Privacy policy

Last updated: 24 July 2026

About Us

Muntjac ("we", "us", "our") operates the website and online store available at www.muntjacbags.co.uk.

For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, we are the data controller of your personal data.

Our contact details are:

Muntjac
Flat 31, Evelyn Mansions

Carlisle Place

London

SW1P 1NH
United Kingdom

Email: helena@muntjacbags.co.uk

Email: helena@muntjacbags.co.uk
Telephone: +44 7872 938484

If you have any questions about this Privacy Policy or how we process your personal data, please contact us using the details above.

The Personal Data We Collect

We may collect and process the following categories of personal data:

Identity and Contact Data

  • Name
  • Billing address
  • Delivery address
  • Email address
  • Telephone number

Account Data

  • Username
  • Password
  • Account preferences and settings

Transaction Data

  • Details of products viewed, purchased, returned or exchanged
  • Order history
  • Payment confirmations
  • Transaction records

Payment Data

Payments are processed by our payment service providers. We do not generally store full payment card details.

Communications Data

  • Enquiries and correspondence
  • Customer service requests
  • Product reviews or feedback

Technical and Usage Data

  • IP address
  • Browser type
  • Device information
  • Website usage information
  • Cookie and tracking information

Marketing Data

  • Marketing preferences
  • Records of consent to receive marketing communications

How We Collect Your Personal Data

We collect personal data:

  • directly from you when you place an order, create an account, contact us or subscribe to marketing communications;
  • automatically when you use our website through cookies and similar technologies;
  • from Shopify and other service providers who help us operate our business; and
  • from third parties where permitted by law.

How We Use Your Personal Data and Our Lawful Bases

Under UK GDPR, we must have a lawful basis for processing your personal data.

Purpose

Personal Data Used

Lawful Basis

Processing and fulfilling orders

Identity, contact, transaction and payment data

Performance of a contract

Creating and managing customer accounts

Identity, contact and account data

Performance of a contract

Responding to enquiries and customer support requests

Identity, contact and communications data

Legitimate interests (providing customer service) and, where applicable, performance of a contract

Managing returns, refunds and exchanges

Identity, contact and transaction data

Performance of a contract

Maintaining business records and accounts

Identity, contact and transaction data

Compliance with legal obligations

Detecting fraud and protecting our website and business

Technical, usage and transaction data

Legitimate interests (fraud prevention and business security)

Improving our website, products and services

Technical, usage and transaction data

Legitimate interests (improving our business and customer experience)

Sending marketing communications

Identity, contact and marketing data

Consent and/or our legitimate interests where permitted by law

Complying with legal obligations and resolving disputes

Any relevant personal data

Compliance with legal obligations and legitimate interests

Legitimate Interests

Where we rely on legitimate interests, those interests include:

  • operating and improving our business;
  • maintaining website security;
  • preventing fraud;
  • providing customer support;
  • analysing customer behaviour and website performance; and
  • protecting our legal rights.

Marketing Communications

If you have consented to receive marketing communications, or where permitted by applicable law, we may send you information about our products, services and promotions by email, SMS or other electronic means.

You may withdraw your consent or unsubscribe from marketing communications at any time by:

  • clicking the unsubscribe link within our emails;
  • replying STOP to marketing SMS messages (where available); or
  • contacting us using the details above.

Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

Cookies and Similar Technologies

We use cookies and similar technologies to:

  • operate the website;
  • remember your preferences;
  • analyse website traffic and usage;
  • improve website functionality; and
  • provide personalised advertising where permitted by applicable law.

Further information is available in our Cookie and Analytics Policy below.

Sharing Your Personal Data

We may share your personal data with:

Shopify

·       Our website is hosted by Shopify. Shopify processes personal data in accordance with its own privacy documentation.

Service Providers

·       Including providers of:

·       website hosting;

·       payment processing;

·       shipping and fulfilment;

·       customer support;

·       data analytics;

·       email and SMS marketing; and

·       cloud storage and IT services.

Professional Advisers

·       Including lawyers, accountants, auditors and insurers.

Authorities and Regulators

·       Where disclosure is required by law or necessary to protect legal rights.

Business Transfers

·       If our business or assets are sold, merged or reorganised, personal data may be transferred to the relevant purchaser or successor.

We do not sell your personal data to third parties and do not disclose personal data except as described in this Privacy Policy.

International Transfers

Some of our service providers, including Shopify, may process or store personal data outside the United Kingdom.

Where personal data is transferred outside the United Kingdom, we will take reasonable steps to ensure that it is protected in accordance with applicable data protection laws.

For further information about how Shopify processes personal data, please see Shopify's privacy information.

