Privacy Policy

Last updated: 19/06/2026

This Privacy Policy explains how Moss & Mac collects, uses, stores and protects your personal information when you visit our website, place an order, contact us, sign up to marketing, or interact with us online.

By using our website, you agree to the collection and use of your information in line with this Privacy Policy.

1. Who We Are

Moss & Mac is a UK-based business selling embroidered caps, hats and related products online.

Business name: Moss & Mac
Email: stuart@mossandmac.com
VAT number: GB 518 2526 93

For the purposes of UK data protection law, Moss & Mac is the data controller for the personal information we collect and use.

2. The Personal Information We Collect

We may collect the following types of personal information:

• your name

• billing address

• delivery address

• email address

• phone number, if provided

• order details

• payment information

• delivery and tracking information

• messages, enquiries or customer service communications

• marketing preferences

• website usage information, such as pages viewed, products viewed and interactions with our website

• device and technical information, such as IP address, browser type, device type and cookie data

We only collect information that is relevant to running our store, processing orders, providing customer service, improving our website, and marketing our products where permitted.

3. How We Collect Your Information

We collect personal information when you:

• visit our website

• place an order

• create or use a customer account, if available

• contact us by email, form, social media or other channels

• sign up to our newsletter or marketing messages

• leave a review

• interact with our website, adverts or social media pages

• use payment or checkout services through our website

Some information is collected directly from you. Some technical information is collected automatically through cookies and similar technologies.

4. How We Use Your Information

We use your personal information to:

• process and fulfil your orders

• take payment and prevent fraud

• arrange delivery

• send order confirmations and delivery updates

• respond to enquiries and customer service requests

• manage returns, refunds and complaints

• keep accounting, tax and business records

• improve our website, products and customer experience

• send marketing emails or messages where you have signed up or where the law allows us to do so

• show relevant content or advertising

• protect our website, business and customers from fraud, misuse or security issues

• comply with legal and regulatory obligations

5. Our Lawful Bases for Using Your Information

Under UK data protection law, we must have a lawful basis for using your personal information.

We may use your information on the following lawful bases:

Contract

We use your information to process and fulfil your order, take payment, deliver products, handle returns and provide customer support.

Legal obligation

We use some information to comply with legal duties, including tax, VAT, accounting and consumer law obligations.

Legitimate interests

We may use information where it is necessary for our legitimate business interests, such as improving our website, preventing fraud, managing customer enquiries, keeping business records, and understanding how customers use our store.

Consent

We use consent where required, such as for certain marketing emails, optional cookies, analytics or advertising technologies.

You can withdraw your consent at any time where consent is the lawful basis.

6. Payments

Payments are processed securely through third-party payment providers available through our website, such as Shopify Payments, PayPal, Shop Pay, Apple Pay, Google Pay or card payment providers.

We do not store your full card details on our own systems. Payment providers process your payment information in line with their own security and privacy terms.

7. Delivery

We share relevant information with delivery and courier providers so they can deliver your order. This may include your name, delivery address, email address, phone number and tracking details.

8. Accounting and Business Records

We may store order and transaction information in our accounting and bookkeeping systems, including Xero and related business tools.

We keep these records to manage our business, meet tax and VAT requirements, and comply with accounting obligations.

9. Marketing

If you sign up to our newsletter or marketing messages, we may use your email address and marketing preferences to send you updates, product launches, offers, behind-the-scenes content and Moss & Mac news.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in the email or contacting us at kate@mossandmac.com.

We will not sell your personal information to third parties.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies to make the website work, improve your browsing experience, understand website usage, support checkout, and help with marketing or advertising.

Some cookies are essential for the website to function. Others, such as analytics or advertising cookies, may require your consent.

Types of Cookies We Use

Essential Cookies

These cookies are needed for the website to work.

They may support functions such as checkout, basket, security, fraud prevention, customer accounts, payment processing and cookie preference settings.

You cannot usually switch these off through our website because the site would not work properly without them.

Analytics Cookies

Analytics cookies help us understand how visitors use our website, such as which pages are visited, how customers move around the site, and whether the website is working well.

