Privacy Policy

This policy explains what personal information I collect when you use my website or buy from me, how I use it, and your rights. I only collect what I need to run my shop.

Who I am

I'm Maria Michailidou, trading as Maria's Market, and I'm responsible for your personal information (the "data controller").

• Address: Loughton, Essex, England (my full postal address is available on request)
• Email: maria@my-new-place.com

What I collect

• When you order: your name, delivery and billing address, email address, phone number, and what you bought.
• When you contact me: your name, email address, your message and, if you give it, your order number.
• If you ask to hear when my Woodcraft range launches: your email address.
• When you browse: my web host keeps standard server logs (such as your IP address and the pages requested) for security and to keep the site running.

Card details: payments are handled by Stripe. Your card number goes straight to Stripe — I never see or store it.

Why I use it

• To fulfil your order — taking payment, sending your items and emailing you about your order. This is needed to carry out our contract.
• To answer your messages and help with any problems. This is in my legitimate interest in running my shop and looking after customers.
• To keep business and tax records, which I'm required to do by law.

• To tell you when Woodcraft launches, if you've asked me to. This is based on your consent, and you can ask me to remove you at any time.

Apart from that one launch email if you've asked for it, I don't send marketing emails, and I never sell your information.

Who I share it with

Only with the services I need to run the shop:

• Stripe — to process card payments.
• Royal Mail — your name and address, to deliver your parcel.
• Customs authorities — for orders outside the UK, the customs declaration (your name, address and what's in the parcel) goes with it.
• IONOS — who host my website and email.

Some of these companies may process information outside the UK. Where they do, they use legal safeguards approved under UK data protection law.

How long I keep it

• Order records: 6 years, because UK tax rules require me to keep business records.
• Messages that aren't about an order: up to 12 months.
• Woodcraft launch list: deleted once I've sent the launch email.

Cookies

My site only uses the cookies it needs to work:

• A session cookie, which remembers your basket as you move around the shop.
• A security cookie (XSRF-TOKEN), which protects forms like checkout and the contact form from misuse.

Stripe's payment form may also set its own cookies to help prevent fraud. I don't use any tracking, analytics or advertising cookies.

Your rights

You have the right to:

• ask for a copy of the personal information I hold about you;
• ask me to correct anything that's wrong;
• ask me to delete your information, unless I need to keep it (for example for tax records);
• object to, or ask me to limit, how I use it;
• ask for your information in a format you can take elsewhere.

To do any of these, email me at maria@my-new-place.com. I'll reply within one month.

If you're unhappy with how I've handled your information, please contact me first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

If I change how I use your information, I'll update this page and the date at the top.