Privacy policy

PRIVACY POLICY

Last updated: 26 October 2026

At Mythic Morrow, we respect your privacy and take the protection of personal information seriously. This Privacy Policy explains how we collect, use, store, disclose and otherwise process personal information when you visit our website, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with our products, services, content, features and tools (collectively, the “Services”).

Our online store is powered by Shopify, which provides the e-commerce platform that enables us to offer our Services.

For the purposes of applicable UK data protection law, MYTHIC MORROW LTD is the data controller for personal information where we determine the purposes and means of processing. Other organisations, including Shopify and our service providers, may act as independent or joint controllers, or as processors, depending on the processing activity and their respective responsibilities.

This Privacy Policy should be read alongside any applicable cookie notice, marketing preferences and other privacy information provided when you use our Services.

Nothing in this Privacy Policy removes or restricts any right you have under applicable data protection law.

1. WHO WE ARE

Mythic Morrow is the trading name of MYTHIC MORROW LTD, a private limited company registered in England and Wales.

Our company details are:

  • Legal company name: MYTHIC MORROW LTD
  • Trading name: Mythic Morrow
  • Company number: 17537031
  • Registered office: C/O Qps Accountancy, Unit 3, Venture Point, Stanney Mill Road, Chester, England, United Kingdom, CH2 4NE
  • General enquiries: info@mythicmorrow.co.uk
  • Accounts and invoices: accounts@mythicmorrow.co.uk
  • Sales and refunds: sales@mythicmorrow.co.uk

In this Privacy Policy, “Mythic Morrow”, “we”, “us” and “our” refer to MYTHIC MORROW LTD trading as Mythic Morrow.

For privacy enquiries and requests concerning your personal information, please contact info@mythicmorrow.co.uk.

We will direct your enquiry to the appropriate person or team where necessary.

2. PERSONAL INFORMATION WE COLLECT

“Personal information” or “personal data” means information relating to an identified or identifiable individual.

The information we collect depends on how you interact with our Services, the products you purchase, the features you use and the choices you make.

We may collect and process the following categories of personal information.

2.1 Contact information

This may include:

  • Your name.
  • Billing address.
  • Delivery address.
  • Email address.
  • Telephone number.
  • Other contact details you choose to provide.

2.2 Order and transaction information

This may include:

  • Products viewed or added to your basket.
  • Products added to a wishlist, where applicable.
  • Purchases and order history.
  • Order values and transaction references.
  • Discounts and promotions used.
  • Delivery preferences and tracking information.
  • Cancellations, returns, refunds and exchanges.
  • Customer-service history associated with an order.
  • Information needed to fulfil or administer a transaction.

2.3 Payment information

Depending on the payment method and provider, we may process information such as:

  • Payment method.
  • Payment status and confirmation.
  • Transaction identifiers.
  • Billing information.
  • Refund records.
  • Payment risk indicators.
  • Information required to investigate payment disputes.

Payment card details are generally processed by the relevant payment provider. We do not ordinarily need to store complete payment card details ourselves.

The payment provider's own privacy information may apply to the personal information it processes in connection with your payment.

2.4 Account information

If you create an account, we may process:

  • Account identifiers and usernames.
  • Authentication information.
  • Saved addresses.
  • Account settings and preferences.
  • Order history.
  • Information necessary to secure and administer your account.

Passwords and authentication credentials should be protected using appropriate security measures. We do not ask you to send your password to us by email.

2.5 Communications and customer-service information

When you contact us or otherwise communicate with us, we may process information contained in:

  • Emails.
  • Contact-form submissions.
  • Customer-service enquiries.
  • Product enquiries.
  • Complaints.
  • Cancellation and return requests.
  • Refund enquiries.
  • Delivery and missing-item claims.
  • Payment disputes and chargebacks.
  • Other correspondence and supporting documents.

We may retain relevant correspondence where reasonably necessary to respond to you, maintain business records, investigate a dispute or establish, exercise or defend legal claims.

2.6 Device and technical information

When you access our website, we or relevant service providers may collect technical information such as:

  • IP address.
  • Browser type and version.
  • Device type.
  • Operating system.
  • Network information.
  • Device and online identifiers.
  • Cookie identifiers.
  • Website server logs.
  • Security and diagnostic information.

