Privacy Policy

Last updated: [date]. Template aligned with UK GDPR / Data Protection Act 2018 — not legal advice; complete the bracketed fields and have it reviewed.

This Privacy Policy explains how MaxSixi ("we", "us", "our") collects, uses and protects your personal data when you visit or buy from maxsixi.co.uk. We are the data controller. Privacy questions: info@maxsixi.co.uk.

Who we are

MaxSixi, [legal/trading name], [business address]. ICO registration: [ICO number].

Information we collect

• You give us: name, billing/delivery address, email, phone and order details. We never store full card numbers — payments are processed securely by our providers.
• Automatically: device/browser type, IP address and pages visited, via cookies and analytics.
• Marketing preferences if you subscribe.

How we use your data and lawful basis

• Process and deliver orders, provide support — contract.
• Order/shipping updates — contract.
• Marketing where you opted in — consent.
• Fraud prevention and legal/accounting duties — legal obligation / legitimate interests.

Sharing your data

Shared only to run the store: fulfilment and dropshipping suppliers, shipping partners, payment processors, Shopify, and email/analytics providers. Some may be outside the UK/EEA, with appropriate safeguards. We never sell your data.

Retention

Order records kept up to ~6 years for legal/tax reasons. Marketing data kept until you unsubscribe.

Your rights

Access, correct, erase, restrict, object, portability, withdraw consent — email info@maxsixi.co.uk. You can also complain to the ICO (ico.org.uk).

Security & children

We use SSL and reputable providers. Our store is not directed at under-16s.