Privacy Policy

1. Who is responsible

UNIQUE WHOLESALE & DISTRIBUTION LIMITED, registered in England and Wales, company number 15678913, is the controller of information we use to operate Maeum. Registered office: 84 Wood Lane, London, Greater London, England, W12 0BZ. Contact hello@maeum.co.uk about privacy or your rights.

2. Details we collect and why

• Email subscriptions — consent Your first name, email, subscription choice, signup time, form source and consent/notice versions let us send Maeum emails and keep evidence of your choice. Signup creates a Shopify contact record and a website server record. It does not sign you into an account.
• Delivery-offer administration — legitimate interests Your subscription status, email, Shopify identifier, order history and discount-redemption information let us check eligibility, prevent repeat use and administer the limited MAEUMFREE offer. These are our interests in running the offer accurately. Signing up does not allocate one of its 50 redemptions.
• Orders and accounts — contract Contact details, billing/delivery addresses, items, payment status, order history and sign-in information let Shopify and us take the steps you request before buying, process and deliver orders, provide support and manage accounts. Full card details are handled by payment providers; Maeum’s website does not store them.
• Enquiries — contract or legitimate interests We use your contact details and messages to respond. Order enquiries support our contract; our interest in other enquiries is answering questions and managing customer relationships.
• Product reviews — legitimate interests If you submit a review, we store your chosen display name, rating, review text and submission time to check and publish feedback. Our interest is providing useful, genuine product feedback. Approved reviews are public; do not include private contact, payment or health information in them.
• Website security — legitimate interests Technical information such as IP address, browser information and request logs helps our website and hosting provider deliver pages, prevent abuse and investigate faults. Our interest is a secure, reliable website.
• Website analytics — consent If you allow analytics, Google Analytics processes device/browser information, cookie identifiers, page visits, shopping interactions and successful email-subscription events to help us understand and improve the website. We do not send your name, email, form contents, account codes or checkout tokens in these events. Analytics consent is separate from email consent and invitation preferences, and can be withdrawn in Cookie settings.
• Marketing measurement — consent If you separately allow Meta marketing cookies, Meta Pixel processes browser/device information, IP address, cookie and advertising-click identifiers, public page URLs, basket additions, checkout starts and successful newsletter-subscription events. This helps measure marketing performance and audiences on Facebook and Instagram. Our integration disables automatic matching of names/emails and form event discovery. You can withdraw this consent in Cookie settings; email subscription and Google Analytics consent do not enable it.
• Legal records — legal obligation Relevant order/accounting records support applicable tax, accounting and consumer-law duties. Records needed for legal claims may also be kept under our legitimate interests.

Sources include the forms, messages and checkout details you provide, technical information generated by website use, and subscription/order information from Shopify. Required fields are marked. Without necessary details, we cannot complete an order or signup.

3. Emails are your choice

Buying or signing in does not require marketing consent. Newsletter checkboxes start unticked. Unsubscribe using the link in a marketing email or contact hello@maeum.co.uk.

You can object to direct marketing at any time. We will stop using your information for that marketing. Withdrawal does not affect processing already lawfully carried out. Necessary order, payment and account messages are separate from marketing.

