Privacy Policy

Last updated: April 2025

1. Who We Are

My Reta is a trading name of CCwithAI, a company registered in the United Kingdom. We are the data controller for personal information collected via myreta.co.uk.

If you have any questions about how we handle your data, please contact us at: info@myreta.co.uk.

2. What Data We Collect

We collect personal data that you provide directly to us, as well as certain data collected automatically when you use our website.

Data you provide to us:

• Name and contact details (email address, postal address, phone number)
• Order information (products ordered, delivery address, order history)
• Payment details — processed securely by Stripe; we do not store full card numbers
• Communications you send us (support emails, enquiries)

Data collected automatically:

• IP address and browser type
• Pages visited and time spent on site
• Referring URLs and device information
• Cookie and session data (see Section 7)

3. How We Use Your Data

We use your personal data only for legitimate purposes and in accordance with UK GDPR. Our lawful bases for processing are as follows:

• Contract performance: Processing and fulfilling your orders, managing returns and refunds, and communicating about your order status.
• Legal obligation: Maintaining records required by law (e.g. financial and tax records).
• Legitimate interests: Improving our website and services, preventing fraud, and maintaining the security of our platform.
• Consent: Sending marketing communications, where you have opted in to receive these.

We will never sell your personal data to third parties for their own marketing purposes.

4. Who We Share Your Data With

We may share your personal data with trusted third parties only where necessary to deliver our services:

• Stripe: Our payment processor. Stripe handles all card transactions securely. See stripe.com/privacy for their privacy policy.
• Delivery partners: Your name and delivery address are shared with our courier or postal service to fulfil your order.
• IT and hosting providers: Our website infrastructure providers who process data on our behalf under appropriate data processing agreements.
• Legal authorities: Where required by law or regulation, or to protect the rights and safety of My Reta or others.

All third-party processors are required to handle your data securely and only for the purposes we specify.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

• Order and transaction records are retained for a minimum of 6 years to comply with HMRC requirements.
• Customer account data is retained for as long as you maintain an active relationship with us, and for a reasonable period thereafter.
• Marketing preferences are retained until you withdraw consent or opt out.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request that inaccurate or incomplete data be corrected.
• Right to erasure: Request deletion of your personal data where we have no legitimate reason to continue processing it.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests, including for direct marketing.
• Right to withdraw consent: Where we process data based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at info@myreta.co.uk. We will respond within 30 days.

7. Cookies

Our website uses cookies and similar technologies to improve your browsing experience and to help us understand how visitors use our site. Cookies are small text files placed on your device.

We use the following types of cookies:

• Essential cookies: Required for the website to function (e.g. shopping cart, session management). These cannot be disabled.
• Analytics cookies: Help us understand site usage and improve performance. Used only with your consent.
• Payment cookies: Set by Stripe to enable secure payment processing.

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the website.

8. Third-Party Links

Our website may contain links to third-party websites (such as our blog or external resources). We are not responsible for the privacy practices or content of those sites and encourage you to review their own privacy policies.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

If you believe your data has been compromised, please contact us immediately at info@myreta.co.uk.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date of the most recent update is shown at the top of this page. We encourage you to review this page periodically.

11. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection authority:

• Information Commissioner's Office (ICO)
• Website: ico.org.uk
• Helpline: 0303 123 1113

We would, however, appreciate the chance to address your concerns directly before you approach the ICO — please contact us first at info@myreta.co.uk.