This helps us improve the website and customer experience.

We may use tools such as Shopify analytics, Google Analytics or similar analytics services.

Marketing and Advertising Cookies

Marketing and advertising cookies may be used to show relevant adverts, measure advert performance, understand customer interests, and improve our marketing.

These may be set by us or by third-party advertising platforms, such as Meta, Google, TikTok, Pinterest or similar platforms, if we use them.

Functionality Cookies

Functionality cookies help remember choices you make on the website, such as preferences, settings or features that improve your experience.

Third-Party Cookies

Some cookies may be placed by third parties who provide services to us.

These may include:

• Shopify, which powers our online store

• payment providers

• analytics providers

• advertising and social media platforms

• email marketing tools

• security or fraud-prevention providers

These third parties may process information in line with their own privacy and cookie policies.

Cookie Consent

Some cookies are essential and are used because they are needed for our website to function.

For non-essential cookies, such as analytics or advertising cookies, we will ask for your consent where required.

You can accept, reject or manage non-essential cookies through our cookie banner or cookie settings, where available.

You can change your cookie preferences at any time using the cookie settings link on our website, if available, or through your browser settings.

Managing Cookies in Your Browser

You can usually control cookies through your browser settings.

Most browsers allow you to:

• see what cookies are stored

• delete cookies

• block cookies

• block third-party cookies

• clear cookies when you close your browser

If you block all cookies, some parts of our website may not work properly, including basket and checkout functions.

Updates to This Cookie Policy

We may update this Cookie Policy from time to time.

The latest version will always be available on our website. The date at the top of this page shows when it was last updated.

You can manage cookie preferences through our website cookie banner or your browser settings.

For more information, please see our Cookie Policy or cookie settings page, if available.

11. Who We Share Your Information With

We may share your personal information with trusted third parties who help us run our business, including:

• Shopify, which powers our online store

• payment processors, such as Shopify Payments, PayPal and card payment providers

• delivery and courier providers

• email marketing providers, if used

• website analytics and advertising providers, if used

• Xero and accounting/bookkeeping providers

• professional advisers, such as accountants or legal advisers

• IT, website, security and cloud service providers

• HMRC, regulators or authorities where required by law

We only share information where necessary and appropriate.

12. International Transfers

Some of the companies we use, including Shopify, payment providers, analytics providers or cloud service providers, may process personal information outside the UK.

Where personal information is transferred outside the UK, we rely on appropriate safeguards or lawful transfer mechanisms to help protect your information.

13. How Long We Keep Your Information

We keep personal information only for as long as necessary for the purposes described in this policy.

As a guide:

• order and transaction records are usually kept for up to 6 years for tax, VAT and accounting purposes

• customer service messages are kept for as long as needed to resolve the enquiry and maintain business records

• marketing data is kept until you unsubscribe or ask us to remove it

• website analytics data may be kept for a shorter period depending on the settings of the tools we use

We may keep information for longer if required by law, to resolve disputes, prevent fraud, or enforce our legal rights.

14. Your Rights

Under UK data protection law, you may have rights over your personal information, including the right to:

• access the personal information we hold about you

• ask us to correct inaccurate information

• ask us to delete your information in certain circumstances

• ask us to restrict how we use your information

• object to certain uses of your information

• withdraw consent where we rely on consent

• ask for your information to be transferred to another provider, where applicable

• complain to the Information Commissioner’s Office

To exercise your rights, contact us at:

[insert email address]

We may need to verify your identity before responding to your request.

15. Security

We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no website, payment system or internet transmission is completely secure. You are responsible for keeping your account login details secure where customer accounts are available.

16. Children

Our website and products are not aimed specifically at children, and we do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, please contact us and we will take appropriate action.

17. Links to Other Websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those websites.

You should read the privacy policies of any third-party websites you visit.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website. The date at the top of this page shows when it was last updated.

19. Complaints

If you have a concern about how we use your personal information, please contact us first so we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator.

ICO website: www.ico.org.uk

20. Contact Us

For questions about this Privacy Policy or how we use your personal information, contact us at:

Email: stuart@mossandmac.com
Business name: Moss & Mac