Privacy policy

Last updated: 5 August 2026

Milk and Matters operates this store and website, including the related information, content, features, tools, products and services that we provide as part of our curated shopping experience (the “Services”). Milk and Matters is a sole trader business and is powered by Shopify.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, create an account, place an order, use our Services, sign up for marketing communications or communicate with us.

By using or accessing our Services, you acknowledge that you have read and understood how we process personal information as described in this Privacy Policy.

1. Personal Information We Collect

“Personal information” means information that identifies you or can reasonably be linked to you. Depending on how you interact with our Services, we may collect or process:

·       Contact and delivery information, including your name, billing address, delivery address, email address and telephone or mobile number.

·       Account information, including your name, email address, password, account preferences and account settings if you create an account.

·       Order and transaction information, including products you view, add to your basket or purchase, and information relating to orders, returns, refunds, exchanges and cancellations.

·       Payment-related information processed by payment providers such as Shopify Payments, PayPal, Klarna or other payment providers made available through our store.

·       Communications, including information contained in messages you send to us.

·       Device and technical information, including IP address, browser type, device information, operating system, network information and other technical identifiers.

·       Website usage and analytics information, including pages viewed, products viewed, searches, clicks, browsing activity and other interactions.

·       Marketing information, including your email address, mobile telephone number, marketing preferences and interactions with our marketing communications where you choose to receive them.

2. How We Collect Personal Information

·       Directly from you when you browse our website, create an account, place an order, subscribe to marketing, contact us or otherwise provide information.

·       Automatically when you use our website, including through cookies and similar technologies.

·       Through Shopify and other service providers that help us operate our store.

·       Through payment providers such as Shopify Payments and PayPal.

·       Through advertising and marketing platforms such as Meta (Facebook and Instagram), and potentially TikTok in the future.

·       From other third parties where permitted by law.

3. How We Use Personal Information

We use personal information only where we have a lawful reason to do so.

Providing and managing our Services

·       Process and fulfil orders and payments.

·       Arrange delivery.

·       Provide order confirmations and updates.

·       Manage returns, refunds and exchanges.

·       Provide customer support.

·       Create and manage customer accounts.

·       Remember relevant account and shopping preferences.

·       Operate, maintain and improve our website and Services.

We generally process this information because it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Marketing communications

Where permitted by law, we may use your email address or mobile telephone number to send marketing communications about Milk and Matters, including product updates, offers, launches and other promotional information.

Marketing emails and SMS messages will be sent in accordance with applicable UK marketing and privacy laws. Where consent is required, we will ask for consent before sending marketing communications. You can withdraw consent or unsubscribe at any time.

We may also use the limited “soft opt-in” rules where legally permitted, for example where an existing customer has purchased or discussed purchasing similar products and was given an opportunity to opt out.

Advertising and personalised marketing

We may use information about your interactions with our website to understand our customers and advertise our products. This may include Meta technologies, including Facebook and Instagram advertising tools, and potentially TikTok advertising and tracking technologies in the future.

Where cookies or similar technologies require consent, we will seek consent in accordance with applicable law.

Analytics and improvement

We may use Shopify analytics and other analytics technologies to understand website traffic and customer behaviour, identify trends, measure website performance and improve our products, Services and customer experience.

Security and fraud prevention

We may use personal information to help protect our website, customers and business, including to detect, prevent and investigate fraud, abuse, security incidents and other unlawful activity.

Legal and regulatory purposes

We may process personal information where necessary to comply with legal obligations, respond to lawful requests from authorities, establish or defend legal claims, resolve disputes or enforce our terms and policies.

4. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Some are necessary for the website to operate, including maintaining your basket, processing transactions, keeping the website secure and remembering essential settings.

We may also use analytics, advertising and other non-essential technologies to understand website use and support marketing and advertising. Where required by UK law, we will ask for consent before placing or using non-essential cookies and similar technologies.

You can manage your cookie preferences through the cookie controls provided on our website. The ICO’s current guidance confirms that consent is generally required for non-essential cookies and similar technologies, while certain strictly necessary technologies may be exempt.

5. How We Share Personal Information

We may share personal information with trusted third parties where necessary to operate our business and provide our Services. These may include:

·       Shopify, which hosts and powers our store and provides technology and infrastructure for transactions and customer features.

