This Privacy Policy explains how Mountoy (“Mountoy,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit https://mountoy.com, create an account, contact us, or purchase a product (collectively, the “Services”).

Mountoy is responsible for deciding how personal information is used for the purposes described in this Policy. If you have questions or wish to exercise a privacy right, contact us at contact@mountoy.com.

1. Personal information we collect

The information we collect depends on how you use the Services.

Information you provide

We may collect:

  • Contact information, such as your name, email address, telephone number, billing address, and shipping address.
  • Order information, such as products purchased, selected type, size, color, personalization instructions, order value, shipping method, tax information, and order history.
  • Account information, such as your username, password or password-setting link, saved addresses, and account preferences.
  • Payment and transaction information, such as payment method, transaction status, billing details, and fraud-prevention results. Complete payment card details are generally processed directly by the payment provider rather than stored by Mountoy.
  • Customer-service information, including messages, photographs of damaged or incorrect products, return requests, and other correspondence.
  • Marketing preferences, including whether you choose to receive promotional emails.
  • Content you submit, such as product reviews, comments, photographs, and customization instructions.

Information collected automatically

When you use the Site, we and our service providers may automatically collect:

  • IP address, browser type, device type, operating system, language, and approximate location;
  • pages, products, links, and features viewed or used;
  • referring website, search terms, dates, times, and session activity;
  • shopping-cart, checkout, login, security, and error information; and
  • cookie identifiers, advertising identifiers, and similar online identifiers where permitted.

We collect this information through server logs, cookies, pixels, tags, local storage, and similar technologies.

Information from other sources

We may receive limited information from payment processors, fulfillment partners, delivery carriers, fraud-prevention providers, analytics services, advertising or social-media platforms, and other services you choose to connect with or use.

2. How and why we use personal information

We use personal information to:

  • process, produce, personalize, ship, and manage orders;
  • collect payment, calculate taxes, issue invoices, and process returns or refunds;
  • create and manage customer accounts;
  • communicate about orders, deliveries, support requests, policy changes, or security issues;
  • detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
  • maintain, troubleshoot, analyze, and improve the Site, products, and customer experience;
  • send marketing communications when you have consented or when otherwise permitted by law;
  • measure campaigns and, where enabled and permitted, provide or measure relevant advertising;
  • enforce our Terms of Service and protect our customers, business, and legal rights; and
  • meet tax, accounting, regulatory, legal, and recordkeeping obligations.

Where UK or European data-protection law applies, our legal bases may include:

  • Contract: processing necessary to take steps at your request or fulfill an order.
  • Consent: optional marketing, non-essential cookies, or other processing where consent is required. You may withdraw consent at any time.
  • Legitimate interests: operating and improving the Store, preventing fraud, securing the Site, understanding performance, and communicating with customers, provided those interests are not overridden by your rights.
  • Legal obligation: complying with tax, accounting, consumer-protection, law-enforcement, and other legal requirements.

3. Cookies and similar technologies

The Site may use the following types of cookies and similar technologies:

  • Strictly necessary: required for security, login, shopping-cart, checkout, payment, and cookie-preference functions.
  • Functional: remember choices and improve Site features.
  • Analytics: help us understand traffic and how visitors use the Site.
  • Advertising: help measure campaigns or show relevant advertising when those features are enabled.

Where required by law, we request consent before using non-essential cookies. You can use the cookie controls displayed on the Site, where available, or change your browser settings. Blocking strictly necessary cookies may prevent the cart, checkout, account, or other Site functions from working correctly.

There is no universally accepted standard for browser “Do Not Track” signals, so the Site may not respond to them. Where required by applicable law and supported by our systems, we treat a recognized opt-out preference signal, such as Global Privacy Control (GPC), as a request to opt out of the sale or sharing of personal information used for cross-context behavioral advertising.

More information is available in our Cookie Policy.

