Privacy Policy

Last updated: July 2026 | Effective date: July 2026

1. Who We Are

MYCHILLO Ltd is a company registered in England and Wales. Our website is mychillo.com. For all privacy enquiries, please contact us at support@mychillo.com.

We are the data controller of the personal information we collect through our website and services. This means we are responsible for deciding how and why your personal data is used, and for keeping it safe.

2. What Information We Collect

2.1 Information you provide directly

Name, email address, and password when you create an account
Billing and shipping address when you place an order
Payment information — this is processed securely by our payment provider. We do not store your card number on our systems at any time
Any communications you send us, including emails, chat messages, or support tickets

2.2 Information collected automatically

IP address and device information (browser type, operating system)
Pages visited on our website and how you navigate between them
Cookies and similar tracking technologies (see Section 8 below)

3. How We Use Your Information

We use your personal data only for the following purposes:

To process and fulfil your orders, including coordinating dispatch and delivery
To send you order confirmations, shipping updates, and delivery tracking information
To manage your customer account
To respond to your enquiries and provide customer support
To send you marketing emails about new products or promotions — only with your explicit consent, and you may opt out at any time
To comply with our legal obligations
To improve our website, products, and services
To prevent fraud and maintain the security of our platform

4. Legal Basis for Processing (UK GDPR & EU GDPR)

We process your personal data on the following legal bases:

Contract performance: to fulfil your orders and manage your customer account
Legal obligation: to comply with applicable UK and EU laws (such as tax and accounting requirements)
Legitimate interests: to improve our services, prevent fraud, and communicate with you about your orders
Consent: for marketing communications — you may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us

5. Who We Share Your Information With

We share your personal data only where it is strictly necessary to deliver our services:

Fulfilment partner: your name and delivery address are shared with our European fulfilment partner to dispatch your order
Shipping carriers: delivery address and contact details are shared with the carrier responsible for delivering your order
Payment processors: your payment information is handled securely by our PCI DSS-compliant payment provider
Website and hosting providers: technical partners who support the operation of mychillo.com
Analytics providers: we may use anonymised or pseudonymised data to understand how our website is used
Legal authorities: where we are required to do so by law, court order, or regulatory obligation

We do not sell your personal information to any third party, ever.

6. International Data Transfers

We are based in the United Kingdom. Your order is fulfilled from a European warehouse. Some of our technical service providers may operate in countries outside the UK or EEA. Where this is the case, we ensure that appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses approved by the UK ICO or the European Commission.

7. How Long We Keep Your Data

Order and transaction records: 7 years (required by UK HMRC and EU tax law)
Customer account data: until you close your account
Marketing preferences: until you opt out or withdraw consent
Customer support enquiries: 3 years from the date of last contact

After these periods, your data is securely deleted or anonymised.

8. Cookies

We use cookies and similar tracking technologies to make our website work, remember your preferences, and understand how visitors use our site.

The types of cookies we use:

Essential cookies: necessary for the website to function (such as your shopping cart and login session). These cannot be switched off.
Functional cookies: remember your preferences (such as language and currency settings)
Analytics cookies: help us understand how visitors use our site, in anonymised or aggregated form
Marketing cookies: only used where you have consented

You can manage your cookie preferences through the cookie banner on our website or through your browser settings.

9. Your Rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you
Right to rectification: ask us to correct inaccurate or incomplete data
Right to erasure: ask us to delete your data ("right to be forgotten"), subject to our legal obligations
Right to restriction: ask us to temporarily stop processing your data in certain circumstances
Right to object: object to processing based on legitimate interests
Right to portability: receive your data in a structured, machine-readable format
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at support@mychillo.com. We will respond within one month of receiving your request, as required by law.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with:

UK: the Information Commissioner's Office (ICO) at ico.org.uk
EU: your national data protection authority (Datenschutzbehörde in Germany, APD/GBA in Belgium, CNIL in France, Autoriteit Persoonsgegevens in the Netherlands)

10. Security

We use industry-standard security measures to protect your personal data, including:

SSL/TLS encryption across our entire website (look for the padlock in your browser)
PCI DSS-compliant payment processing — your card details are never stored on our servers
Restricted access to personal data within our team on a need-to-know basis
Regular reviews of our security practices

While we take all reasonable steps to protect your data, no internet transmission is 100% secure. If you believe your account has been compromised, please contact us immediately.

11. Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with their personal information, please contact us at support@mychillo.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any significant changes by email (if you have an account with us) or by posting a clear notice on our website. The date at the top of this page shows when it was last updated. Continued use of our website after changes are posted constitutes acceptance of the updated policy.