How Long We Keep Your Personal Data

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy. In general:

  • customer account records are retained until the account is closed and for up to 2 years thereafter;
  • order, accounting and tax records are retained for 6 years;
  • customer support correspondence is retained for up to 3 years after the enquiry has been resolved;
  • marketing records are retained until you withdraw your consent or object to marketing and, where necessary, for up to 3 years thereafter to maintain suppression records and ensure that we respect your marketing preferences; and
  • website analytics data is retained in accordance with the retention settings of the relevant analytics provider.

We may retain personal data for longer where necessary to comply with legal obligations, resolve disputes or establish, exercise or defend legal claims.

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure or alteration.

However, no method of transmitting information over the internet or storing information electronically is completely secure, and we cannot guarantee absolute security.

Your Rights

Subject to applicable law, you may have the right to:

  • access your personal data;
  • request correction of inaccurate personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent where processing is based on consent;
  • receive your personal data in a portable format;
  • request transfer of your personal data to another organisation where technically feasible; and
  • object to direct marketing.

To exercise any of these rights, please contact us using the details set out above.

We may ask for proof of identity before responding to your request.

Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Children's Privacy

Our products and services are not directed at children.

We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact us and we will investigate and, where appropriate, delete that information.

Complaints

If you have concerns about how we use your personal data, please contact us first.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Website: https://ico.org.uk
Telephone: 0303 123 1113

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements or data processing activities.

Any updated version will be published on this website together with an updated "Last updated" date.

COOKIE AND ANALYTICS POLICY

Last updated: 24 July 2026

About This Policy

This Cookie and Analytics Policy explains how Muntjac ("we", "us" and "our") uses cookies and similar technologies when you visit our website.

This Policy should be read together with our Privacy Policy.

What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website.

Cookies help websites function properly, improve user experience, remember preferences, analyse website performance and, in some cases, support marketing and advertising activities.

How We Use Cookies

We use cookies and similar technologies for the following purposes:

Strictly Necessary Cookies

These cookies are required for the operation of the website and cannot be switched off through our cookie preference tools.

They may be used to:

  • remember the contents of your shopping basket;
  • enable secure checkout and payment processing;
  • maintain website security;
  • remember cookie consent preferences; and
  • provide core website functionality.

Because these cookies are necessary for the operation of the website, they do not generally require consent.

Analytics Cookies

Analytics cookies help us understand how visitors use our website so that we can improve its performance, content and customer experience.

Analytics information may include:

  • pages visited;
  • time spent on the website;
  • products viewed;
  • device and browser information; and
  • general website traffic patterns.

We will only use analytics cookies where required by law and where any necessary consent has been obtained.

Marketing Cookies

Marketing or advertising cookies may be used to:

  • measure the effectiveness of advertising campaigns;
  • understand how visitors discover our website;
  • personalise advertisements; and
  • display relevant content on third-party platforms.

Where required by law, these cookies will only be used with your consent.

Shopify and Third-Party Providers

Our website is hosted on Shopify.

Shopify may place certain cookies that are necessary for website functionality, security, checkout and store operation.

We may also use third-party service providers to assist with:

  • website analytics;
  • website performance monitoring;
  • email marketing;
  • customer engagement; and
  • advertising and marketing activities.

These third parties may use cookies or similar technologies in accordance with their own privacy and cookie practices.

Managing Your Cookie Preferences

When you first visit our website, you may be given the option to accept, reject or manage certain categories of cookies.

You may also manage cookies through your browser settings.

Please note that disabling certain cookies may affect the functionality of the website and may prevent some features from operating correctly.

Analytics

We may use website analytics tools to understand how visitors interact with our website and to improve our products and services.

Analytics data is generally collected in aggregate form and may include:

  • browser type;
  • device type;
  • pages viewed;
  • referring websites;
  • approximate geographic location; and
  • interactions with website content.

We use analytics information to:

  • improve website usability;
  • monitor website performance;
  • understand customer interests; and
  • improve our products and services.

We do not use analytics information to make decisions that produce legal or similarly significant effects on individuals.

International Transfers

Some providers of analytics, hosting and website services may process information outside the United Kingdom.

Where personal data is transferred outside the United Kingdom, we will take reasonable steps to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

For further information, please see our Privacy Policy.

Changes to This Policy

We may update this Cookie and Analytics Policy from time to time to reflect changes in technology, legal requirements or our business practices.

Any updated version will be published on this website together with an updated "Last updated" date.

Contact Us

If you have any questions about this Policy, please contact:

Muntjac
Flat 31, Evelyn Mansions
Carlisle Place
London SW1P 1NH
United Kingdom

Email: helena@muntjacbags.co.uk