Privacy policy

Privacy Policy

Last updated: 2 September 2026

MIMONA SELENITES & FOSSILS LTD, trading as Mimona Selenites & Fossils (“we”, “us”, “our”), respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, place an order, contact us or otherwise interact with our online store.

Our online store is hosted by Shopify, which provides the ecommerce platform used to operate our website and process certain information on our behalf.

1. Who We Are

The data controller responsible for personal information covered by this Privacy Policy is:

MIMONA SELENITES & FOSSILS LTD
Trading as Mimona Selenites & Fossils
151 Perne Road
Cambridge
CB1 3NT
United Kingdom

Company number: 10022709
VAT registration number: GB 246579468
Registered in: England and Wales
Email: info@mimonaselenitesfossils.org
Telephone: 07843 751355

2. Personal Information We Collect

Depending on how you interact with our website and services, we may collect and process information including:

your name;
billing and delivery addresses;
email address;
telephone number;
order and transaction information;
payment confirmation and related payment information;
account information, where you create an account;
products you view, add to your basket or purchase;
returns, refunds and customer-service information;
messages and other communications you send to us;
IP address;
browser, device and technical information;
website usage and interaction information;
marketing preferences and consent choices; and
fraud-prevention and security information.

We do not normally receive or store your complete payment-card details ourselves. Payments are processed through the payment services available through our online store.

3. How We Collect Personal Information

We may collect personal information:

directly from you when you place an order, create an account, contact us, subscribe to marketing or otherwise provide information;
automatically when you use our website, including through cookies and similar technologies;
from Shopify and services connected to our online store;
from payment providers;
from delivery and fulfilment providers;
from fraud-prevention and security providers; and
from analytics, advertising or marketing providers where applicable and permitted by law.

4. How and Why We Use Your Personal Information

We process personal information only where we have an appropriate lawful basis.

To Process and Fulfil Orders

We use information such as your name, contact information, delivery address and order details to:

process your order;
take or confirm payment;
package and dispatch products;
arrange delivery;
provide order and delivery updates;
process cancellations, returns and refunds; and
communicate with you about your purchase.

Our lawful basis for this processing is generally that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Customer Service

We use personal information to respond to enquiries, investigate delivery problems, handle complaints and provide customer support.

Depending on the circumstances, our lawful basis may be performance of our contract with you, compliance with a legal obligation, or our legitimate interests in operating our business and providing effective customer service.

Legal, Tax and Accounting Requirements

We may retain and process transaction, payment and customer information where necessary to comply with legal, tax, accounting, regulatory or record-keeping obligations.

Our lawful basis is compliance with our legal obligations.

Security and Fraud Prevention

We may process information to protect our website, customers and business, detect or prevent fraud, investigate suspicious transactions and maintain the security of our services.

Our lawful basis is generally our legitimate interests in protecting our business and customers, and in some circumstances compliance with legal obligations.

Improving Our Website and Services

We may analyse information about how customers interact with our website to understand performance, improve functionality and develop our customer experience.

Where the processing involves non-essential cookies or similar technologies, we will seek consent where required.

Otherwise, we may rely on our legitimate interests in operating and improving our business, where those interests are not overridden by your rights and interests.

Marketing

Where permitted by law, we may use your contact information to send marketing communications about our products, offers or business.

Where consent is required, we rely on your consent.

You can unsubscribe from email marketing at any time using the unsubscribe option included in the communication or by contacting us.

5. Our Legitimate Interests

Where we rely on legitimate interests, those interests may include:

operating and improving our business;
providing effective customer service;
protecting our customers, website and business from fraud or misuse;
maintaining website and information security;
understanding how our website and services are used; and
establishing, exercising or defending legal claims.

We consider whether our interests are proportionate and whether your rights and interests override our interests before relying on this lawful basis.

6. How We Share Personal Information

We may share personal information where necessary with organisations that help us operate our business, including:

Shopify;
payment processors and payment-service providers;
postal, courier and delivery providers;
website hosting and technology providers;
customer-review services;
analytics providers;
marketing and advertising providers where applicable;
fraud-prevention and security providers;
professional advisers such as accountants or legal advisers where necessary; and
government bodies, regulators, courts, law-enforcement agencies or other authorities where required by law.

