Cookie Policy

G. Other Types of Data Collected

The other types of personal data we receive and collect depends on how you use and interact with our website.

 

We will collect your name and email address when you register with us to receive promotions, offers, enter competitions, and other opportunities to you as part of the Wish List and Save Your Basket functions of our website. We process this information where you have given your consent.

 

As a legitimate interest, we also create anonymised statistics based on the web pages you view in order to analyse and improve our website performance.

 

Should you make an order with us, we will collect further data about you from you. For more information about this, please see our Privacy Notice for customers here.

H. Who We Share Your Data With

MFI sometimes shares your personal data with trusted third parties. This is to allow us, for example, to make our website better to navigate and tailor our advertisements to you. When we do share your data with these trusted third parties, we only provide the information that they need to perform their services and they may only use your data for the purposes we have agreed with them.

 

These trusted third parties include:

 

Advertising Personalisation and Targeting to allow us to serve relevant advertisements to you more effectively, including monitoring the links and pages you used and visited. These providers are:

• Google
• Bing
• Facebook (Meta)
• TikTok
• Pinterest

 

IT Infrastructure and Cloud Providers as part of our website hosting and databases. These providers are:

• Microsoft
• Google

 

Email Service Providers to allow us to send you emails about promotional offers, competitions, and other information if you choose to receive direct marketing emails from us. These providers are:

• Emarsys
• Mailchimp

 

Card Payment Processors to securely process the payment for our products. These providers are:

• Paypal
• Stripe
• Klarna

 

Software Solution Providers to provide our Live Chat features. These providers are:

• Zendesk - you can read more about Zendesk's use of cookies on their website here.

 

Analytics & Personalisation Software Providers to anonymously collect and report on the numbers of visitors to our website, and monitor how these users interact with the website as they are using it. These providers are:

• Google
• Microsoft

 

Law Enforcement, Fraud Prevention, and Other Authorised Regulatory Agencies and Bodies to help prevent and detect fraud and other unlawful acts.

I. Transfers of Data Outside of the UK

We may transfer some of your personal data to countries that are not part of the United Kingdom. These are known as “third countries” and may not have data protection laws that are as strong as those in the UK. As such, we take additional steps to safeguard your personal data to ensure is treated just as safely and securely as it would be within the UK.

 

These transfers occur when we share your data with “international organisation”, like Google, who are based around the world. We have in place “standard contractual clauses” with these organisations to ensure that your personal information is treated by those third parties in a way which is consistent with, and which respects, the domestic UK laws on data protection.

 

In addition to these clauses, we also rely on Adequacy Decisions from the Information Commissioner’s Office, where they recognise a country outside of the UK as ensuring an adequate level of protection equivalent to the UK. We transfer data to the EEA (for example, to Klarna based in Sweden) on the basis of these adequacy decisions.

J. Our Lawful Basis for Processing

The law on data protection allows us to process your data for certain reasons only. We will only use your personal information when the law allows us to.

 

Most commonly, we will use your personal information under the following legal bases:

• Where it is necessary for our legitimate interests (or a third party’s) that your interests and fundamental rights do not override.
• Where you have consented to the processing for a specific purpose.
• We process your data based on Legitimate Interests when we use Essential cookies on our website. Our interest in this case is to provide a properly-functioning website to sell our goods. In addition, we process anonymous statistics on webpage viewings to analyse and improve our website performance.

 

The remaining data covered in this notice, including, Functional, Analytics, and Marketing cookies, as well as marketing emails, are processed when you have consented.

 

Should you go on to purchase a product from us, we will process further data under additional lawful bases. Details of those bases can be found in our customer privacy notice.

K. Can I Opt Out of Cookies?

You can change your cookies preference at any time by clicking the link at the bottom of this cookie policy, unticking the cookie categories you no longer consent to, and then clicking ‘Accept and Close’.

 

You can also choose a range of cookie settings in your browser. For more information on this, please visit the page below that relates to your specific browser.

