Privacy Policy

Effective Date: 15th August 2025
Last Updated: 15th August 2025

1. Introduction

Welcome to Melizas (“we,” “our,” or “us”). Melizas is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website melizas.com (the “Site”), purchase our African-inspired plantain pasta products, attend our events, and use our services.

By using our Site, making purchases, or attending our events, you consent to the practices described in this Privacy Policy.

2. Contact Information

Melizas
Email: info@melizas.com
Phone: 07956684439
Business Location: United Kingdom
Registered Jurisdiction: United Kingdom

3. Information We Collect

3.1 Personal Information You Provide

E-commerce Transactions:

Name and billing information
Email address
Phone number
Shipping address
Payment information (processed securely through Stripe)

Account Registration (Optional):

Name
Email address
Password (encrypted)

Event Registration:

Name
Email address
Phone number

Community & Marketing:

Email address for newsletters and updates
Communication preferences
Feedback and correspondence

3.2 Automatically Collected Information

Website Usage Data:

IP address and location data
Browser type and version
Device information and operating system
Pages visited and time spent
Click-through data and navigation paths
Referral source
Date and time of visits

Cookies and Tracking Technologies:

Essential cookies for website functionality
Analytics cookies (Google Analytics)
Session cookies for shopping cart functionality
Preference cookies

WooCommerce Store Data:

Shopping cart contents
Purchase history
Product preferences and browsing behavior

4. How We Use Your Information

4.1 Order Processing and Fulfillment

Process and fulfill your pasta product orders
Communicate order status and shipping information
Handle returns, exchanges, and customer service inquiries
Maintain purchase records for accounting and legal purposes

4.2 Event Management

Process event ticket purchases
Send event confirmations and updates
Communicate event details, changes, or cancellations
Document events through photography/videography (attendees may appear in promotional materials)

4.3 Customer Service

Respond to inquiries and provide support
Resolve technical issues
Process refunds and returns

4.4 Marketing and Communications

Send newsletters and promotional emails via My Center Office
Share product updates and new launches
Provide early access to founding community members
Send information about upcoming events and special offers

4.5 Website Optimization

Analyze website performance using Google Analytics
Improve user experience and site functionality
Troubleshoot technical issues
Enhance product offerings based on customer behavior

4.6 Legal and Business Operations

Comply with legal obligations
Prevent fraud and ensure security
Maintain business records
Support our social impact initiatives

5. Legal Basis for Processing (GDPR)

For users in the European Union and UK, we process your personal data based on:

Contract Performance: Processing orders, delivering products, and providing customer service
Legitimate Interests: Website analytics, security, marketing to existing customers, and business operations
Consent: Newsletter subscriptions, event photography, and optional marketing communications
Legal Obligation: Tax records, consumer protection compliance

6. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

6.1 Essential Service Providers

Stripe: Payment processing (credit card information is never stored by us)
Fulfillment Services: [Fulfillment partner name] for order shipping and delivery
The Events Calendar: Event ticket management and registration
My Center Office: Email marketing and customer communications
Google Analytics: Website performance analysis (anonymized data)

6.2 Legal Requirements

To comply with applicable laws and regulations
To respond to legal processes, court orders, or government requests
To protect our rights, property, safety, or that of others
To prevent fraud or security threats

6.3 Business Transfers

In connection with mergers, acquisitions, or sale of business assets (with notice to affected users)

7. International Data Transfers

As a UK-based business, we primarily process data within the UK. However, some service providers may process data outside the UK/EU. We ensure appropriate safeguards are in place for such transfers, including:

Standard Contractual Clauses
Adequacy decisions by relevant authorities
Other approved transfer mechanisms

8. Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards:

SSL certificates for secure data transmission
Encrypted password storage
Secure payment processing through Stripe
Regular security updates and patches

Organizational Safeguards:

Access controls and authentication measures
Employee training on data protection
Regular security assessments
Data breach response procedures

Data Breach Procedures: In the event of a data breach, we will:

Assess and contain the breach within 24 hours
Notify relevant authorities within 72 hours (if required)
Inform affected individuals without undue delay
Take corrective action to prevent future incidents

9. Data Retention

We retain your personal information as follows:

Customer Account Data: Indefinitely while account is active
Purchase Records: Indefinitely for business and tax purposes
Event Attendee Data: Indefinitely for future event planning and community building
Website Analytics: 26 months (Google Analytics default)
Marketing Data: Until you unsubscribe or request deletion
Customer Service Records: 7 years or as required by law

Note: While our default practice is indefinite retention, you may request deletion of your personal data at any time (subject to legal retention requirements).

10. Your Rights and Choices

10.1 General Rights

Access: Request information about personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Opt-out: Unsubscribe from marketing communications
Data Portability: Request your data in a portable format

10.2 GDPR Rights (UK/EU Users)

Restrict Processing: Limit how we use your data
Object to Processing: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for consent-based processing
Lodge Complaints: File complaints with the Information Commissioner’s Office (ICO)

10.3 How to Exercise Your Rights

Email: info@melizas.com
Phone: 07956684439
Include: Your full name, email address, and specific request

We will respond to your request within one month of receipt.

11. Cookies Policy

11.1 Types of Cookies We Use

Strictly Necessary Cookies:

Shopping cart functionality
User authentication
Security features
Basic website functionality

Analytics Cookies:

Google Analytics for website performance
User behavior analysis
Traffic source tracking

Functional Cookies:

Language preferences
User settings
Enhanced website features

11.2 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality, including the ability to make purchases.

12. Third-Party Links and Social Media

Our Site contains links to social media platforms and other third-party websites. This Privacy Policy does not apply to third-party sites. We encourage you to review their privacy policies.

Social Media Integration: When you interact with our social media content, those platforms may collect information according to their own privacy policies.

13. Age Restrictions and Minors

We do not impose age restrictions on purchases. However, we encourage parental supervision for minors making online purchases. If you are under 16 and in the EU/UK, please obtain parental consent before providing personal information.

14. Photography and Event Content

Event Photography/Videography:

We may take photos and videos at our events
These may be used for promotional purposes
By attending events, you consent to potential inclusion in such materials
Contact us if you prefer not to be included in promotional content

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on our website
Sending email notifications to registered users
Updating the “Last Updated” date

Continued use of our services after changes indicates acceptance of the updated policy.

16. Specific Regional Rights

16.1 UK/EU Users (GDPR)

All rights listed in Section 10
Right to lodge complaints with the ICO: https://ico.org.uk/
Right to judicial remedy

16.2 California Users (CCPA) – When Applicable

If we begin serving California residents, we will update this policy to include CCPA rights.

17. Contact Us

For any questions about this Privacy Policy, to exercise your rights, or to report concerns:

Primary Contact:

Email: info@melizas.com
Phone: 07956684439

Data Protection Inquiries:

Email: info@melizas.com (mark subject line “Data Protection Inquiry”)

UK Data Protection Authority:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
Phone: 0303 123 1113

This Privacy Policy reflects our commitment to transparency, data protection, and your privacy rights. We handle your data with the same care, love, innovation, and integrity that we put into crafting our African-inspired plantain pasta products.

Document Version: 1.0