Mostwished Privacy Policy

At Mostwished, we fully support our customers, and their right to be safe in the knowledge that their personal data is not being misused in any way, shape, or form. We respect and acknowledge any and all rights you have to your personal information, as enshrined in the GDPR, and we pledge to only use or collect your information in the ways detailed in this Privacy Policy.

Please note that we reserve the right to make changes to this Privacy Policy at any time, and without consulting the customer.

1. Who is Collecting your Data?

Any collection of personal data performed by this website will have been done by Mostwished, a trading name of Urban Trading GRP Ltd.

Urban Trading GRP Ltd
Company Registration No. 06932270
VAT Registration No. GB978509854
Unit 6, Bevan Close
FInedon Road Industrial Estate
Wellingborough
Northamptonshire
NN8 4BL
United Kingdom

hello@mostwished.co.uk
01933 222 577

Any personal information collected by Mostwished will only be handled by officers of the Company, in order to ensure it is being collected and stored in accordance with this Privacy Policy and the GDPR.

2. What Data do we Collect?

For the purposes of these policies, Personal Data shall refer to any personal information that could be used to identify, either directly or indirectly, an individual. It also refers to any information that could be used to gain knowledge of an individual’s location, interests, beliefs or activities.

Any data that we collect will have been inputted directly by the Customer when either creating an account, signing up with our social media accounts, or making an order. This information can include any of the following:

  • Name
  • Billing and/or Shipping Address
  • Email Address(es)
  • Phone Number(s)
  • Payment Details (ie, Paypal Accounts, Bank Accounts, Card Details)
  • Usernames (ie, Facebook names, Twitter handles, etc)

In situations where the above information has not been entered by the customer, then it will not be collected.

Please note that, for the purposes of arranging delivery with certain couriers, we may require a phone number or email address to be submitted. However, if this is required and not already stated by the customer, we will always get in touch to acquire this information legitimately from the customer directly.

3. What is our Legal Basis for Collecting this Data?

In accordance with GDPR, we may only collect and use your data if we have a legitimate and legally viable reason for doing so. In most cases, personal data will be collected because it may be necessary for us to complete our Contract with the Customer. However, we may also have to collect and store a customer’s personal data, for the purposes of fulfilling our legal or fiscal obligations.

Here are the ways in which your data may be used by us:

  • For the purposes of supplying and managing your account with us
  • For the purposes of verifying the payment of orders, confirming the identity of customers with regards to purchases made, and for ensuring fulfilment and delivery of any purchased products.
  • To contact you in the event that something goes wrong with your order; ie, we are unable to deliver your order, or the item is no longer available for whatever reason.
  • General communications, both direct and automated, such as emails and phone calls wherever they are necessary to complete our Contract with the customer, and fulfil any customer service obligations that arise.
  • For the purposes of fulfilling our fiscal and legal obligations; for example, information regarding an order or payment details may need to be stored, in order to correctly file a tax return or claim VAT.
  • To provide personalised recommendations of products that you might be interested in, based on previous purchases.
  • Supplying information to you, in situations where you have specifically opted in to hear from us. This can include via our social media accounts, marketing emails, or email newsletters. Please note that you reserve the right to opt-out of such methods of contact at all times.
  • To improve our products, services, website or general business practises; in accordance with GDPR, your data may be used to further our legitimate business interests, so long as a) you have not specifically requested that your data is not used in this way, or b) such a usage would infringe on your legal rights in accordance with GDPR.

4. Will your Data be Shared with any Third Parties?

Mostwished will usually have to share at least some of your personal data with third parties, in order to either complete the Contract with the customer, or to fulfil our legal and fiscal obligations. Your data may be shared with some or all of the following third parties:

  • Couriers: In order to fulfil your order, we will need to provide our courier with a full shipping address (name included), and often, a phone number or email address. You will be alerted to the specific courier being used when your item has been despatched.
  • PayPal/Banks/Credit Checkers: To make sure that a) you are verified as the owner of the card being used to make a purchase, and b) that the order has been fully paid for before despatch, we may have to share your data with either the bank managing our business accounts, or with a credit check agency if we are unable to verify ownership of the card through our bank account. If you have purchased via PayPal, and we have to issue you with a refund, we will have to share your data with PayPal in order for this to be issued.
  • Internally: As we are only a small company, your data will be shared internally throughout the Mostwished team, wherever necessary to fulfil our obligations correctly.
  • Accountants/HMRC: In order to provide accurate tax information, it may be necessary for us to share your personal data with an accountant, or with HMRC as part of a tax return.
  • Webstore Hosts/Third Party Systems: As orders are placed via the Mostwished website, your data will be shared firstly with the system hosting the website, and secondly with the third party ecommerce applications we use to process orders. This is necessary in order for us to be able to complete the Contract with the customer.
  • Phone Systems/Emails: If you call us, or we call you, your phone number may be shared with the company that runs our phone systems. Similarly, any emails sent to or from the Company may lead to your email address, and other personal information kept within the emails, being shared with the email service provider.