Some of this information may constitute personal data under applicable law.

2.7 Website usage information

Depending on the technologies used and your privacy choices, we may process information concerning:

  • Pages viewed.
  • Products viewed.
  • Basket activity.
  • Interactions with website features.
  • Referring pages.
  • Dates and times of visits.
  • Approximate location inferred from an IP address.
  • Website navigation and performance.
  • Interactions with marketing or advertising.

Non-essential cookies and similar technologies will be used in accordance with applicable consent requirements.

2.8 Fraud prevention and product-integrity information

Because Mythic Morrow sells trading cards, collectibles and other products that may be vulnerable to theft, substitution, resealing and fraudulent returns, we may process relevant information to protect our customers, stock and business.

Depending on the circumstances, this may include:

  • Order and transaction records.
  • Account and contact information.
  • IP addresses and relevant device information.
  • Payment risk indicators.
  • Order and refund history.
  • Delivery and tracking records.
  • Proof-of-delivery information.
  • Parcel weights.
  • Fulfilment, picking and packing records.
  • Product photographs or video.
  • Product identifiers, serial numbers and batch codes.
  • Packaging and security-seal information.
  • Return inspection records.
  • Communications concerning disputed transactions.
  • Chargeback information.
  • Evidence relating to suspected product substitution, resealing, theft or return fraud.

We will process this information only where we have an appropriate lawful basis and where the processing is necessary and proportionate to the relevant purpose.

2.9 Information obtained from other sources

Where lawful and appropriate, we may receive information from:

  • Shopify and other e-commerce service providers.
  • Payment processors, banks and card issuers.
  • Delivery and fulfilment companies.
  • Fraud-prevention and security providers.
  • Analytics and marketing providers.
  • Social media or advertising platforms.
  • Professional advisers.
  • Other parties involved in a transaction, complaint or payment dispute.
  • Publicly available sources, where relevant and lawful.
  • Regulatory authorities or law-enforcement bodies.

The information received may include transaction details, delivery information, risk indicators, dispute records and other information relevant to the purpose for which it is obtained.

Where required by law, we will provide additional privacy information concerning personal data obtained from sources other than you.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information through several methods.

3.1 Directly from you

For example, when you:

  • Place an order.
  • Create or manage an account.
  • Enter information at checkout.
  • Subscribe to marketing communications.
  • Contact us.
  • Submit a return or refund request.
  • Make a complaint.
  • Participate in a promotion.
  • Submit a data-protection request.
  • Otherwise provide information through our Services.

3.2 Automatically through our Services

We and relevant service providers may collect certain information automatically through technologies such as:

  • Cookies.
  • Pixels.
  • Similar tracking technologies.
  • Website server logs.
  • Security and diagnostic tools.
  • Other permitted technologies.

Where consent is required for a technology, we will use it in accordance with the applicable consent requirements.

3.3 From Shopify and our service providers

We may receive information from Shopify and organisations that support our operations, including payment providers, delivery companies, analytics providers, customer-support applications, security services and other technology providers.

3.4 From other third parties

We may receive relevant information from payment providers, financial institutions, delivery companies, fraud-prevention services, marketing partners, insurers, professional advisers, public authorities and other appropriate sources.

Where we obtain personal data from another source, we will provide the privacy information required by applicable law, subject to any lawful exception or exemption.

4. HOW WE USE YOUR PERSONAL INFORMATION

We use personal information for specified, lawful purposes connected with operating Mythic Morrow and providing our Services.

4.1 Providing our Services

We may process personal information to:

  • Process and fulfil orders.
  • Take and verify payments.
  • Send order confirmations.
  • Arrange dispatch and delivery.
  • Provide tracking information.
  • Create and administer accounts.
  • Provide customer support.
  • Process cancellations, returns and refunds.
  • Handle exchanges and complaints.
  • Administer promotions.
  • Respond to enquiries.
  • Provide requested features and services.
  • Perform our contractual obligations.

4.2 Operating and improving our business

We may process information to:

  • Operate and maintain our website.
  • Monitor technical performance.
  • Improve website functionality.
  • Understand how customers use our Services.
  • Analyse business performance.
  • Manage stock and inventory.
  • Improve products and services.
  • Diagnose technical issues.
  • Develop and administer relevant features.
  • Maintain appropriate business records.

