1. Who we are
This policy explains how MALDRENIS LTD (“Maldrenis”, “we”, “us”) handles personal data when you visit maldrenis.uk, place an order, email us or make a warranty claim. We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Legal name: MALDRENIS LTD
- Company number: 17480986 (registered in England and Wales)
- Registered address: 167-169 Great Portland Street, Fifth Floor, London, England, W1W 5PF
- Email: [email protected]
- Phone: +44 7418 532967
For any privacy question or to exercise your rights, email us at the address above.
2. Data we collect
Order and delivery data
When you check out we collect the details you enter in the order form: full name, email address, phone number, delivery address, town or city, postcode and any comment you add to the order. We also record what you ordered, prices, the order number and the order date.
Payment data
Card and payment details are entered directly with our payment provider and processed by them. We do not see or store your full card number. We receive a payment confirmation, a transaction reference and, where the provider shares it, the card type and last four digits.
Email correspondence
If you email us, for example to ask about sizing, trolley fit or a return, we keep your email address, name, the content of your messages and any attachments you send.
Warranty claims
For a warranty claim we collect your order number, the product model, the trolley or battery serial number, a description of the fault and any photos or videos you choose to send.
Returns
When you cancel an order or return an item we record which items were returned, the reason if you give one, the item condition and refund details.
Technical data
When you browse the site your device sends standard technical information such as IP address, browser type and the pages requested. This is handled by our hosting provider and by Google Fonts, which delivers the fonts used on the site.
3. Purposes and legal bases
| Purpose | Data used | Legal basis |
|---|---|---|
| Processing, paying for and delivering your order | Order, delivery and payment data | Contract |
| Sending order confirmations and delivery updates | Name, email, phone, order details | Contract |
| Handling cancellations, returns and refunds | Order and returns data | Contract; legal obligation (Consumer Contracts Regulations 2013) |
| Handling warranty claims with manufacturers | Warranty claim data, serial number, contact details | Contract; legitimate interests in resolving product faults |
| Answering your emails and enquiries | Email correspondence | Legitimate interests in responding to customers; contract where the enquiry relates to an order |
| Keeping accounting and tax records | Order and payment records | Legal obligation |
| Preventing fraud and keeping the site secure | Order, payment and technical data | Legitimate interests |
| Sending product news, only if you ask for it | Name and email | Consent |
Where we rely on legitimate interests, we have weighed them against your rights and expectations. You can object at any time, see section 9.
4. Who we share data with
We do not sell your personal data. We share it only as needed with:
- Payment provider — to take payment and issue refunds. The provider acts as an independent controller for payment and fraud checks.
- Courier services — your name, delivery address, phone number and email so they can deliver your parcel and send tracking updates.
- Manufacturers and their service agents — for warranty claims we share the product model, serial number, fault description, proof of purchase and, where needed, your contact details.
- IT, email and hosting providers — who store and process data on our behalf under written contracts.
- Professional advisers — accountants, auditors and lawyers, under duties of confidentiality.
- Public authorities — such as HMRC or law enforcement, where the law requires it.
5. International transfers
Some of our service providers, such as email, hosting or payment services, may process data outside the UK. When that happens we make sure the transfer is protected: the destination is covered by UK adequacy regulations, or we use the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any extra safeguards needed. You can ask us for details of these safeguards.
6. How long we keep data
| Data | Retention period |
|---|---|
| Order, invoice and payment records | 6 years from the end of the financial year of the order, for tax and accounting |
| Delivery details shared with couriers | Kept with the order record; couriers keep them under their own policies |
| Returns and refund records | 6 years from the refund date |
| Warranty claims, including serial numbers | For the warranty period of the product and 6 years after the claim is closed |
| Email correspondence not linked to an order | 2 years from our last contact |
| Marketing consent records | Until you withdraw consent, then a suppression record to respect your choice |
When the period ends we delete or anonymise the data.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access limited to staff who need it, strong passwords with two-factor authentication on business accounts, and contracts with providers that require them to protect your data. No online service is completely secure, so if we become aware of a breach that puts you at risk we will tell you and the ICO where the law requires.
8. Cookies
Our website does not set analytics, advertising or tracking cookies. Your cart is kept only in the memory of the open page and disappears when you close or reload it; nothing is saved on your device. Fonts are loaded from Google Fonts, which receives your IP address to deliver them. If we ever add non-essential cookies, we will ask for your consent first and update this policy.
9. Your rights
Under UK GDPR you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data where there is no good reason to keep it.
- Restriction — ask us to pause the use of your data, for example while we check its accuracy.
- Portability — receive data you gave us in a structured, machine-readable format, or have it sent to another organisation.
- Objection — object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on consent, withdraw it at any time.
To use any of these rights, email [email protected]. We reply within one month, and it is free in most cases. We may ask you to confirm your identity before we act.
10. Withdrawing consent
If you have agreed to receive product news, you can withdraw consent by using the unsubscribe link in any email or by emailing us. Withdrawing consent does not affect processing we carried out before you withdrew it, and it does not affect how we handle your orders.
11. Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.
12. Age restriction
Our shop is intended for adults. You must be 18 or over to place an order. We do not knowingly collect personal data from children; if you believe a child has sent us their data, contact us and we will delete it.
13. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows when it was last revised. If a change significantly affects how we use your data, we will let customers know by email.
Last updated: 30 September 2026