1. Data Controller
Montaja Ltd (Company No. 17019846) acts as the data controller responsible for your personal data.
If you have any questions about this policy or how your data is handled, you can contact us at:
Email: info@montaja.co.uk
2. Information We Collect
We may collect and process the following personal data:
- Full name
- Billing and shipping address
- Email address and phone number
- Payment information (processed securely via Stripe; we do not store card details)
- Order history
- IP address and device information
3. How We Use Your Information
We use your personal data to:
- Process and fulfil your orders
- Deliver products and services
- Communicate with you regarding your orders
- Provide customer support
- Improve our website, services, and user experience
- Prevent fraud and ensure security
- Send marketing communications (only where you have opted in)
4. Legal Basis for Processing
We process your personal data based on:
- Contractual necessity (to fulfil your orders)
- Legal obligations (for tax and regulatory compliance)
- Legitimate interests (to improve services and prevent fraud)
- Consent (for marketing communications, where applicable)
5. Sharing Your Information
We may share your personal data with:
- Payment processors (such as Stripe) to process payments
- Delivery and logistics partners to fulfil orders
- Service providers (including hosting, analytics, and IT support)
- Vendors or sellers on our platform, where necessary to fulfil your order (such as your name, delivery address, and order details)
All third parties are required to process your data securely and in accordance with applicable data protection laws.
6. Data Retention
We retain your personal data only for as long as necessary:
- Order and transaction data: up to 6 years for legal and tax purposes
- Account data: until you request deletion
- Marketing data: until you unsubscribe or withdraw consent
7. Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Request transfer of your data (data portability)
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us at:
Email: info@montaja.co.uk
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or alteration.
Payments are processed securely through Stripe, and we do not store your card details.
9. International Data Transfers
Some of our service providers may process your data outside the United Kingdom.
Where this occurs, we ensure appropriate safeguards are in place to protect your personal data in accordance with UK data protection laws.
10. Children’s Privacy
Our website is not intended for individuals under the age of 18, and we do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
12. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact us at:
Email: info@montaja.co.uk