Where analytics or similar technologies require consent, we will respect your applicable privacy choices.

4.3 Security and fraud prevention

We may process information to:

  • Protect customer accounts.
  • Secure our website and systems.
  • Detect suspicious transactions.
  • Prevent and investigate payment fraud.
  • Investigate suspected return fraud.
  • Detect suspected product substitution or resealing.
  • Investigate suspected theft.
  • Investigate missing-item or non-delivery claims.
  • Prevent abuse of promotions or accounts.
  • Respond to chargebacks and payment disputes.
  • Protect our customers, stock, staff and business.
  • Establish, exercise or defend legal claims.

We will use reasonable and proportionate measures and will not treat an unsupported suspicion as conclusive proof of wrongdoing.

4.4 Communications and customer relationships

We may use personal information to:

  • Respond to enquiries.
  • Provide customer support.
  • Communicate important order information.
  • Notify you about account or service matters.
  • Deal with complaints.
  • Investigate and resolve disputes.
  • Maintain records of our communications with you.

4.5 Marketing and advertising

Where permitted by law and consistent with your privacy choices, we may use personal information to:

  • Send marketing emails.
  • Inform you about new releases and products.
  • Communicate offers and promotions.
  • Measure marketing performance.
  • Understand the effectiveness of advertising.
  • Personalise advertising where lawful.
  • Administer marketing preferences and opt-outs.

You may unsubscribe from marketing communications at any time.

4.6 Legal and regulatory purposes

We may process personal information where necessary to:

  • Comply with applicable laws.
  • Meet tax and accounting requirements.
  • Maintain legally required records.
  • Respond to lawful requests from public authorities.
  • Comply with court orders and legal proceedings.
  • Investigate suspected fraud or unlawful activity.
  • Enforce applicable contractual rights.
  • Establish, exercise or defend legal claims.
  • Protect our legal rights and legitimate business interests.

5. OUR LAWFUL BASES FOR PROCESSING

Under UK data protection law, we must have an appropriate lawful basis for processing personal information.

The lawful basis depends on the purpose and circumstances of the processing. We do not assume that one lawful basis applies to every activity.

5.1 Contract

We may process personal information where necessary to enter into or perform a contract with you.

Examples include:

  • Processing and delivering your order.
  • Administering your account.
  • Processing payments and refunds.
  • Responding to contractual enquiries.
  • Providing services you have requested.

Where information is necessary to enter into or perform a contract, failure to provide it may mean that we cannot fulfil the relevant order or provide the requested service.

5.2 Legal obligation

We may process personal information where necessary to comply with a legal obligation that applies to us.

Examples may include:

  • Tax and accounting requirements.
  • Applicable consumer protection obligations.
  • Legally required recordkeeping.
  • Compliance with lawful court orders.
  • Responding to legally binding requests from competent authorities.

5.3 Legitimate interests

We may process personal information where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

  • Operating and managing our business.
  • Protecting our stock, property and commercial interests.
  • Preventing and detecting fraud.
  • Securing our website and accounts.
  • Investigating suspicious returns and product substitution.
  • Investigating chargebacks and disputed transactions.
  • Maintaining appropriate business records.
  • Improving our Services.
  • Protecting customers and third parties.
  • Establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider whether the processing is necessary, proportionate and appropriately balanced against your rights and freedoms.

You may have the right to object to processing based on legitimate interests, as explained in section 18.

5.4 Consent

Where required by law, we rely on your consent for particular processing activities.

This may include:

  • Certain non-essential cookies and similar technologies.
  • Certain electronic marketing communications.
  • Certain advertising or tracking technologies.

Where we rely on consent, you may withdraw it at any time using the relevant preference controls or by contacting us, as appropriate.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5.5 Vital interests and other lawful bases

In exceptional circumstances, we may rely on another lawful basis where the relevant legal conditions are satisfied.

We will identify and document the appropriate basis for the processing concerned.

6. SHOPIFY AND OUR E-COMMERCE PLATFORM

Our online store is powered by Shopify.

Shopify provides e-commerce infrastructure and related services that enable us to operate our store, manage orders and provide shopping functionality.

Information you provide through our store may be transmitted to and processed by Shopify and other relevant service providers.

