to:
Request access to your personal data (commonly known as a "data subject
access request").
Request correction of the personal data that we hold about you.
Request erasure of your personal data ("the right to be forgotten").
Object to processing of your personal data where we are relying on a
legitimate interest.
Request restriction of processing of your personal data.
Request the transfer of your personal data to you or to a third party.
Withdraw consent at any time where we are relying on consent to process
your personal data.
If you wish to exercise any of the rights set out above, please contact our data team
at customerservice@muubaa.com. You will not have to pay a fee to access your
personal data; however, we may charge a reasonable fee or refuse to comply if your
request is clearly unfounded, repetitive, or excessive.