Personal information you disclose to us.

We collect personal information that you
voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Identity and Contact Data. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal
information we collect may include the following: names, phone numbers, email addresses, mailing addresses, passwords, contact preferences, billing addresses, date of birth.

Payment Data. We may collect data necessary to process your
payment if you make purchases, such as your payment card details associated.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Transaction Data. includes information such as: details of your purchases and the fulfilment of your orders (such as basket number, order
number, subtotal, title, currency, discounts, shipping, number of items,
product number, single item price, category, tax etc.); payments to and from
you and details of other products and services you have obtained from us,
correspondence or communications with you in respect of your orders, and
details of any rewards and bonuses awarded

Technical Data includes information such as: details of the device(s) you use to access our services, your internet protocol (IP) address,
login data, your username and password, browser type and version, time zone
setting and location, browser plug-in types and versions, operating system and
platform.

Profile Data. We may collect information such as: purchases
or orders made by you, product and style interests, preferences, feedback, and
survey responses.

Usage Data. We may collect information on how and when you use our website, how you
moved around it, what you searched for, website performance statistics,
traffic, location and other communication data.

Marketing and Communications Data. We may collect information such as: your preferences in receiving marketing from us and our third parties and your
communication preferences.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication and otherwise manage user
accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.

To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.

To respond and help users. We may process your information to respond to your enquiries and solve any potential issues you might have with the requested service.

To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

To fulfil and manage your orders. We may process your information to fulfil and manage your orders, payments and returns made through our website

To request feedback. We may process your information when necessary to request feedback and to contact you about your use of our Services.

To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.

To deliver targeted advertising to you.
We may process your information to develop and display personalised content and advertising tailored to your interests, location, and more.

To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.

To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.

To determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to provide marketing and promotional campaigns that are most
relevant to you.

General Data Protection Regulation (GDPR) require us to explain the
valid legal bases we rely on to process your personal information. As such, we
may rely on the following:

Consent. We may process your information if you
have given us permission (i.e. consent) to use your personal information for a
specific purpose. You can withdraw your consent at any time. Learn more about
withdrawing your consent.

Contract. We may process your personal information
when we believe it is necessary to fulfil our contractual obligations to you,
including providing our Services or at your request prior to entering a
contract with you.

Legitimate Interests. We may process your information
when we believe it is reasonably necessary to achieve our legitimate business
interests and those interests do not outweigh your interests and fundamental
rights and freedoms. For example, we may process your personal information for
some of the purposes described to:

- Send users information about special offers and discounts on our products and services.

- Develop and display personalised and relevant advertising content for our users.

- Analyse how our Services are used so we can improve them to engage and retain users.

- Support our marketing activities.

- Diagnose problems and/or prevent fraudulent activities.

- Understand how our users use our products and services so we can improve user experience.

Legal Obligations. We may process
your information where we believe it is necessary for compliance with our legal
obligations, such as to cooperate with a law enforcement body or regulatory
agency, exercise or defend our legal rights, or disclose your information as
evidence in litigation in which we are involved.

Vital Interests. We may process
your information where we believe it is necessary to protect your vital
interests or the vital interests of a third party, such as situations involving
potential threats to the safety of any person.

We may disclose and share your personal data with the parties set out below:

• Where you have consented for us to do so. For example, if you have consented to receive marketing materials from third parties, or in respect of third parties’ (including co-branded or jointly promoted) products and services, we may pass your data on to the relevant third parties for the purpose of sending you such marketing communications.
• To business partners, suppliers, sub-contractors
  and other third parties that we use in connection with the running of our business for the purposes set out in the table above in the section ‘How we process your information’, such as:

- third party service providers that we engage to provide IT systems and software, and to host our website.