Depending on the processing activity, Shopify may act as our processor, an independent controller or, where applicable, a joint controller. The relevant responsibilities depend on the particular service and processing activity.

Shopify may also process information in connection with its own services, security, analytics, platform improvement and other purposes described in its applicable privacy information.

Where Shopify or another provider independently determines the purposes and means of processing, that provider may have its own responsibilities for responding to data-protection requests.

You should review Shopify's current privacy information for details about its processing activities and available privacy controls.

We will take reasonable steps to use appropriate service providers and contractual arrangements for processing carried out on our behalf.

7. HOW WE SHARE PERSONAL INFORMATION

We do not disclose personal information indiscriminately or sell personal information to third parties in exchange for money.

We may disclose or make personal information available where necessary for the purposes described in this Privacy Policy.

Recipients may include the following categories of organisations.

7.1 Shopify

We share information with Shopify as necessary to operate our e-commerce store and provide our Services.

7.2 Payment providers and financial institutions

We may share information with payment processors, banks, card issuers and other payment-service providers to:

  • Process payments.
  • Verify transactions.
  • Issue refunds.
  • Detect and prevent fraud.
  • Administer payment disputes.
  • Respond to chargebacks.

7.3 Delivery and fulfilment providers

We may share relevant information with:

  • Couriers and postal operators.
  • Fulfilment providers.
  • Warehouses.
  • Logistics providers.
  • Other parties involved in dispatch and delivery.

This may include your name, delivery address, contact details, order information and tracking information.

7.4 Technology and business service providers

We may use providers offering services such as:

  • Website hosting and infrastructure.
  • E-commerce applications.
  • Cloud storage.
  • Customer support.
  • Email delivery.
  • Analytics.
  • Cybersecurity.
  • Fraud prevention.
  • Accounting.
  • Payment administration.
  • Professional advice.
  • Other operational support.

Where a provider processes personal information on our behalf, we will use appropriate contractual and organisational safeguards as required by law.

7.5 Marketing and advertising partners

Where permitted by applicable law, we may share or make relevant information available to marketing, analytics and advertising providers.

Where the relevant cookies, tracking technologies or other processing require consent, we will apply the required consent controls.

7.6 Professional advisers

Where reasonably necessary, we may share information with:

  • Accountants.
  • Solicitors.
  • Insurers.
  • Auditors.
  • Other professional advisers.

7.7 Fraud prevention, disputes and public authorities

Where lawful and necessary, we may disclose relevant information to:

  • Payment providers.
  • Banks and card issuers.
  • Insurers.
  • Fraud-prevention providers.
  • Delivery companies.
  • Legal advisers.
  • Courts and tribunals.
  • Regulators, including Trading Standards where appropriate.
  • Law-enforcement authorities.
  • Other appropriate parties.

Such disclosure may be necessary to prevent, detect or investigate fraud, theft or other unlawful activity, respond to payment disputes, comply with legal obligations or establish, exercise or defend legal claims.

We will consider the relevance, necessity and lawfulness of the disclosure in the circumstances.

7.8 Corporate transactions

If MYTHIC MORROW LTD undergoes a proposed or actual merger, acquisition, restructuring, financing, insolvency process, sale of assets or similar corporate transaction, personal information may be disclosed where reasonably necessary in connection with that transaction and subject to applicable law.

Where required, appropriate safeguards will be used to protect the information.

8. FRAUD PREVENTION, RETURNS AND CHARGEBACKS

We sell trading cards, collectibles and other products whose value may depend on authenticity, sealed condition, completeness and product identity.

To protect customers, stock and our business, we may maintain appropriate records relating to dispatched products, returns and disputed transactions.

Depending on the circumstances, records may include:

  • Product identity and condition.
  • Packaging and factory seals.
  • Security and tamper-evident seals.
  • Serial, batch and manufacturing identifiers.
  • Product photographs or video.
  • Parcel weights.
  • Picking, packing and fulfilment records.
  • Dispatch and delivery information.
  • Returned-product condition.
  • Return inspection findings.
  • Customer communications.
  • Refund and transaction history.
  • Missing-item or non-delivery claims.
  • Chargeback information.
  • Other relevant evidence.

We may use this information to investigate a return, missing-item claim, delivery dispute, payment dispute or suspected fraudulent activity.

