Privacy Policy

Mischief Warren Privacy Policy (UK)
Last Updated: 14th March 2026

1. Who We Are
We are Kim Freemantle (trading as Mischief Warren) registered in England. You can contact us using the form on the "about" page.

2. The Data We Collect
We may collect and process:
• Identity Data – name, title, date of birth.
• Contact Data – email address, phone number, billing/delivery address.
• Account Data – username, preferences, communication history.
• Transaction Data – order details, payment references (we do not store full card details).
• Technical Data – IP address, device identifiers, browser type, time zone, cookie IDs.
• Usage Data – pages viewed, links clicked, session duration.
• Marketing & Communications Data – your preferences in receiving marketing from us.
[If applicable: • Special Category Data – e.g. health information you provide to us with your consent for [purpose].]

3. How We Collect Data
We collect data when you:
• Fill in forms, create an account, place an order, contact support or interact with us.
• Use our website, which collects data automatically using cookies and similar technologies.
• Receive a referral or we receive data from service providers that help us operate our business.

4. Why We Use Data (Purposes) And Lawful Bases
We use personal data to:
• Provide our products/services, process orders and payments, deliver and manage your account (Lawful basis: Contract).
• Respond to enquiries and provide support (Contract/Legitimate Interests).
• Send you marketing communications where permitted, with opt-out at any time (Consent/Legitimate Interests and PECR rules).
• Improve our website, products and services, and perform analytics (Legitimate Interests/Consent for non-essential cookies).
• Detect and prevent fraud and comply with legal obligations (Legal Obligation/Legitimate Interests).

Where we rely on legitimate interests, they include running and improving our business, delivering quality customer service, and promoting our products/services in a proportionate way. You can object to processing based on legitimate interests at any time.

5. Cookies
We use cookies and similar technologies for functionality, analytics and marketing. Where required, we will obtain your consent for non-essential cookies. You can manage your preferences at any time. For details, see our Cookie Policy.

6. Sharing Your Data
We may share personal data with:
• Service providers acting on our behalf (e.g. hosting, payment processing, delivery, IT support, CRM, email).
• Professional advisers (lawyers, accountants), regulators, or law enforcement where legally required.
We require all service providers to safeguard personal data and only process it according to our instructions.

7. International Transfers
Some providers are located outside the UK. Where we transfer data internationally, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or rely on an adequacy decision.

8. Data Security
We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, regular monitoring and vendor due diligence.

9. Data Retention
We keep personal data only for as long as necessary for the purposes described above, including to satisfy legal, accounting or reporting requirements. We then securely delete or anonymise it.

10. Your Rights
You have rights to access, rectify, erase, restrict, object to processing, and data portability, and the right to withdraw consent where processing is based on consent. To exercise these rights, contact us at [privacy@[domain].co.uk]. You also have the right to complain to the Information Commissioner’s Office (ICO).

11. Direct Marketing
We may send you marketing messages if you have opted in, or where permitted by law (e.g. soft opt-in). You can opt out at any time using the unsubscribe link in our emails or by contacting us.

12. Third-Party Links
Our website may include links to third-party sites or services. We are not responsible for their privacy practices.

13. Changes To This Policy
We may update this policy from time to time. The latest version will always be available on our website with the date of the most recent update.