We keep very little about you, and we are careful with what we do keep. This policy explains what personal information George Mirza collects when you use george-mirza.com, order from us, open a trade account or get in touch, why we collect it, who we share it with and the rights you have over it. It is written to comply with the UK General Data Protection Regulation and the Data Protection Act 2018.
Who is responsible for your information
The data controller is George Mirza Ltd, trading as George Mirza, registered in England and Wales under company number 17534492, registered office 177-179 Washway Road, Sale, Manchester, M33 4AH, United Kingdom. If you have any question about this policy or about your information, email enquiries@george-mirza.com with "Privacy" in the subject line.
What we collect
- Who you are and how to reach you — your name, email address, telephone or WhatsApp number, billing address and delivery address.
- Your orders — what you have bought, the finishes and sizes you chose, quotes we have given you, delivery details, invoices and any correspondence about an order, return or guarantee claim.
- Payment information — payments are handled by Shopify Payments, Klarna and the other providers offered at checkout. They send us confirmation that you have paid and the last four digits of a card; we never see or store your full card number.
- Your account — if you create an account, your login details, saved addresses and order history.
- Trade accounts — business name, your role, the nature of your practice, project details and, where applicable, VAT and company numbers.
- Bespoke work — drawings, photographs, measurements and briefs you send us so that we can design and make a piece.
- Messages — emails, WhatsApp messages and contact-form enquiries, which we keep so that we have a written record of what was agreed.
- Marketing preferences — whether you have asked to receive our newsletter.
- How you use the site — technical information collected automatically, such as your IP address, browser, device, the pages you visit and how you arrived at the site. See Cookies below.
We do not collect or ask for any special category information (such as health or religious data) and our site is not intended for anyone under 18.
Why we use it and our lawful basis
| What we do | Why we are allowed to |
|---|---|
| Take your order, make the pieces, deliver them and take payment | Performing our contract with you |
| Answer your questions, send colour samples, prepare quotes and bespoke drawings | Taking steps at your request before a contract, and our legitimate interest in running the business |
| Deal with returns, repairs and guarantee claims | Performing our contract and complying with consumer law |
| Keep accounting and tax records | Our legal obligations |
| Verify payments and prevent fraud | Our legitimate interest in protecting the business and our customers, and our legal obligations |
| Send you our newsletter | Your consent, which you can withdraw at any time |
| Improve the website and understand how it is used | Our legitimate interest in making the site work well, and your consent for non-essential cookies |
| Manage trade accounts and project schedules | Performing our contract with your business and our legitimate interests |
Marketing
We only send marketing emails if you have signed up to our newsletter or ticked the box at checkout. Every email has an unsubscribe link, and you can also ask us to stop at any time by emailing enquiries@george-mirza.com. We will never sell your details or pass them to anyone else for their own marketing.
Cookies
Our website runs on Shopify and uses a small number of cookies and similar technologies:
- Essential cookies, which make the site work: remembering what is in your basket, keeping you signed in, your chosen country and currency, and protecting the site from abuse. These cannot be switched off.
- Analytics cookies, which tell us in aggregate how the site is used, so that we can improve it.
- Marketing cookies, which may be set by advertising or social platforms when you visit the site, so that we can measure our advertising and show you relevant content elsewhere.
Non-essential cookies are only set with your consent, which you can give or withdraw using the cookie banner or the privacy settings on the site. You can also delete or block cookies through your browser settings; the site will still work, although some features may not.
Who we share it with
We share your information only with the people and services we need to run the business and fulfil your order:
- Shopify, which hosts our website and store, and processes orders and payments on our behalf.
- Payment providers such as Shopify Payments, Klarna and the card or wallet providers offered at checkout, when you choose to pay with them. They process your payment under their own privacy policies.
- Carriers and couriers, who receive your name, address and telephone number to deliver your order.
- Our workshop and finishing partners, who receive the specification of what to make, and for bespoke work your drawings, but not your personal contact details unless a site visit or direct delivery requires it.
- Service providers who help us run the business, such as our email and newsletter platform, WhatsApp (Meta), cloud storage, accountants and professional advisers, each bound by confidentiality and data-protection obligations.
- Authorities, where the law requires it, for example HM Revenue & Customs, customs authorities for international orders, or a court.
We do not sell personal information.
Where your information is kept
We have offices in the United Kingdom and Dubai, and some of the services we use, including Shopify, store information on servers outside the UK. Whenever information leaves the UK we make sure it is protected to the standard UK law requires, by relying on a UK adequacy decision, the International Data Transfer Agreement or standard contractual clauses with the recipient. You can ask us for details of the safeguards that apply to your information.
How long we keep it
- Orders, invoices and guarantee records — for ten years from delivery, so that we can honour our ten-year guarantee and meet our tax and accounting obligations (which require at least six years).
- Your account — for as long as you keep it open. You can delete it at any time, after which we keep only the order records described above.
- Enquiries and quotes that do not become orders — for two years from the last contact.
- Marketing preferences — until you unsubscribe, after which we keep a record of your email address only to make sure we do not contact you again.
- Website analytics — in aggregate, with any identifiers removed or expired within 26 months.
Keeping it safe
Our website is served over an encrypted connection and our store is hosted on Shopify, which is certified to the Payment Card Industry Data Security Standard. Access to customer information is limited to the people who need it to do their job, and the systems that hold it are protected by passwords and, wherever it is offered, two-factor authentication. No method of transmission or storage is completely secure, but if we ever become aware of a breach that puts your rights at risk we will tell you and the regulator as the law requires.
Your rights
Under UK data-protection law you have the right to:
- Access the personal information we hold about you and receive a copy of it.
- Correct information that is inaccurate or incomplete.
- Erase your information where we no longer need it, where you withdraw consent, or where you object and we have no overriding reason to keep it.
- Restrict how we use your information while a question about it is resolved.
- Object to our using your information for direct marketing, or on the basis of our legitimate interests.
- Port the information you gave us to another provider in a machine-readable format.
- Withdraw consent at any time where we rely on it, without affecting what was done before.
To exercise any of these rights, email enquiries@george-mirza.com. We will respond within one month and will not charge you, unless a request is clearly unfounded or excessive. We may need to confirm your identity first. If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, although we would ask you to come to us first so that we can put things right.
Links to other websites
Our site links to other websites, such as our payment and finance providers, carriers' tracking pages and social platforms. Each has its own privacy policy, and we are not responsible for how they use your information.
Changes to this policy
We will update this policy if the way we use information changes or the law requires it. The date at the top of the page shows when it was last changed, and where a change is significant we will tell you by email or by a notice on the site.
Contact
George Mirza Ltd trading as George Mirza
177-179 Washway Road, Sale, Manchester, M33 4AH, United Kingdom
enquiries@george-mirza.com