Our lawful bases may include contract, legal obligation or legitimate interests, depending on the particular processing.

We may retain relevant evidence for as long as reasonably necessary to investigate the matter, comply with legal obligations, administer a dispute or establish, exercise or defend legal claims.

Where appropriate and lawful, we may disclose relevant evidence to payment providers, banks, insurers, delivery companies, professional advisers, courts, regulators or law-enforcement authorities.

We do not use fraud-prevention procedures to prevent customers from legitimately exercising statutory consumer rights or data-protection rights.

We also do not treat a suspicion, automated risk indicator or allegation as conclusive proof of fraud.

9. MARKETING COMMUNICATIONS

We may send marketing communications where we have a lawful basis and satisfy the applicable requirements of UK electronic marketing and privacy law, including the Privacy and Electronic Communications Regulations 2003, as amended.

Depending on the circumstances, we may rely on:

  • Your consent; or
  • The applicable existing-customer exception, commonly referred to as the “soft opt-in”, where all legal conditions are met.

Where we rely on the existing-customer exception, marketing will relate to our own similar products or services, and you will have been given the required opportunity to opt out when your contact details were collected and in subsequent marketing messages.

We will not assume that placing an order automatically gives us permission to send every type of marketing communication.

You may unsubscribe from marketing emails at any time using the unsubscribe link in the message or by contacting info@mythicmorrow.co.uk.

We may retain limited information necessary to record and respect your marketing preferences and prevent further unwanted marketing.

Unsubscribing from marketing does not prevent us from sending necessary non-marketing communications concerning your orders, payments, accounts, security, returns, legal obligations or other services.

10. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies that store information on, or access information from, your device.

These technologies may be used to:

  • Operate essential website functionality.
  • Remember your shopping basket.
  • Maintain security.
  • Remember preferences.
  • Measure website performance.
  • Analyse website usage.
  • Measure marketing effectiveness.
  • Provide or measure personalised advertising.

Some technologies are strictly necessary to provide a service you have requested or to perform another function permitted without consent under applicable law.

Where consent is required, we will not set or use the relevant non-essential cookies or similar technologies before obtaining the required consent.

We will provide appropriate information about the purposes of the technologies used and make available suitable controls to accept, reject or manage them, as required by law.

You may change your preferences through the cookie controls provided on our website, where available.

You may also be able to restrict cookies through your browser settings. However, disabling essential cookies may affect website functionality, including basket and checkout features.

Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

11. PERSONALISED ADVERTISING AND ANALYTICS

Subject to applicable law and your privacy choices, we and our service providers may use information about your interactions with our Services to analyse activity, measure advertising effectiveness or provide personalised advertising.

This may involve information concerning:

  • Products viewed or purchased.
  • Website interactions.
  • Advertisements viewed or interacted with.
  • Device and cookie identifiers.
  • Relevant browsing or campaign information.

We will obtain consent where required for the cookies, tracking technologies or other processing involved.

Some providers may use information obtained through their own services or from other sources in accordance with their separate privacy arrangements.

We do not assume that every form of analytics or advertising processing is automatically permitted. We will apply the lawful basis and consent requirements appropriate to the activity concerned.

You may manage relevant choices through our cookie controls and any applicable provider privacy settings.

12. THIRD-PARTY WEBSITES AND SERVICES

Our Services may contain links to websites, applications or platforms operated by third parties.

We do not control the privacy practices of independent third parties.

If you follow a link to another website or use a third-party service, you should review that organisation's privacy information before providing personal information.

The inclusion of a link does not, by itself, mean that Mythic Morrow endorses the privacy or security practices of the relevant third party.

Where you interact directly with a third-party provider, that provider may process your information under its own terms and privacy policy.

13. CHILDREN'S PRIVACY

Our online store is intended for people who are legally capable of entering into the relevant transactions, subject to applicable law.

Some of our products may be suitable for children, but this does not mean that our Services are directed at children for the purpose of collecting their personal information.

We do not knowingly collect personal information directly from children where doing so would be unlawful.

If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact info@mythicmorrow.co.uk.

We will investigate and take appropriate action where necessary.

14. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access.
  • Unlawful processing.
  • Accidental loss.
  • Destruction.
  • Alteration.
  • Unauthorised disclosure.

