Privacy Policy
Montessori Universe, operated by ECOM DDTL LIMITED ("we", "us", "our"), takes the protection of your personal data seriously. This policy explains what data we collect through https://montessori-universe.co.uk, why we collect it, how long we keep it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information we collect
When you place an order or contact us, you provide information such as your name, delivery address, email address, phone number, and the details needed to fulfil your order.
When you browse the site, we automatically collect certain technical data: your IP address, browser and device type, and the pages you visit. This is gathered through cookies and similar technologies.
We never collect or store your full card details. Payment information is handled directly by our payment providers over secure, encrypted connections.
2. How we use your information and our legal basis
- To process and deliver your orders, handle returns and provide customer support — legal basis: performance of our contract with you.
- To prevent fraud and keep transactions secure — legal basis: our legitimate interests.
- To send marketing communications (newsletters, offers) — only where you have given consent, which you can withdraw at any time.
- To meet our legal and accounting obligations — legal basis: compliance with a legal obligation.
We do not sell or rent your personal data to third parties.
3. How long we keep your data
We keep your data only as long as necessary for the purposes above: order records for as long as accounting and tax rules require, account details while your account remains active, and marketing data until you withdraw your consent.
4. Sharing your information
We share your data only where needed to run the store:
- Delivery partners, so your order can reach you;
- Payment providers, to process your payment securely;
- Shopify, which hosts the site and stores data securely;
- Authorities, where we are legally required to do so.
Some of these providers may process data outside the UK. Where that happens, we rely on recognised safeguards (such as the UK International Data Transfer Agreement or equivalent mechanisms) to protect your data.
5. Hosting and security
The site is hosted by Shopify, which stores your data in a secure environment compliant with the PCI-DSS standard for payment data. We apply appropriate technical and organisational measures, including SSL encryption, to protect your data against loss, misuse, or unauthorised access. No method of transmission over the internet is completely secure, but we follow recognised industry standards.
6. Cookies
The site uses cookies to operate correctly, measure audience, and improve your experience. Some are essential to the functioning of the site (such as keeping items in your basket), while others require your consent. You can manage your preferences through the cookie banner and your browser settings. Refusing certain cookies may limit some features.
7. Your rights
Under UK GDPR, you have the right to:
- access and request a copy of your data;
- correct inaccurate or outdated data;
- request erasure of your data;
- restrict or object to processing;
- request the portability of your data;
- withdraw consent at any time.
To exercise these rights, email us at contact@montessori-universe.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at www.ico.org.uk.
8. Children
Our store is intended to be used by adults. We do not knowingly collect personal data from children without the consent of a parent or guardian.
9. Changes to this policy
We may update this policy from time to time. The date of the latest revision is shown at the top of this page. Significant changes will be communicated by appropriate means.
Montessori Universe — operated by ECOM DDTL LIMITED Email: contact@montessori-universe.co.uk