Privacy policy

Privacy Policy | Millie & Jones

Last updated: June 2026

This Privacy Policy describes how Millie & Jones, a trading name of HCH Commerce Limited ("we", "us", or "our"), collects, uses, and discloses your personal information when you visit or use www.millieandjones.co.uk (the "Site"), make a purchase, or otherwise communicate with us (collectively, the "Services").

For the purposes of applicable data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, HCH Commerce Limited is the data controller of your personal information.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide and improve the Services, comply with applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

When we use the term "personal information", we mean information that identifies, relates to, describes or can be associated with you.

Information We Collect Directly from You

  • Contact details including your name, address, phone number and email.
  • Order information including your name, billing address, shipping address, payment confirmation, email address and phone number.
  • Account information including your username, password, and other information used for account security.
  • Shopping information including the items you view, add to your cart or save to your account, and your purchases, reviews, referrals, loyalty points or gift cards.
  • Customer support information including information you choose to include when you contact us.

Some features of the Services may require you to provide certain information. You may choose not to provide it, but this may prevent you from using those features.

Information We Collect About Your Usage

We may automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels and similar technologies ("Cookies"). Usage Data may include device information, browser information, your network connection, your IP address, and information about how you access and use our Site.

Where required by law, we collect advertising and non-essential analytics data only with your consent, which you provide through our cookie consent banner. See the Cookies section below.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

  • Companies who support our Site and Services, such as Shopify (our e-commerce platform).
  • Our payment processors, who collect payment information (e.g. card details and billing address) to process your payment and fulfil your orders, in order to perform our contract with you.

Any information we obtain from third parties is treated in accordance with this Privacy Policy.

How We Use Your Personal Information and Our Lawful Bases

Under UK GDPR we must have a lawful basis for processing your personal information. We rely on the following:

  • Providing products and services (performance of a contract). We use your information to process payments, fulfil and deliver your orders, manage your account, handle returns and exchanges, and send you transactional notifications relating to your orders.
  • Marketing and advertising (consent and/or legitimate interests). We may send you marketing communications by email, text or post, and show you advertising for our products. Where we send electronic marketing or use advertising cookies, we rely on your consent. You can withdraw consent or opt out at any time (see Your Rights). Where we rely on legitimate interests for certain limited marketing analysis, we balance this against your rights.
  • Security and fraud prevention (legitimate interests). We use your information to detect, investigate and prevent fraudulent, illegal or malicious activity, and to keep our Site secure for you and other customers.
  • Communicating with you and improving our Services (legitimate interests). We use your information to respond to you, provide customer support, and improve our Services.
  • Complying with legal obligations. We may process your information where necessary to comply with our legal and regulatory obligations.

If you register an account, you are responsible for keeping your login details safe. Please do not share your password, and contact us immediately if you believe your account has been compromised.

Cookies

Like many websites, we use Cookies on our Site. Essential Cookies are necessary for the Site to function. Non-essential Cookies — including analytics and advertising Cookies — are used only with your consent, which you give (and can change or withdraw) through the cookie consent banner on our Site.

We use Cookies to operate and improve our Site and Services (including remembering your preferences), to run analytics and understand how the Site is used, and — with your consent — to deliver and measure advertising on our Site and on other platforms such as social media and search engines.

For information about the Cookies used to power our store with Shopify, see https://www.shopify.com/legal/cookies.

Most browsers accept Cookies by default, but you can set your browser to remove or reject Cookies. Blocking Cookies may affect your experience and cause some features to work incorrectly.

Advertising and Analytics Partners

With your consent, we share certain Usage Data and identifiers (such as your device identifiers, cookie data and, where applicable, email address in hashed form) with advertising and analytics partners — for example Meta (Facebook and Instagram), Google, and similar platforms — so that we can show and measure advertising for our products. These partners process your information in accordance with their own privacy notices. You can opt out of advertising Cookies at any time through our cookie consent banner, and you can use browser or device controls and the Global Privacy Control signal where available.

We do not sell your personal information for money.

How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

  • With vendors and service providers who perform services on our behalf (e.g. IT and platform providers, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
  • With advertising and analytics partners, with your consent, as described above.
  • When you direct or consent to disclosure to third parties, such as to ship your products, or through your use of social media widgets or login integrations.
  • In connection with a business transaction such as a merger, acquisition or insolvency; to comply with legal obligations (including responding to lawful requests from public authorities); to enforce our terms; and to protect or defend our rights and the rights of our users or others.

We do not use or disclose any special category (sensitive) personal information for advertising or to infer characteristics about you.

Third-Party Websites and Links

Our Site may link to websites operated by third parties. We are not responsible for the privacy or security of those sites, and we recommend you review their policies. Our inclusion of a link does not imply endorsement.

Children's Data

The Services are intended for adults aged 18 and over. While we sell products designed for children, our Services are directed at adult purchasers, and we do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us using the details below and we will delete it.

Security and Retention of Your Information

No security measures are perfect, and information sent over the internet may not be fully secure in transit. We recommend you do not use insecure channels to send us sensitive or confidential information.

How long we retain your personal information depends on factors such as whether we need it to provide the Services, maintain your account, comply with legal obligations (for example, tax and accounting records), resolve disputes, or enforce our policies. When we no longer need your information, we securely delete or anonymise it.

Your Rights

Under UK GDPR you have the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances:

  • Right of access — to request a copy of the personal information we hold about you.
  • Right to rectification — to ask us to correct inaccurate or incomplete information.
  • Right to erasure — to ask us to delete your information in certain circumstances.
  • Right to restrict processing — to ask us to limit how we use your information.
  • Right to data portability — to receive your information in a portable format, or have it transferred to another controller, in certain circumstances.
  • Right to object — to object to processing based on our legitimate interests, and to object to direct marketing at any time.
  • Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding. You can also authorise an agent to make a request on your behalf, subject to verification. We will respond within the time limits required by law (normally one month).

You can opt out of marketing emails at any time using the unsubscribe link in our emails. If you opt out, we may still send you non-promotional messages, such as those about your account or orders.

We will not discriminate against you for exercising any of your rights.

Complaints

If you have any concerns about how we handle your personal information, please contact us first using the details below — we will do our best to resolve the matter.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO):

  • Website: https://ico.org.uk
  • Helpline: 0303 123 1113

International Transfers

We may transfer, store and process your personal information outside the UK, including where our service providers operate. Where we transfer personal information outside the UK, we rely on recognised safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum (or the European Commission's Standard Contractual Clauses as appropriate), unless the destination is covered by a UK adequacy decision.

Contact

If you have any questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us:

📧 Email: support@millieandjones.co.uk 📞 Phone: 020 8264 0042 📍 Post: HCH Commerce Limited, Bury Farm, Bovingdon, Hemel Hempstead, HP3 0LU, United Kingdom

HCH Commerce Limited (trading as Millie & Jones) is the data controller of your personal information.

This Privacy Policy was last updated in June 2026.