Depending on the information and risks involved, measures may include access controls, appropriate service-provider arrangements, security monitoring and other safeguards.

However, no internet transmission, website, database or electronic storage system can be guaranteed to be completely secure.

We cannot guarantee absolute security, and nothing in this Privacy Policy should be understood as such a guarantee.

If you create an account, you should keep your login credentials confidential, use appropriate security measures and notify us if you suspect unauthorised access.

Please do not send passwords or unnecessary sensitive information to us by email.

If a personal data breach occurs, we will assess it and take the steps required by applicable law, including notification to the ICO or affected individuals where legally required.

15. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, regulatory and legitimate business requirements.

Retention periods depend on the category of information, the purpose of processing and the circumstances of the individual matter.

15.1 Orders, transactions and accounting records

We retain relevant order, transaction and accounting information for the periods required by applicable tax, accounting and other legal obligations.

Different record types may be subject to different retention periods.

15.2 Customer accounts

Account information is generally retained while an account remains active and for an appropriate period afterwards where necessary to administer the account, meet legal obligations, resolve disputes or protect our legitimate interests.

Where an account is closed, we may retain limited information where justified by these purposes.

15.3 Customer-service and complaint records

We retain correspondence and complaint records for as long as reasonably necessary to respond to the matter, maintain relevant business records and establish, exercise or defend legal claims.

15.4 Fraud-prevention and return records

Where reasonably necessary, we may retain product photographs, fulfilment records, return inspections, parcel weights, transaction records and related evidence for the period needed to investigate suspected fraud, resolve a dispute, meet legal obligations or establish, exercise or defend legal claims.

We will not retain such information indefinitely merely because it may be useful. The retention period must be justified by the relevant purpose and applicable law.

15.5 Marketing preferences

We may retain information concerning marketing consent, objections and unsubscribe requests for as long as reasonably necessary to demonstrate compliance and respect your preferences.

15.6 General retention principles

When determining retention periods, we consider:

  • The nature and sensitivity of the information.
  • The purpose for which it was collected.
  • Whether an order or account remains active.
  • Applicable legal and accounting requirements.
  • Relevant limitation periods.
  • Whether a dispute or chargeback is ongoing.
  • Fraud-prevention requirements.
  • Whether information is required for actual or anticipated legal proceedings.

When personal information is no longer reasonably required, we will delete it, anonymise it or otherwise dispose of it securely, subject to applicable legal and technical requirements.

16. INTERNATIONAL TRANSFERS

Some of our service providers, including e-commerce and technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that the transfer complies with applicable UK data protection law.

Depending on the destination and circumstances, this may involve:

  • UK adequacy regulations.
  • The UK International Data Transfer Agreement.
  • The UK Addendum to the relevant approved Standard Contractual Clauses.
  • Another lawful transfer mechanism available under applicable law.

Where required, we will assess the transfer and implement appropriate supplementary safeguards.

You may contact us for further information about relevant transfer safeguards, subject to applicable legal restrictions.

The countries to which information may be transferred depend on the providers and services used. We do not assume that every provider processes information exclusively within the UK.

17. YOUR DATA PROTECTION RIGHTS

Under applicable UK data protection law, you may have the following rights concerning your personal information. The availability of each right depends on the circumstances and the relevant legal requirements.

17.1 Right of access

You may request confirmation of whether we process your personal information and request access to the information we hold about you, together with other information required by law.

17.2 Right to rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

17.3 Right to erasure

In certain circumstances, you may ask us to delete personal information.

This right is not absolute. We may be entitled or required to retain information for purposes including compliance with legal obligations, fraud prevention where justified, or establishing, exercising or defending legal claims.

17.4 Right to restriction

In certain circumstances, you may ask us to restrict the processing of your personal information.

17.5 Right to data portability

Where the legal conditions are met, you may have the right to receive certain personal information you provided to us in a structured, commonly used and machine-readable format, and to request that it be transmitted to another controller where technically feasible and legally applicable.

17.6 Right to object

You may have the right to object to processing based on legitimate interests, depending on the circumstances.

We will consider your objection in accordance with applicable law.

You have an absolute right to object to the processing of your personal information for direct marketing purposes. If you object to direct marketing, we must stop processing your information for that purpose.

We may retain limited information necessary to record and respect your objection.