4. How we share personal information

We share personal information only as reasonably necessary for the purposes described in this Policy, including with:

  • Website and commerce providers, including WordPress.com, Automattic, WooCommerce, and providers that host or support Site features.
  • Payment providers that authorize, process, secure, or refund transactions.
  • Production and fulfillment partners that manufacture, personalize, package, or fulfill products.
  • Shipping and logistics providers that deliver and track orders.
  • Email and customer-service providers that send transactional or optional marketing messages and help manage support.
  • Analytics, advertising, and social-media providers when those tools are enabled and permitted by your choices and applicable law.
  • Security and fraud-prevention providers that help protect transactions, accounts, and the Site.
  • Professional advisers and authorities, such as accountants, insurers, lawyers, courts, regulators, tax authorities, or law enforcement where necessary or legally required.
  • Business transaction participants if Mountoy is involved in a merger, financing, sale, reorganization, or transfer of all or part of the business, subject to appropriate safeguards.

Service providers are permitted to process information only for the services they provide to us or as otherwise allowed by law.

Mountoy does not sell personal information for money. Some analytics or advertising activities may be considered a “sale,” “sharing,” or “targeted advertising” under certain U.S. state privacy laws even when no money changes hands. Where those laws apply and such tools are used, you may opt out through the Site’s cookie controls, a recognized browser preference signal, or by contacting us.

5. International data transfers

Mountoy serves customers internationally and uses providers that may process information in the United Kingdom, United States, European Economic Area, and other countries. Privacy laws in those countries may differ from the laws where you live.

Where required, we use recognized safeguards for international transfers, such as adequacy regulations, approved contractual clauses, or other lawful transfer mechanisms. You may contact us for more information about safeguards relevant to your information.

6. Data retention

We retain personal information only as long as reasonably necessary for the purposes described above, including legal, tax, accounting, fraud-prevention, and dispute-resolution requirements.

Our current WooCommerce retention settings are generally:

  • inactive customer accounts: 24 months;
  • pending or failed orders: 1 month;
  • cancelled orders: 18 months; and
  • refunded or completed orders: 84 months (7 years).

Marketing information is retained until you unsubscribe or withdraw consent, subject to keeping a minimal suppression record so we can respect your request. Support messages, security logs, analytics data, and cookie records are retained according to operational need, provider settings, and applicable law.

We may retain information longer when required by law, needed to establish or defend legal claims, or necessary to resolve an active dispute.

7. Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, encrypted connections, account authentication, security monitoring, backups, and trusted service providers.

No online service or transmission method is completely secure. You are responsible for using a strong, unique password and protecting access to your account and email.

8. Your privacy rights

Depending on where you live and applicable law, you may have the right to:

  • request access to or a copy of your personal information;
  • correct inaccurate or incomplete information;
  • request deletion of information;
  • restrict or object to certain processing;
  • receive certain information in a portable format;
  • withdraw consent at any time;
  • opt out of marketing communications;
  • opt out of the sale, sharing, or use of information for targeted advertising;
  • appeal our refusal of a privacy request where applicable; and
  • complain to the data-protection authority or regulator where you live.

You may unsubscribe from marketing emails through the unsubscribe link in the message. You may still receive essential account, security, and order communications.

To exercise another right, email contact@mountoy.com with the subject “Privacy Request.” Describe your request and the country or U.S. state where you live. We may need to verify your identity before completing the request. An authorized agent may submit a request where permitted by law, but we may ask for proof of authority and identity.

We will not discriminate against you for exercising an applicable privacy right.

9. Children’s privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact contact@mountoy.com so we can review and delete it where appropriate.

10. Third-party websites and services

The Site may contain links to or integrations with third-party websites, social networks, payment services, or other platforms. Their privacy practices are governed by their own policies. We are not responsible for services that we do not control, and we encourage you to review their privacy notices.

11. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices, technology, services, or legal obligations. The updated version will be posted on this page with a revised “Last updated” date. If a change materially affects your rights, we will provide additional notice where required.

12. Contact us

For questions, complaints, or privacy-rights requests, contact:

Mountoy
Website: https://mountoy.com
Email: contact@mountoy.com