Please be aware that, once information has been shared with these third parties, we will have no control over the usage of this information on their part. You will have to check the Privacy Policies of the Company in question if you have any concerns regarding their use of your data. If you are uncertain as to which companies your data might have been shared with, please feel free to get in touch with us, and we’ll happily provide you with the information you need.

5. How Will any Information be Stored, and for how Long?

Most of the personal data that we collect will have been processed from the Mostwished website, and into our third party ecommerce applications. As such, the website itself and the third party application will be used for storing this personal data. Some personal data may also be stored physically in the form of invoices/packing slips, however it is very rare that these would not be sent to the Customer themselves.

As we take data protection very seriously, we ensure that both of these storage areas are secure. These are the measures we will take to ensure that your personal data is being stored securely:

  • All areas where personal data is stored will be password protected, with passwords available only to officers of the Company.
  • All web-based systems for storing information will be further encrypted, with secure connections and high-level internet security implemented to further reduce any risk of data breaches.
  • All staff are trained to keep transfers of personal data, even internally, to a minimum, and only where necessary to fulfil our legal or contractual obligations.
  • All company premises, where physical data and our servers are stored, are protected by security cameras, alarms, and kept under lock and key, to reduce the risk of personal data being accessed by outside sources.

Any personal data we store will be kept for two years; this is in order to make sure that any legal or fiscal obligations that may require the data have already been met, and any contractual or customer service obligations have long since been completed. After this time limit has been reached, we will automatically delete any personal data regarding you or your orders that remains on our system.

Please note that, if you have an account with us, the information will be stored for two years after the last time the account was accessed. As such, if your account is in continuous or regular use, the data stored regarding it will not be deleted, as it is still necessary for us to keep this information in order to fulfil our contractual obligations.

6. What Rights do You have Regarding Your Data?

In accordance with GDPR, you have certain key rights with regards to how your data is being used, in order to give you a say in how it is being handled and stored. We will always strive to ensure that your individual rights are upheld. These rights include the following:

  • The right to be informed about our collection and usage of your personal data; this has been covered by this Privacy Policy.
  • The right of access to any personal data about you that we are currently holding, which will be made available when requested.
  • The right to rectification of any of your personal data that we are storing, if it has either changed, is incomplete, or is found to be incorrect.
  • The right to erasure of any of your personal data that we are currently storing; please note that this can limit our ability to fulfil our contractual obligations, if the order has not been fulfilled before the data is erased.
  • The right to restrict processing of your personal data by us.
  • The right to data portability; you will have the right to request your personal data, so that you may move, store, or re-use it as you see fit.
  • The right to object to us using your personal data for a certain purpose, or purposes. Please note that, if certain necessary uses are objected to, it may affect our ability to fulfil our contractual obligations.
  • Rights related to automated decision making and profiling; at this time, we do not currently use any solely automated systems to make decisions based on customer data.

In order to utilize these rights, please see the section below for more information on how to get in touch with us. Please bear in mind that any objections or alterations you wish to make may have an impact on the completion of contracts, in cases where the order has not yet been fulfilled. However, if there are any implications that might result from a claim, the member of staff who handles it will make sure you are aware of them.

7. How to Contact Us

If you would like to contact us, whether to lodge a complaint, make use of your rights, or to request a copy of any personal data of yours that we are currently holding, we can be contacted through the following means:

Email: hello@mostwished.co.uk
Telephone: 01933 222 577

Postal Address:
Most Wished
Unit 6 Bevan Close
Finedon Road Industrial Estate
Wellingborough
NN8 4BL

If you contact us by email, you should receive a response within 48 hours, except during public holidays, when a response may be delayed. Our staff are always happy to help, especially when it comes to our customer’s personal data rights, so if you do have any queries whatsoever regarding the use or storage of your data, please feel free to get in touch.