1. who we are
KSN GROUP LTD trading as MENTALITYCLB is the controller of your personal information.
Registered office: [FULL REGISTERED OFFICE ADDRESS]
Company number: [COMPANY NUMBER]
Registered in Scotland
Email: [CUSTOMER SERVICE EMAIL].
2. personal information we may collect
We may collect the following information:
your name, email address, telephone number and billing address;
delivery name, address and contact details;
order, purchase, refund and transaction information;
payment confirmation and payment-status information;
messages, enquiries and other communications you send to us;
marketing preferences and newsletter-subscription information; and
limited technical information about your visit, such as device, browser, referral source and pages viewed.
We do not receive or store your full payment-card details. Payments are processed securely by Shopify and/or the payment provider available at checkout.
3. how we use your information
We use your personal information to:
process, fulfil and deliver your order;
communicate with you about your order, delivery, return, refund or enquiry;
provide customer support;
prevent fraud and protect the security of our website and business;
meet legal, tax and accounting obligations;
improve our website and customer experience using aggregated or anonymised website information; and
send marketing emails where you have chosen to receive them.
4. Our legal bases for using your information
Under UK data-protection law, we use your information on the following bases:
Contract: where we need your information to process and fulfil your order or respond to a request before you enter into a contract with us.
Legal obligation: where we need to retain information for tax, accounting or other legal requirements.
Legitimate interests: where necessary to run, protect and improve our business, prevent fraud and respond to customer enquiries, provided that your rights and interests do not override ours.
Consent: where you choose to receive marketing emails or where consent is required for non-essential cookies or similar technologies.
You can withdraw marketing consent at any time by using the unsubscribe link in an email or by contacting us.
5. How we share your information
We share personal information only where necessary to operate our business and fulfil orders.
This may include:
Shopify, which provides ecommerce and checkout functionality;
payment providers used at checkout;
production, print-on-demand and fulfilment partners;
delivery and shipping providers;
Framer, which hosts and supports our website;
email-marketing providers, where you subscribe to our newsletter;
professional advisers, insurers, regulators or authorities where legally required; and
service providers that help us prevent fraud, maintain security or operate our website.
These providers may only use your information as necessary to provide services to us, subject to their own legal obligations and applicable agreements.
6. international transfers
Some of our service providers, including Shopify, Framer, payment providers and fulfilment partners, may process personal information outside the UK.
Where this happens, we take appropriate steps to ensure that your information is protected in accordance with applicable data-protection law. This may include relying on adequacy regulations or approved contractual safeguards.
7. How long we keep your information
We keep personal information only for as long as necessary for the purposes described in this policy.
In general:
order, payment and transaction records are retained for up to 7 years where required for tax, accounting and legal purposes;
customer-service correspondence is retained for as long as reasonably necessary to resolve the relevant enquiry or issue;
marketing information is retained until you unsubscribe or ask us to delete it, unless we need to retain limited information to record your opt-out; and
technical and website information is retained only for the period needed for the relevant service or analysis.
8. Cookies and website analytics
Our website may use cookies and similar technologies.
Some cookies are essential for the website, basket and checkout to work properly. These do not require consent where they are strictly necessary.
We may use Framer’s built-in analytics to understand overall website usage. Framer states that its built-in analytics are privacy-focused, do not use cookies and do not collect information that identifies individual visitors.
If we add non-essential cookies or third-party tools in the future—for example advertising, tracking or external analytics—we will provide an appropriate cookie notice and obtain consent where required before setting them.
9. MARKETING
If you subscribe to our newsletter, we may send you updates, mindset insights, product news, early-access information, promotions and other marketing communications.
You can unsubscribe at any time by clicking the unsubscribe link in any marketing email.
Choosing not to receive marketing will not affect order-related emails, such as order confirmations, delivery updates or responses to customer-service enquiries.
10. YOUR RIGHTS
Depending on applicable law, you may have the right to:
request access to the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your information in certain circumstances;
ask us to restrict how we use your information;
object to certain processing, including direct marketing;
request a copy of information you have provided to us in a portable format; and
withdraw consent where we rely on consent.
To exercise any of these rights, contact us at [CUSTOMER SERVICE EMAIL].
You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your information. You can find out more at ico.org.uk.
11. SECURITY
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet transmission or storage system can be guaranteed to be completely secure.
12. CHILDREN
Our website and products are not intended for children under 13. We do not knowingly collect personal information from children under 13.
If you believe that a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the “Last updated” date shown at the top of the page.
14. CONTACT US
If you have questions about this Privacy Policy or how we handle your personal information, please contact:
KSN GROUP LTD trading as MENTALITYCLB
Registered office: [FULL REGISTERED OFFICE ADDRESS]
Email: [CUSTOMER SERVICE EMAIL]