We only share personal information where there is an appropriate reason to do so.

We do not sell your personal information in the ordinary meaning of selling customer information for money.

7. Shopify

Our online store is hosted by Shopify.

Shopify processes certain personal information to provide its ecommerce, security, payment, analytics and other services.

Information you provide through our store may therefore be processed by Shopify and its service providers.

Shopify operates internationally, so this processing may involve transferring personal information outside the United Kingdom.

For further information about Shopify's handling of personal information, please refer to Shopify's privacy information available through Shopify's website.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for functions such as operating the shopping basket, checkout, security and other essential website features.

Other cookies or similar technologies may be used for purposes including:

analytics;
remembering preferences;
measuring website performance;
marketing;
advertising; and
understanding how visitors interact with our website.

Where required by law, non-essential cookies and similar technologies will not be used without the appropriate consent.

You can manage available cookie choices through the cookie or privacy controls provided on our website and, where applicable, through your browser settings.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

9. Marketing and Advertising

We may use marketing and advertising services to promote our products and understand the effectiveness of our advertising.

Where these activities involve non-essential cookies, tracking or similar technologies requiring consent, we will seek the appropriate consent before using them.

You can withdraw marketing consent or unsubscribe from direct email marketing at any time.

10. International Transfers

Some of the service providers we use, including Shopify and other technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps, where required, to ensure that the transfer is made using a lawful transfer mechanism and appropriate safeguards.

These may include transfers to countries recognised as providing an adequate level of protection or the use of approved contractual safeguards or other legally recognised transfer mechanisms.

You may contact us if you require further information about safeguards relevant to your personal information.

11. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax, regulatory and dispute-resolution requirements.

The appropriate retention period depends on factors including:

the nature of the information;
why it was collected;
whether it remains necessary to provide our services;
applicable legal and tax requirements;
fraud-prevention and security requirements; and
whether the information may be required to establish, exercise or defend legal claims.

When personal information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

12. Data Security

We take reasonable technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no internet transmission or electronic-storage system can be guaranteed to be completely secure.

Customers are responsible for keeping any account credentials confidential and should contact us if they believe their account or personal information has been compromised.

13. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights including:

Right of access – to request information about personal information we hold about you and obtain a copy;
Right to rectification – to ask us to correct inaccurate or incomplete information;
Right to erasure – to ask us to delete personal information in certain circumstances;
Right to restriction – to ask us to restrict processing in certain circumstances;
Right to data portability – to receive certain information in a portable format where applicable;
Right to object – to object to certain processing, including processing based on legitimate interests and direct marketing; and
Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time.

These rights are subject to conditions and exemptions under applicable data-protection law.

You have an absolute right to object to the use of your personal information for direct marketing.

To exercise your rights, contact us at info@mimonaselenitesfossils.org.

We may need to verify your identity before completing certain requests.

14. Complaints

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to investigate and respond.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data-protection regulator.

Information about making a data-protection complaint is available from the ICO through its official website.

Your right to complain to the ICO is not affected by contacting us first.

15. Children's Privacy

Our website and products are not specifically directed at children, and we do not knowingly collect personal information from children in circumstances where doing so would be unlawful.

If you believe that a child has provided personal information to us inappropriately, please contact us.

16. Automated Decision-Making

We do not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects, except where such processing may be lawfully carried out by payment, fraud-prevention or other service providers in connection with providing their services.

Where applicable, those providers may provide additional information about their processing in their own privacy notices.

17. Providing Personal Information

Certain personal information is necessary for us to enter into and fulfil a contract with you.

For example, we require appropriate contact, delivery and payment information to process and deliver an order.

If you do not provide information that is necessary to fulfil an order, we may be unable to accept or complete that order.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.

When we make changes, we will update the date shown at the top of this policy.

Where required by law, we will provide additional notice of material changes.

19. Contact Us

For questions about this Privacy Policy, our use of your personal information or your data-protection rights, contact: