Privacy Policy

1. Introduction

At OutletMystic, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, share, retain and safeguard your personal information when you visit or make a purchase from https://www.outletmystic.com (“Website”). It applies to all individuals whose data we process in the context of our online store.

2. Data Controller

The data controller is OutletMystic (“we”, “us”, “our”). If you have any questions about this policy or your rights, please contact us at contact@outletmystic.com.

3. What Personal Data We Collect

We may collect and process the following personal data:

  • Identity data: name, date of birth (if required), gender (optional)

  • Contact data: billing address, delivery address, email address, telephone number

  • Financial data: payment method, transaction details

  • Technical data: IP address, browser type and version, time zone, operating system and platform, browser plug‑in types and versions, device identifiers

  • Usage data: how you use our Website, products purchased, pages visited, time spent on pages

  • Marketing and communications data: your preferences in receiving marketing from us and third parties

4. How and Why We Use Your Data (Lawful Bases)

We use your data for the following purposes and on the following lawful bases:

  • To process and fulfil your order (contractual necessity)

  • To manage payments, delivery and returns (contractual necessity)

  • To send you service messages about your order, or other legal notices (legal obligation)

  • To notify you about offers, updates or newsletters, if you have given your consent (consent)

  • To improve our Website and customer experience through analytics (legitimate interests)

  • To comply with applicable laws or regulations (legal obligation)

5. Data Sharing and Transfers

We may share the personal data we collect with:

  • Service providers who assist with payments, shipping, hosting, email delivery or analytics

  • Third‑party marketing platforms (with your consent)

  • Legal or regulatory authorities if required by law or in response to a valid request
    We do not sell your personal data to third parties for their marketing purposes.
    International transfers: Some of our service providers operate outside the UK/EEA. When we transfer your data internationally, we ensure appropriate safeguards are in place (e.g., standard contractual clauses).

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store your data. Please see our Cookie Policy for detailed information. You can choose to disable non‑essential cookies, but some features of our Website may not function correctly as a result.

7. Data Retention

We retain your personal data for as long as needed for the purposes listed above, and in accordance with legal, tax and accounting obligations. When no longer required, we will securely delete or anonymise your data.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access – you can request a copy of your personal data

  • Right to rectification – you can ask us to correct data you believe is inaccurate

  • Right to erasure – you can ask us to erase your data, subject to legal obligations

  • Right to restrict processing – you can ask us to restrict how we use your data

  • Right to object – you can object to our processing of your data e.g., for direct marketing

  • Right to data portability – you can request to receive your data in a structured, commonly used format
    You can exercise any of these rights by contacting us at contact@outletmystic.com.
    If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

9. Security

We take appropriate technical and organisational measures to secure your personal data. However, no method of transmission over the internet or electronic storage is completely secure. Please help by protecting your account information.

10. Children’s Privacy

Our Website is not intended for persons under the age of 16. We do not knowingly collect personal data from minors under 16 without parental consent. If you believe we have collected data of a minor, please contact us immediately.

11. Changes to this Policy

We may update this policy from time to time. The latest version will always be posted on our Website with the effective date. We recommend you review this Policy regularly.

12. Contact Us

If you have questions about this policy or your data, please contact:
📧 contact@outletmystic.com