Privacy Policy

This policy explains how MONA ("we", "us") processes personal data when you use shopmona.uk, seller.shopmona.uk, admin.shopmona.uk and related services. MONA is a UK-based marketplace connecting customers with independent boutiques.

For privacy requests, email hello@shopmona.uk. We aim to respond within one month as required under UK GDPR.

We collect information you provide and information generated when you use MONA:

• Account information — name, email address, password (stored hashed), and optional profile details such as saved delivery addresses.
• Orders — products purchased, boutiques involved, amounts, shipping details, order status and messages related to fulfilment or disputes.
• Seller information — boutique details, contact information, listing data, and verification status needed to operate seller accounts and payouts.
• Technical data — IP address, browser type, device information, and approximate location derived from IP where necessary for security and service operation.

When you check out, card and payment details are collected through MONA's secure, encrypted payment flow (SSL/TLS). MONA does not store your full card number. For sellers, identity and bank details may be collected during verification so we can pay boutiques after dispatch.

Payment data is processed by trusted payment partners acting on our behalf, under appropriate contracts and security standards. We receive limited payment metadata (for example payment status and payout readiness) to run orders and seller earnings.

• Create and manage your customer or seller account
• Process orders, refunds and disputes
• Share fulfilment details with the relevant boutique
• Send transactional emails (order confirmation, dispatch, verification)
• Secure the platform, prevent fraud and meet legal obligations
• Improve MONA (performance, reliability and product experience)

Legal bases under UK GDPR typically include contract performance (orders and accounts), legitimate interests (security, marketplace integrity, product improvement), and consent where required (for example non-essential cookies, if used).

To fulfil your order, we share necessary details with the boutique you bought from — typically your name, delivery address, contact email or phone where provided, and the items ordered. Boutiques must use this information only to fulfil and support that order, not for unrelated marketing unless you separately agree with them.

We use cookies and similar technologies that are necessary to run the site — for example keeping you signed in, remembering your bag, and protecting sessions. These are required for MONA to function.

If we introduce optional analytics or marketing cookies, we will ask for consent where required and explain what they do. You can control cookies through your browser settings; blocking essential cookies may prevent sign-in or checkout from working.

We may use privacy-conscious analytics to understand how pages perform (for example which collections are popular). Where analytics tools process personal data, we configure them in line with UK GDPR and, where required, obtain consent. We do not sell your personal data.

We send service emails that are part of using MONA: email verification, order updates, password resets and important account notices. Marketing emails are only sent if you opt in; you can unsubscribe at any time using the link in those emails or by contacting us.

We keep account and order records for as long as needed to operate the marketplace, handle disputes, meet tax and accounting requirements, and defend legal claims. Exact periods vary by record type. When data is no longer needed, we delete or anonymise it.

Depending on your situation, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion in certain circumstances
• Restrict or object to certain processing
• Data portability for information you provided to us
• Withdraw consent where processing is based on consent
• Complain to the UK Information Commissioner's Office (ICO)

To exercise these rights, email hello@shopmona.uk with enough detail for us to verify your identity and respond. You can also update much of your account information yourself in Account settings.

Some payment and infrastructure partners may process data outside the UK. Where that happens, appropriate safeguards are used, such as UK adequacy regulations or standard contractual clauses, as described in those providers' documentation.

We may update this policy as MONA grows. The "Last updated" date at the top will change when we do. Significant changes will be highlighted on the site or by email where appropriate.