17.7 Right to withdraw consent

Where we rely on consent, you may withdraw it at any time using the relevant consent controls or by contacting us.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

17.8 Rights concerning automated decision-making

Where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

These rights depend on the nature of the processing and the legal conditions and safeguards that apply.

17.9 Right to complain

You have the right to complain to the Information Commissioner's Office (ICO) about our handling of personal information.

Further information is provided in section 19.

18. EXERCISING YOUR RIGHTS AND AUTOMATED PROCESSING

18.1 Making a request

To exercise an applicable data-protection right, contact info@mythicmorrow.co.uk.

Please explain your request and provide enough information for us to identify the personal information concerned.

We may request reasonable additional information to verify your identity where necessary to protect against unauthorised disclosure.

We will respond within the period required by applicable law. Requests are generally handled within one month, although the law allows extensions in certain circumstances, including some complex or multiple requests.

We will explain any applicable extension or lawful refusal where required.

18.2 Limitations and exemptions

Some rights are subject to conditions and exemptions. We may therefore be unable to fulfil a request in full where an applicable legal provision permits or requires us not to do so.

Any decision will be made in accordance with applicable law, and we will provide appropriate information about our decision where required.

We will not reject a valid request merely because it is inconvenient or because the information is held by a service provider acting on our behalf.

18.3 Automated processing and profiling

We may use automated tools or risk indicators provided by our service providers to support security, fraud prevention, payment verification, website functionality or other operational purposes.

Such tools may analyse information including transaction details, device information, order history and delivery or return records.

The use of an automated tool does not necessarily constitute a decision made solely by automated processing with legal or similarly significant effects.

We do not intend to make solely automated decisions producing legal or similarly significant effects about you unless the relevant processing is lawful and the applicable requirements and safeguards are satisfied.

Where we undertake such processing, we will provide the information required by law concerning the relevant logic, significance and envisaged consequences, together with applicable rights and safeguards.

You may contact us if you have questions about a decision involving your personal information.

19. YOUR RIGHT TO COMPLAIN TO THE ICO

If you have concerns about how we process your personal information, please contact us first so that we can investigate and attempt to resolve your concern.

You also have the right to complain to the Information Commissioner's Office, the UK's independent data-protection regulator.

Information Commissioner's Office (ICO)

Website: https://ico.org.uk/

The ICO's website provides information about data-protection rights and how to make a complaint.

Your right to complain to the ICO is not conditional on contacting us first.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • Changes to our Services.
  • Changes to the technologies we use.
  • Changes to our service providers.
  • Changes to our business operations.
  • Changes in applicable law or regulatory guidance.
  • Changes to our data-processing activities.
  • Other legitimate operational or legal requirements.

When we update the Policy, we will revise the “Last updated” date at the top of the page.

Where a change materially affects how we process your personal information, we will provide additional information or notice where required by law.

Where a new processing activity requires consent, we will obtain that consent before carrying out the activity where legally required.

We will not rely on updating this Policy alone as a substitute for obtaining consent or meeting another legal requirement.

21. CONTACT US

For questions about this Privacy Policy, our privacy practices, or your personal information, please contact:

MYTHIC MORROW LTD trading as Mythic Morrow

General enquiries and privacy requests: info@mythicmorrow.co.uk

Accounts and invoices: accounts@mythicmorrow.co.uk

Sales, returns and refunds: sales@mythicmorrow.co.uk

Registered office:

C/O Qps Accountancy
Unit 3, Venture Point
Stanney Mill Road
Chester
England, United Kingdom
CH2 4NE

Company number: 17537031

For the purposes of applicable UK data protection law, MYTHIC MORROW LTD is the data controller for personal information where we determine the purposes and means of processing.

We will direct privacy requests to the appropriate person or team and respond in accordance with applicable law.

LEGAL INFORMATION

Mythic Morrow is the trading name of MYTHIC MORROW LTD, a private limited company registered in England and Wales.

Company number: 17537031

Registered office: C/O Qps Accountancy, Unit 3, Venture Point, Stanney Mill Road, Chester, England, United Kingdom, CH2 4NE.

General enquiries and privacy requests: info@mythicmorrow.co.uk

Accounts and invoices: accounts@mythicmorrow.co.uk

Sales, returns and refunds: sales@mythicmorrow.co.uk