4. Who receives information

• Shopify Our product, checkout, account and email provider processes information for us and may act as a separate controller for its own services, such as Shop and Shop Pay. Read Shopify’s consumer privacy policy.
• Hostinger Our website host stores server-side signup records and processes hosting, infrastructure and support information. Read Hostinger’s privacy information and data processing terms.
• Google Analytics Google provides optional website measurement. Read Google’s privacy policy and Google’s data processing terms. Our website integration does not enable advertising personalisation or Google Signals.
• Meta Meta provides optional marketing measurement and may use received events with information it already holds about you under its own policies. Read Meta’s privacy policy and Meta’s Business Tools Terms.
• TikTok On our Shopify store and checkout, TikTok’s Standard browser pixel provides optional marketing measurement under Shopify’s analytics and marketing consent controls. It measures product views, search, basket, checkout, payment-information steps, registrations and completed payments using browser/device information, IP address, cookie identifiers and shopping-event information. Enhanced or Maximum sharing, Events API and automatic customer matching are not enabled. The separate Maeum website does not load this pixel. Read TikTok’s privacy policy.
• Payment, delivery and communications providers Providers receive relevant information for your chosen payment method, delivery or customer communications. Royal Mail or DPD receives the name, delivery address and relevant contact/order details needed to deliver your parcel and provide delivery updates.
• ShipWith (Disco Merchant) Our checkout delivery-rule provider uses postcode-based rules to hide unavailable delivery services. Its app has access to customer email and delivery addresses, device/activity information and shipping information for this service. Read Disco Merchant’s privacy policy.
• Advisers and authorities Accountants, legal advisers and public authorities may receive necessary information for advice or legal obligations.

We do not sell personal information. Instagram and TikTok links open separate services whose own notices apply.

5. Processing outside the UK

Providers operate internationally, so information may be processed outside the UK. Shopify’s arrangements include its Data Processing Addendum and UK provisions. Protection may involve an applicable adequacy decision or contractual safeguards, depending on the destination and service.

Contact hello@maeum.co.uk for the destinations and safeguards applicable to your information or a copy of relevant safeguards.

6. Retention

Our Google Analytics property keeps event-level data for 2 months and user-level data for 14 months. Its user retention period resets when a user returns with analytics consent. These settings apply to detailed data; aggregated reports can remain available for longer. Analytics cookies last up to 180 days and can be removed by choosing Reject optional cookies in Cookie settings.

• Customer accounts We keep the information needed to maintain your account while it remains in use. If you close your account or it becomes inactive, we assess what is still needed for outstanding orders, support, legal records and claims. Having an account does not require a newsletter subscription.
• Order and accounting records Records required for company accounting and tax are normally retained for six years from the end of the company financial year they relate to. A longer period can apply where the law requires it, a tax enquiry remains open or relevant records are needed for an unresolved dispute. This does not mean every account or marketing detail must be kept for six years.
• Newsletter subscriptions We use your contact details for marketing while your subscription and consent remain valid. Unsubscribing stops marketing without closing your customer account or deleting necessary order records. We may keep a limited record of your opt-out so that we do not accidentally contact you again, and proportionate evidence of consent and withdrawal where needed to demonstrate compliance or resolve a claim.
• Enquiries and security records We keep relevant records while responding to an enquiry or investigating a fault, abuse or security incident, and for any necessary follow-up or related claim. We assess the matter’s status, legal duties and the information still needed when deciding what to retain.
• Product reviews Approved reviews may remain published while relevant to the product. Unpublished submissions are retained while needed for moderation or a related dispute. Contact us if you want us to review or remove personal information in your review.
• Delivery offers Limited eligibility and redemption records may be retained while needed to administer the offer, prevent repeat redemption and resolve related queries or claims.

Information no longer needed for these purposes is deleted or anonymised following review. Retention is assessed by the type of record and its purpose; there is no single expiry date for every customer’s information.

Contact hello@maeum.co.uk to ask about retention or request deletion. We assess requests across Shopify and the website’s separate records, subject to lawful retention requirements, and explain where information must be retained.

7. Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent at any time.

Contact us to exercise a right. Proportionate identity checks may be necessary. Requests are normally answered within one month, subject to extensions or other rules allowed by law. You may complain to the ICO without contacting us first.

8. Device storage and security

Our Cookie Policy explains essential basket/checkout storage, optional invitation preferences, optional analytics and Meta marketing cookies. Cookie choices are separate from email consent.

The production website uses HTTPS. Server credentials stay out of browser code and customer records are outside public assets. Do not email card security codes or sign-in codes.

9. Changes

The date above identifies this notice version. We update it when relevant practices change. A new purpose requiring consent needs a separate choice.