Legal
Privacy policy
This policy explains what personal data Mosswell collects when you use this shop, why we collect it, how long we keep it, and the rights you have over it.
Template — placeholder text
This is generic template copy for a learning project, not legal advice. It must be reviewed and completed by a qualified lawyer before it is used for a real business.
What we collect
We only collect what the shop needs to work:
- Account details — the name and email address you register with, and a securely hashed password.
- Order details — the delivery address, contact details, and item history for any order you place.
- Cookies — a session cookie that keeps you signed in and a cookie that remembers your cart. No third-party advertising cookies are set.
Why we collect it
Account and order data let us create your account, process and deliver orders, show your order history, and answer support requests. Cookies keep you signed in and preserve your cart between visits. We do not sell your data or use it for advertising.
How long we keep it
Account data is kept for as long as your account is open. Order records are kept for the period required by US federal and state bookkeeping and tax law. Session and cart cookies expire on their own; you can also clear them in your browser at any time. When data is no longer needed it is deleted or anonymised.
Your rights
You can ask us to:
- Access the personal data we hold about you.
- Export a copy of your data in a portable format.
- Delete your account and the personal data associated with it, where we are not required to keep it by law.
To make any of these requests, use the contact page. We may need to confirm your identity before we act.
Who is responsible
The data controller is Mosswell. Company and contact details are listed on the company information. If this policy changes, the updated version will be published on this page.