Privacy Policy

Last updated: 2 August 2026

Milhaus operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy explains how we collect, use and disclose your personal information under UK data protection law, including the UK GDPR and the Data Protection Act 2018, when you visit or use the Services, make a purchase, or otherwise communicate with us.

Personal information we collect

Depending on how you interact with the Services, we may collect:

  • Contact details, including your name, delivery address, billing address, phone number and email address.
  • Payment information, including payment card details, transaction details and payment confirmations. Payments are processed securely by our payment providers; we never see or store your full card number.
  • Account information, including your email, preferences and settings, if you create an account.
  • Order information, including the items you view, add to your bag, purchase, return or exchange, and your order history.
  • Communications with us, including messages you send through our contact and returns forms.
  • Device and usage information, including your device, browser, IP address and how you navigate the Services, collected through cookies and similar technologies.

How we use your personal information

  • Providing the Services: to process payments, fulfil and deliver orders, handle returns, refunds and exchanges, manage any account you create, and provide customer support.
  • Marketing: only with your consent, to send marketing emails, which you can unsubscribe from at any time using the link in any email.
  • Security and fraud prevention: to keep payments and the Services secure and to detect and prevent fraudulent or malicious activity.
  • Legal obligations: to comply with applicable law, keep required tax and business records, and respond to valid legal requests.

Our lawful bases

We process your personal information where it is necessary to perform our contract with you (for example, fulfilling your order), where we have a legitimate interest (for example, keeping the Services secure and improving them), where you have given consent (for example, marketing emails), and where we have a legal obligation (for example, tax record keeping).

How we disclose personal information

We share only what is necessary to run the store and complete your order, with our website hosting provider, delivery carriers, payment providers and other vendors who perform services on our behalf. Some of our service providers process data on secure servers outside the UK; where they do, UK-approved safeguards protect it. We may also disclose personal information to comply with legal obligations, to enforce our terms, or in connection with a business transaction such as a merger. We do not sell your personal information.

Third party websites

The Services may contain links to websites operated by third parties. We are not responsible for the privacy or security of those sites, and we recommend reviewing their policies.

Children

The Services are not intended for children, and we do not knowingly collect personal information about anyone under 18. If you are a parent or guardian of a child who has provided us with personal information, contact us using the details below and we will delete it.

Security and retention

No security measures are perfect, and we cannot guarantee absolute security, so please avoid sending sensitive information through unsecured channels. We keep personal information only as long as needed to provide the Services, maintain your account, comply with legal obligations such as tax record keeping, and resolve disputes.

Your rights

Under UK data protection law you have rights over your personal information, including the right to request access to it, to have it corrected or deleted, to restrict or object to our processing of it, to receive a copy of it in a portable format, and to withdraw consent at any time where we rely on consent. These rights are not absolute and exceptions may apply. To exercise any of them, contact us using the details below; we may need to verify your identity, and we will respond within one month.

You can opt out of marketing emails at any time using the unsubscribe link in any email. If you opt out, we will still send you non-promotional emails about your orders.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date.

Contact

For any questions about this Privacy Policy, or to exercise any of your rights, email contact@milhaus.co.uk. For the purposes of UK data protection law, MILHAUS LIMITED, trading as MILHAUS, is the data controller of your personal information.