Privacy Policy
Effective Date: 5 November 2025
Mallu Spices Global Ltd (Company No. 16459458), operating as Mallu Spices ("we," "us," or "our"), is committed to protecting the privacy and security of the personal data of our customers and website visitors. As a Data Controller, we comply with the UK General Data Protection Regulation (GDPR).
1. Who We Are and How to Contact Us
2. The Personal Data We Collect
We only collect and process data that is necessary for our business functions:
| Data Category | Examples of Data Collected |
|---|---|
| Identity & Contact Data | Name, billing address, delivery address, email address, and telephone number. |
| Financial & Transaction Data | Details about payments to and from you, and details of products and services you have purchased (e.g., order history). |
| Technical & Usage Data | Internet Protocol (IP) address, browser type and version, time zone setting and location, operating system, and data on how you use our website. |
| Marketing Data | Your preferences in receiving marketing from us and your communication preferences. |
3. How and Why We Use Your Personal Data (Lawful Basis)
We use your personal data based on specific legal grounds (Lawful Bases) under UK GDPR.
| Purpose for Processing | Data Categories Used | Lawful Basis |
|---|---|---|
| Processing and Delivering Orders | Identity, Contact, Transaction, Financial | Necessary for the performance of a contract with you. |
| Customer Service | Identity, Contact, Transaction | Necessary for the performance of a contract with you. |
| Marketing (e.g., newsletters) | Identity, Contact, Marketing | Your consent (which you can withdraw at any time). |
| Website Security & Analytics | Technical, Usage | Necessary for our legitimate interests (e.g., preventing fraud and improving our website). |
| Accounting & Tax Records | Identity, Financial, Transaction | Necessary to comply with a legal obligation. |
4. How We Share Your Personal Data
We never sell your personal data. We only share it with trusted third parties necessary for the functioning of our e-commerce business:
- Payment Processors: To securely handle your payment transactions (we do not store full payment card details).
- Delivery Partners(Data Sharing for Tracking):We share necessary data (Name, Shipping Address, Email, Phone Number) with our logistics partners, such as DHL, to fulfill and track your order. This data sharing is essential for the completion of our contract with you and allows them to send you tracking and delivery updates via email and SMS.
- IT & Analytics Providers: Such as Google Analytics, to help us understand website usage and improve our store.
5. Data Security and Retention
- Security: We have implemented appropriate security measures, including SSL encryption for our website and secure password protection on all internal systems, to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.
- Retention: We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, transaction data is kept for up to six years after the purchase date, as required by UK tax law.
6. Your Legal Rights Under UK GDPR
Under data protection law, you have the right to:
| Right | Description |
|---|---|
| Right to Access | Request a copy of the personal data we hold about you. |
| Right to Rectification | Ask us to correct any incomplete or inaccurate data we hold about you. |
| Right to Erasure | Ask us to delete your personal data (known as the 'right to be forgotten'). |
| Right to Object | Object to the processing of your personal data where we are relying on a legitimate interest. |
| Right to Withdraw Consent | Withdraw your consent to marketing at any time. |
To exercise any of these rights, please contact us at info@malluspices.com. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).
7. Cookies and Tracking Technologies
Our website uses cookies to distinguish you from other users. We use essential cookies (for the shopping cart function) and analytics cookies (via Google Analytics, to see how the site is used).
- You will be asked to provide consent for non-essential cookies via a Cookie Banner when you first visit our site.
- Please refer to our separate Terms and Conditions for further information regarding website usage.
8. Final Note on Operations
Orders are packed and shipped by MalluSpices.com from our UK fulfillment location. Products arrive in the original manufacturer packaging.
Contact & Corporate Information
- MALLU SPICES GLOBAL LTD.
- 19 Kents Lane, North Weald, Epping, England, CM16 6AX
- info@malluspices.com
- +44 7778 339680
- UK Registration Number:16459458
