Privacy Policy

MYCHILLO Ltd

Last updated: June 2025 | Effective date: June 2025

1. Who We Are

MYCHILLO Ltd is a company registered in England and Wales. Our website is mychillo.com. For privacy enquiries, contact us at support@mychillo.com.

We are the data controller of your personal information collected through our website and services.

2. What Information We Collect

2.1 Information you provide

• Name, email address, and password when you create an account

• Billing and shipping address when you place an order

• Payment information (processed securely by our payment provider — we do not store card details)

• Communications you send us (email, chat, support tickets)

2.2 Information collected automatically

• IP address and device information

• Browser type and pages visited

• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information

We use your data to:

• Process and fulfil your orders

• Send order confirmations and shipping updates

• Manage your account

• Respond to customer service enquiries

• Send marketing emails (only with your consent, and you may opt out at any time)

• Comply with legal obligations

• Improve our website and services

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your data on the following bases:

• Contract performance: to fulfil your orders and manage your account

• Legal obligation: to comply with applicable laws

• Legitimate interests: to improve our services and prevent fraud

• Consent: for marketing communications — you may withdraw consent at any time

5. Sharing Your Information

We share your data only with:

• Shipping and logistics providers to deliver your orders

• Payment processors to handle transactions securely

• IT and hosting providers who support our platform

• Analytics providers (anonymised or pseudonymised where possible)

• Law enforcement or regulators where required by law

We do not sell your personal information to third parties.

6. International Transfers

We are based in the United Kingdom. When we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant authority.

7. How Long We Keep Your Data

• Order and transaction records: 7 years (for tax and accounting purposes)

• Account data: until you close your account

• Marketing preferences: until you opt out or withdraw consent

• Support enquiries: 3 years from the date of last contact

8. Cookies

We use cookies to make our website work, remember your preferences, and analyse how visitors use our site. You can manage your cookie preferences through the cookie banner on our website or your browser settings.

Types of cookies we use: essential, functional, analytics, and marketing cookies.

9. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Erase your data ("right to be forgotten")

• Restrict or object to processing

• Receive your data in a portable format

• Withdraw consent at any time (for consent-based processing)

• Lodge a complaint with the ICO (UK) at ico.org.uk or your national supervisory authority (EU)

To exercise any of these rights, contact us at support@mychillo.com.

10. Security

We use industry-standard security measures including SSL encryption, access controls, and regular security reviews to protect your data. However, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page shows when it was last updated.