MAY By Camelia ISP

G.D.P.R Compliance

At M A Y by Camelia Isp, we are committed to protecting your personal data and respecting your privacy. This GDPR Compliance page outlines your rights under the UK General Data Protection Regulation (UK GDPR) and explains how we collect, use, and safeguard your personal data.


1. Who We Are

M A Y by Camelia Isp is an online retail business based in the UK. Our contact details are:

We are the “Data Controller” responsible for the processing of your personal data.


2. What Data We Collect

We collect the following types of personal data:

a. Information You Provide Directly

  • Name
  • Email address
  • Phone number
  • Billing and shipping addresses
  • Payment details (processed securely by third-party payment providers)

b. Automatically Collected Information

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent on the Website
  • Cookies and other tracking technologies

c. Data From Third Parties

We may receive data from third-party platforms (e.g., social media or payment gateways) when you interact with us through these channels.


3. How We Use Your Data

We process your personal data for the following purposes:

  1. To process and deliver your orders
  2. To manage your account and provide customer support
  3. To send order confirmations, updates, and promotional communications (if consented)
  4. To improve our website performance and enhance user experience
  5. To comply with legal and regulatory obligations

4. Legal Bases for Processing

We process your personal data based on the following legal grounds:

  • Performance of a Contract: To fulfill and deliver your orders.
  • Legitimate Interests: To enhance website functionality and protect our business.
  • Consent: For sending marketing communications (you can withdraw consent at any time).
  • Legal Obligation: To comply with applicable laws and regulations.

5. Your Rights

Under the UK GDPR, you have the following rights:

a. Right to Access

You have the right to request a copy of the personal data we hold about you.

b. Right to Rectification

You can request that we correct any inaccuracies in your personal data.

c. Right to Erasure (“Right to Be Forgotten”)

You can request the deletion of your personal data under certain conditions, such as when it is no longer necessary for the purpose it was collected.

d. Right to Restrict Processing

You can request that we limit the processing of your personal data in certain situations.

e. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transfer it to another data controller.

f. Right to Object

You can object to the processing of your data for direct marketing or other purposes based on our legitimate interests.

g. Right to Withdraw Consent

If we rely on your consent for processing, you can withdraw it at any time.

To exercise any of these rights, please contact us at office@maybycameliaisp.co.uk.


6. How We Protect Your Data

We take appropriate technical and organizational measures to secure your personal data, including:

  • Encryption of sensitive information during transmission (e.g., SSL)
  • Regular security audits and updates
  • Restricted access to personal data
  • Secure storage of data in compliance with GDPR standards

Despite these measures, no system is completely secure, and we encourage you to use caution when sharing personal data online.


7. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy, including:

  • Processing your orders
  • Complying with legal obligations
  • Resolving disputes and enforcing our agreements

When your data is no longer needed, we will securely delete or anonymize it.


8. Sharing Your Data

We only share your data with trusted third parties to provide our services, including:

  • Payment processors
  • Shipping providers
  • IT and analytics service providers
  • Legal and regulatory authorities (when required by law)

All third parties are contractually obligated to process your data securely and in compliance with UK GDPR.


9. Cookies and Tracking Technologies

Our Website uses cookies to improve user experience and analyze website performance. For more details, please refer to our Cookie Policy.


10. Data Transfers

If we transfer your personal data outside the UK, we ensure that adequate safeguards are in place, such as standard contractual clauses or other mechanisms permitted under the UK GDPR.


11. Complaints

If you believe we have not complied with your data protection rights, you can contact us at office@maybycameliaisp.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

  • Website: https://ico.org.uk/
  • Phone: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. Updates to This GDPR Compliance Page

We may update this GDPR Compliance page from time to time to reflect changes in regulations or our data practices. The updated version will always be available on this page.


13. Contact Us

If you have any questions about this GDPR Compliance page or your data protection rights, please contact us: