Privacy Policy

Privacy Policy

Last updated 19 October 2026

This policy explains what personal data Minalida (13 Freeland Park, Poole BH16 6FH, United Kingdom; contact@minalida.com) collects when you use minalida.com, why, who we share it with and what your rights are. We are the data controller for this data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

• Order details: your name, email address, phone number, billing and shipping address, the items you bought and the amount paid. We need these to fulfil your order and for our accounting records.
• Payment: your card or wallet details are entered on a form served by Stripe and sent directly to Stripe. We never see or store your full card number. We receive from Stripe only a confirmation, the last four digits and card brand, and the payment reference.
• Account: if you create an account, your login details and order history.
• Messages: emails, calls and reviews you send us.
• Usage data: your IP address, browser, pages viewed and the site that referred you, collected through cookies and similar technologies (see “Cookies”).

Why we use it

• To process and deliver your order and send you order, dispatch and tracking emails (performance of a contract).
• To answer your questions and handle returns and refunds (performance of a contract, legitimate interests).
• To prevent fraud and keep the Site secure, including Stripe’s fraud checks (legitimate interests, legal obligation).
• To keep accounting and tax records (legal obligation).
• To measure how the Site is used and improve it, and to measure advertising (legitimate interests).
• To send you marketing emails only if you have opted in; every email has an unsubscribe link (consent).

Who we share it with

We share personal data only with the service providers we need to run the store, each bound by a contract to process it only on our instructions:

• Stripe Payments Europe Ltd / Stripe Inc. – payment processing, including Apple Pay, Google Pay, Klarna and Afterpay offered through Stripe. Stripe’s own privacy policy applies to the data you enter on its payment form.
• Printing and shipping partners and carriers – your name, address and phone number so your rug can be produced and delivered.
• Hostinger – hosting of the Site, and LiteSpeed caching.
• WooCommerce (Automattic) – the store software; and WP Statistics – anonymised visitor statistics stored on our own server.
• Google – the Google Ads conversion tag, to measure which ads lead to purchases.
• TranslatePress – page translation, which does not receive personal data.

We may also disclose data where the law requires it. We do not sell personal data.

International transfers

Some providers (for example Stripe and Google) process data in the United States. Transfers outside the UK are protected by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by an adequacy decision.

How long we keep it

Order and payment records: 6 years after the order, as required by UK tax law. Account data: until you delete your account. Messages: 2 years after our last contact. Usage data: up to 14 months.

Cookies

Essential cookies keep your cart and checkout working and remember your currency and language; they cannot be switched off. We also use WP Statistics, which counts visits on our own server without sharing them, and the Google Ads conversion tag, which tells Google when an ad led to a purchase. You can block or delete these cookies at any time in your browser settings, or email us to object.

Your rights

You can ask us to access, correct, delete or restrict your personal data, object to processing based on our legitimate interests, receive your data in a portable format, and withdraw consent at any time. Email contact@minalida.com; we respond within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you live in the United States, to your state attorney general. California residents have the additional rights set out in the CCPA; we do not sell or share personal data as defined by that law.

Children

The Site is not aimed at children under 16 and we do not knowingly collect their data.

Changes

We will post any changes here and update the date at the top. Significant changes will be announced on the Site.