How we handle personal data on shopmona.uk. Last updated 13 July 2026.
This policy explains how MONA ("we", "us") processes personal data when you use shopmona.uk, seller.shopmona.uk, admin.shopmona.uk and related services. MONA is a UK-based marketplace connecting customers with independent boutiques.
For privacy requests, email hello@shopmona.uk. We aim to respond within one month as required under UK GDPR.
We collect information you provide and information generated when you use MONA:
When you check out, card and payment details are collected through MONA's secure, encrypted payment flow (SSL/TLS). MONA does not store your full card number. For sellers, identity and bank details may be collected during verification so we can pay boutiques after dispatch.
Payment data is processed by trusted payment partners acting on our behalf, under appropriate contracts and security standards. We receive limited payment metadata (for example payment status and payout readiness) to run orders and seller earnings.
Legal bases under UK GDPR typically include contract performance (orders and accounts), legitimate interests (security, marketplace integrity, product improvement), and consent where required (for example non-essential cookies, if used).
To fulfil your order, we share necessary details with the boutique you bought from — typically your name, delivery address, contact email or phone where provided, and the items ordered. Boutiques must use this information only to fulfil and support that order, not for unrelated marketing unless you separately agree with them.
We use cookies and similar technologies that are necessary to run the site — for example keeping you signed in, remembering your bag, and protecting sessions. These are required for MONA to function.
If we introduce optional analytics or marketing cookies, we will ask for consent where required and explain what they do. You can control cookies through your browser settings; blocking essential cookies may prevent sign-in or checkout from working.
We may use privacy-conscious analytics to understand how pages perform (for example which collections are popular). Where analytics tools process personal data, we configure them in line with UK GDPR and, where required, obtain consent. We do not sell your personal data.
We send service emails that are part of using MONA: email verification, order updates, password resets and important account notices. Marketing emails are only sent if you opt in; you can unsubscribe at any time using the link in those emails or by contacting us.
We keep account and order records for as long as needed to operate the marketplace, handle disputes, meet tax and accounting requirements, and defend legal claims. Exact periods vary by record type. When data is no longer needed, we delete or anonymise it.
Depending on your situation, you may have the right to:
To exercise these rights, email hello@shopmona.uk with enough detail for us to verify your identity and respond. You can also update much of your account information yourself in Account settings.
Some payment and infrastructure partners may process data outside the UK. Where that happens, appropriate safeguards are used, such as UK adequacy regulations or standard contractual clauses, as described in those providers' documentation.
We may update this policy as MONA grows. The "Last updated" date at the top will change when we do. Significant changes will be highlighted on the site or by email where appropriate.
