We are committed to safeguarding your privacy and ensuring your personal data is protected. This Privacy Policy explains the types of personal data we collect, how we use it, and your rights. It applies to our website, mobile experiences, and any services we provide (together, the “Site”).

Who we are
“MiPatch”, “we”, “us” or “our” refers to MiPatch, a UK-based business.
MiPatch contact: office.mipatch@gmail.com
Registered address: Osprey House, Bedwyn Mews, Reading, RG2 0PR, United Kingdom
Company number (if applicable): 16352981

How to contact us about data protection
For any privacy questions or to exercise your rights, email office.mipatch@gmail.com.

1. What is “personal data”?

Personal data is any information that identifies or can be used to identify you (e.g., name, address, email, phone, order details, payment references, device/IP data, preferences). Certain data (e.g., health data) is considered “special category” and requires extra protection; we only process such data where strictly necessary and lawful.

2. How we collect data

  • Directly from you: creating an account, placing an order, subscribing to newsletters, contacting us, completing surveys, or participating in promotions.

  • Automatically: cookies, pixels and similar technologies that record device information and Site usage.

  • From third parties: payment processors, delivery partners, analytics providers, advertising networks (where permitted), and anti-fraud services.

3. Why we use your data (lawful bases)

We process personal data under the UK GDPR and Data Protection Act 2018 on these bases:

  • Contract: to take/fulfil your orders, process payments, provide customer support, manage subscriptions, and deliver products.

  • Legitimate interests: to secure our Site, prevent fraud, improve our products/services, run analytics, and send relevant non-marketing service messages.

  • Consent: for email/SMS marketing and certain cookies/advertising technologies. You can withdraw consent at any time.

  • Legal obligation: to keep tax/transaction records and comply with applicable laws.

4. Marketing preferences

With your consent, we may send you news, offers, and updates. You can unsubscribe at any time via the link in our emails or by contacting office.mipatch@gmail.com.

5. Cookies & similar technologies

We use essential, performance, and (where you consent) marketing cookies to make the Site work, analyse usage, and personalise content/ads. You can manage preferences via your browser settings and our cookie banner/settings tool.

6. Sharing your data

We share data with trusted service providers who act on our instructions, including:

  • Payment processors

  • Fulfilment & delivery partners

  • IT, hosting & security providers

  • Analytics & advertising partners (consent-based where required)

We may also share data where required by law or to enforce our terms, and in connection with business transfers. We do not sell your personal data.

7. International transfers

Where data is transferred outside the UK/EEA, we put appropriate safeguards in place, such as the UK Addendum to EU Standard Contractual Clauses or other legally recognised mechanisms.

8. Data retention

We keep personal data only as long as necessary for the purposes set out above and to meet legal/accounting/reporting requirements. Typical retention:

  • Orders & tax records: up to 7 years

  • Marketing data: until you unsubscribe or your consent is withdrawn

  • Account data: while your account is active and for a reasonable period afterwards

9. Your rights (UK GDPR)

You may:

  • Access your data

  • Rectify inaccurate data

  • Erase data (where applicable)

  • Restrict or object to processing

  • Port data

  • Withdraw consent at any time (this won’t affect prior lawful processing)

To exercise rights, email office.mipatch@gmail.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

10. Children

Our Site is intended for adults. We do not knowingly collect data from children. If you believe a child has provided data, please contact us to delete it.

11. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and vendor due diligence.

12. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new “Last updated” date.