- third party payment processing services
(including Shopify Payment, Paypal) to process your payment to us. MALURI does
not store your payment information. Your payment details are provided to the
payment processing service you have selected, who are required to comply with
applicable regulations and data protection laws. Please refer to the privacy policy of the relevant provider for details of how they process your personal data; services and to provide marketing and advertising services;

- third party service providers that we engage to deliver and process your e-gift card orders and e-gift card payment;

- third party service providers that we engage to deliver goods you have ordered and to manage any returns;

- third party service providers that we engage with to provide you with a rewards system using your account details
with your consent

- third party service providers that we engage to send emails on our behalf including in relation to incomplete orders or abandoned baskets, or marketing communications, to provide data cleansing
services and to provide marketing and advertising services; analytics and
search engine providers that assist us in the improvement and optimisation of
our website; affiliate networks through whom you have accessed our website.

We also may need to share your personal information in the following
situations: Business Transfers.

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition
of all or a portion of our business to another company.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law.

When it comes to keeping your details on file, we basically hold your personal data for:

 - As long as you have an account with us.

- As long as it is needed to provide services to you.

- As long as it is necessary in order to produce support related activities.

In certain cases, we may keep hold of some of your information after you have closed your account, or it is no longer needed to provide the services to you. This type of situation may arise if your details are needed to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions.

We have appropriate organisational safeguards and security measures in place to protect your data from being accidentally lost, used or accessed in an unauthorised
way, altered or disclosed.

We require any third party who is contracted to process your personal data on our behalf to have security measures in place to protect your data and to treat such data in accordance with the law.

In the unfortunate event of a personal data breach, we will notify you and any applicable regulator when we are legally required to do so.

When it comes to your personal data, you have the following rights:

• The right to be informed about how your personal data is being used by companies.
• The right to access the personal data we hold about you.
• The right to request the correction of inaccurate personal data we hold about you.
• The right to request that we restrict the processing of your personal data.
• The right to withdraw your consent where you have previously provided us with it.
• The right to request that we transfer elements of your personal data either to you or another service provider.
• The right to object to processing of your personal data.

You can make the following requests by contacting us via email legal@maluri.co.uk or by using our contact form

Request access to your personal data

You have the right to obtain a copy of the personal data we hold about you and
certain information relating to our processing of your personal data.

Request correction of your personal data

You are entitled to have your personal data corrected if it is inaccurate or
incomplete. You can update your personal data at any time by logging into your
account and updating your details directly.

Request erasure of your personal data

This enables you to request that Maluri delete your personal data, where there
is no good reason for us continuing to process it. Note, however, that we may
not always be able to comply with your request of erasure for specific legal
reasons which will be notified to you, if applicable, at the time of your
request.

Request restriction of processing of your personal data

You have a right to ask Maluri to suspend the processing of your personal data
in certain scenarios, for example if you want us to establish the accuracy of
the data, or you have objected to our use of your data but we need to verify
whether we have overriding legitimate grounds to use it. Where processing is
restricted, we are allowed to retain sufficient information about you to ensure
that the restriction is respected in future.

Request the transfer of your personal data

You have the right to obtain a digital copy of your personal data or request
the transfer of your personal data to another company. Please note though that
this right only applies to automated data which you initially provided consent
for us to use or where we used the data to perform a contract with you.

Object to processing of your personal data

You have the right to object to the processing of your personal data where we
believe we have a legitimate interest in processing it (as explained above).
You also have the right to object to our processing of your personal data for
direct marketing purposes. In some cases, we may demonstrate that we have
compelling legitimate grounds to process your data which override your rights
and freedoms.

Request human intervention for automated decision making and
profiling

You have the right to request human intervention where we are carrying out
automated decision making when processing your personal data. This form of
processing is permitted where it is necessary as part of our contract with you,
providing that appropriate safeguards are in place or your explicit consent has
been obtained.

We will try to respond to all legitimate requests within one month.
Occasionally, it may take us longer than a month if your request is
particularly complex or you have made a number of requests. In this case, we
will notify you and keep you updated. We may need to request specific
information from you to help us confirm your identity and ensure your right to
exercise any of the above rights. This is a security measure to ensure that
personal data is not disclosed to any person who has no right to receive it.

From time to time, we may change this privacy notice. If there are any significant changes we will post updates on our website, applications or let you know by email.