·       Payment providers, including Shopify Payments and, where offered, PayPal and Klarna, to process payments, prevent fraud and comply with legal requirements.

·       Delivery, fulfilment and logistics providers, where necessary to deliver orders or provide related services.

·       Marketing and advertising providers, including Meta (Facebook and Instagram) and potentially TikTok, subject to applicable law and your choices.

·       Analytics and technology providers that help us analyse website activity, operate our Services, provide customer support, send marketing communications, maintain security and improve our website.

·       Authorities or other parties where disclosure is necessary to comply with law, protect rights, investigate fraud or unlawful activity, or in connection with a sale, restructuring or transfer of the business.

We do not sell your personal information as a business activity.

6. Shopify

Our store is hosted by Shopify. Information submitted through our store may be processed by Shopify and transferred to third-party service providers where necessary to provide and improve the Services.

Shopify may also process information about interactions with our store and other Shopify merchants to provide certain Shopify features and services.

Shopify’s privacy information is available at https://privacy.shopify.com/en.

Shopify may process information in countries outside the UK. Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law.

7. Third-Party Websites and Services

Our website may contain links to websites, social media platforms or other services operated by third parties. Those services have their own privacy policies and terms, and we are not responsible for their privacy practices, security or content.

Our website may also include third-party features such as social media, advertising, payment or analytics technologies. Those third parties may collect or process information in accordance with their own policies.

8. Children’s Privacy

Our Services are not directed at children. We do not knowingly collect personal information from children who are not legally permitted to use our Services.

If you believe a child has provided us with personal information, contact hello@milkandmatters.com so we can consider appropriate steps to remove it.

9. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention depends on factors including whether you have an active account, whether information is needed to provide products or Services, whether it is needed for business and transaction records, whether we have a legal or regulatory obligation to retain it, whether it is needed to resolve disputes or enforce agreements, and whether you have asked us to delete it.

Some order and financial transaction information may need to be retained for longer periods to comply with legal, tax and accounting obligations. When information is no longer required, we will securely delete it or anonymise it where appropriate.

10. Your Data Protection Rights

Depending on your circumstances and subject to applicable law, you may have rights including:

·       Access to personal information we hold about you.

·       Correction of inaccurate or incomplete information.

·       Deletion of personal information in certain circumstances.

·       Restriction of processing in certain circumstances.

·       Objection to certain types of processing, including some direct marketing.

·       Data portability in certain circumstances.

·       Withdrawal of consent where we rely on consent.

These rights are not absolute and may be subject to legal exceptions. To exercise your rights, contact hello@milkandmatters.com. We may need to verify your identity before responding to certain requests.

We will respond to valid requests within the period required by applicable data protection law.

11. Marketing Preferences

You can change your marketing preferences at any time. For marketing emails, use the unsubscribe link in the message. For SMS marketing, use the opt-out method provided in the relevant message. You can also contact hello@milkandmatters.com for assistance.

Unsubscribing from marketing does not prevent us from sending essential communications relating to orders, purchases, accounts, security or other non-marketing matters.

12. International Transfers

Some service providers, including Shopify and other technology, payment, analytics, marketing and advertising providers, may process personal information outside the UK. Where personal information is transferred outside the UK, we will take appropriate steps to ensure the transfer complies with applicable UK data protection law and that appropriate safeguards are in place where required.

13. Data Security

We take reasonable steps to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure. However, no method of transmitting or storing information is completely secure, and we cannot guarantee absolute security of information transmitted to or from our website.

14. Complaints

If you are concerned about how we have handled your personal information, contact hello@milkandmatters.com first and we will consider your concern and try to resolve it.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe your personal information has been handled unlawfully.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, business practices or legal and regulatory requirements. When we make changes, we will update the “Last updated” date at the top of this policy.

16. Contact Us

Milk and Matters
Email: hello@milkandmatters.com

For data protection purposes, Milk and Matters is the data controller for personal information processed in connection with our Services, except where another organisation is independently responsible for processing information, such as Shopify or a payment provider acting in its own capacity.

Milk and Matters is operated as a sole trader business. Any legally required business ownership and service-address information will be provided separately where required by UK law.