Who we are
Version 2.0 | Weigh & Buy — Operated by Miltonica Garb Private Limited
Compliant with: UK GDPR | Data Protection Act 2018 | Privacy and Electronic Communications Regulations 2003
1. Who We Are and Our Role as Data Controller
Weigh & Buy, operated by Miltonica Garb Private Limited, is the data controller for the personal data you provide when using our website and services.
We are committed to protecting your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact for data matters:
- Email: support@miltonicagarb.com
- Phone: 07769 203857
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity data: full name
- Contact data: delivery address, billing address, email address, telephone number
- Transaction data: order details, purchase history, payment records
- Financial data: payment card details (processed securely by PCI-DSS compliant third-party providers — we do not store full card details)
- Technical data: IP address, browser type, device information, pages visited, referring URLs
- Marketing data: your preferences regarding receiving marketing from us (only where you have opted in)
- Communications data: emails or messages sent to us
3. How We Use Your Personal Data
We use your data for the following purposes and on the following legal bases under Article 6 UK GDPR:
| Purpose | Legal Basis (UK GDPR Art. 6) | |
|---|---|---|
| Process and fulfil orders | 6(1)(b) — Contractual necessity | Delivery, order tracking, refunds |
| Customer support & communications | 6(1)(b) — Contractual necessity | Responding to queries, complaints |
| Fraud prevention & security | 6(1)(f) — Legitimate interests | Preventing chargebacks, abuse |
| Legal & tax compliance | Legal & tax compliance | HMRC, accounting, regulatory reporting |
| Website improvement & analytics | 6(1)(f) — Legitimate interests | Understanding user behaviour |
| 6(1)(a) — Consent | 6(1)(a) — Consent | Only where you have opted in; opt-out any time |
4. Who We Share Your Data With
We share your data only where necessary and only with the following categories of recipients:
- Delivery and logistics partners — to fulfil your order
- Payment service providers — to process transactions securely (PCI-DSS compliant)
- IT and website service providers — to support our website and systems
- Legal or regulatory authorities — where required by law
We do not sell, rent, or trade your personal data to any third party for marketing purposes. Any third parties with whom we share data are required to handle it in accordance with UK GDPR and are contractually bound by data processing agreements.
5. International Data Transfers
Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with Chapter V of the UK GDPR, such as UK adequacy regulations, standard contractual clauses, or equivalent protections. We will not transfer data to countries without adequate protections without your explicit consent or a lawful basis.
6. Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Our retention periods are:
- Order and transaction data: 7 years (UK tax law requirements)
- Customer account data: for the duration of the relationship plus 2 years
- Marketing consent records: until consent is withdrawn plus 1 year
- Technical/log data: up to 12 months
Once data is no longer needed, it is securely deleted or anonymised.
7. Your Rights Under UK GDPR
Under UK data protection law, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at support@miltonicagarb.com:
- Right of access (Subject Access Request): to receive a copy of the personal data we hold about you
- Right to rectification: to have inaccurate data corrected without undue delay
- Right to erasure (‘right to be forgotten’): to have your data deleted where there is no lawful reason to retain it
- Right to restrict processing: to limit how we use your data in certain circumstances
- Right to data portability: to receive your data in a commonly used, machine-readable format
- Right to object: to object to processing based on legitimate interests or for direct marketing (at any time, no justification required for direct marketing)
- Right to withdraw consent: where processing is based on consent, you may withdraw at any time without affecting earlier processing
- Rights relating to automated decision-making: we do not make solely automated decisions that significantly affect you
We will respond to your request within one calendar month of receipt. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our website. In accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR:
- Strictly necessary cookies: set automatically and do not require consent (e.g., session management)
- Analytics cookies: set only with your consent via our cookie consent banner
- Marketing/advertising cookies: set only with your explicit consent
You can manage or withdraw cookie consent at any time via our Cookie Settings page or your browser settings. Withdrawing consent will not affect the lawfulness of earlier processing.
9. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted data transmission (SSL/TLS), access controls, and regular security reviews. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and you directly where required.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to you by email or a prominent notice on our website before taking effect. The date of the most recent revision is shown at the top of this document.
11. Contact & Complaints
- Email: support@miltonicagarb.com
- Phone: 07769 203857
- ICO (supervisory authority): ico.org.uk | 0303 123 1113