Google Chrome

Microsoft Edge

Mozilla Firefox

Apple Safari

Opera

It is important to note that restricting cookies using settings in your browser may have an adverse effect on how the MFI site functions.  Many integral parts of our website rely on cookies for our core functions, so you may find that the website does not work as intended, and you may be unable to place an order. If you are having difficulties placing an order, please email us at info@mfi.co.uk

M. Withdrawing Consent

In addition to the rights listed below, you also have the right to withdraw consent at any time should you change your mind. 

 

The consent to our cookies is set to expire after 12 months.  Once that time expires, unless you consent again, the use of cookies for additional purposes will stop automatically.

 

Should you do this, we will stop processing data under this basis and, where there is no other basis for continuing to process the data, we will delete any data reliant on that consent. 

 

You can withdraw consent by clicking the “unsubscribe” link at the bottom of any of our emails, by contacting our Customer Service team, or by sending an email to dataprotection@mfi.co.uk.

 

If you wish to withdraw consent for additional cookies, you can do so by changing your cookies preferences through the link at the bottom of the website.

N. Your Rights

Under data protection law, you have the following rights, which we will work to uphold:

• The right to be informed about the data we hold about you and what we do with it.
• The right of access to the data we hold about you, including receiving a copy of the data.
• The right to correct inaccuracies in the data we hold about you, this is also known as ‘rectification’.
• The right to be forgotten in certain circumstances, allowing you to ask us to delete or remove data where there is no good reason for us to continue processing it, this is also known as ‘erasure’.
• The right to restrict (i.e., prevent) the processing of the data if you want us to establish its accuracy or the reason for processing it.
• The right to transfer the data we hold about you to another party where we use it with consent or for the performance of a contract.
• This is also known as ‘portability’.
• The right to object to the processing of data where we rely on a legitimate interest and there is something which makes you want to object to the processing. You also have this right if we process data for direct marketing purposes.
• Rights relating to any automated decision-making and profiling of your personal data.

 

To exercise or enquire about any of these rights, please contact dataprotection@mfi.co.uk.

O. Automated Decision Making

Automated decision-making means making decision about you using no human involvement for example., using computerised equipment. No decision about you, and which has a significant impact on you, will be made solely based on automated decision-making unless we have your explicit consent.

 

Your use of our website, and interaction with our marketing emails, may involve profiling of your behaviour, again subject to your consent.  This can be part of our Analytics cookies or Marketing cookies, which monitor your behaviour on the website to understand how we can improve it, and how we can deliver more effective advertisements to you respectively.

P. Retention Periods

The data held in cookies that are stored on your device are listed under ‘Lifetime’ in the sections Essential Cookies, Functional Cookies, Analytics Cookies, and Marketing Cookies above. In addition to this cookie data, we will also store anonymous and aggregated analytics data, as well as your contact details for direct marketing emails.

 

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of it, the potential risk of harm from unauthorised use or disclosure, the purposes for which we collected it for, and the applicable legal requirements.  For example, marketing data identifying you from cookies may be stored for two years, with the aggregated and anonymous statistics derived from that marketing data stored for five more years (for seven in total).

Q. Changes to This Policy

We keep this cookie policy under regular review to make sure it is up to date and accurately reflects our data processing.  This may be necessary, for example, if we change our business practices in a way that affects how we process personal data.  Please review this Policy from time to time.

 

We will provide you notice of any updates to this Policy, when necessary, and change the “Last Updated” date at the top of this page.

R. Data Protection Officer’s Contact Details

Our Data Protection Officer (DPO) can be contacted via dataprotection@mfi.co.uk.

 

Alternatively, you can contact them by post at the above registered address, marking the envelope FAO: Data Protection Officer.

 

If you have any questions about this cookie policy, how we handle our personal data, or to request a copy of the safeguards we rely upon for transfer of data outside of the UK, please contact the DPO.

S. Making a Complaint

We strive to achieve a high standard in all our data processing.  However, if you think your data rights have not been complied with, you are able to raise a complaint with the Information Commissioner’s Office (ICO), who are the UK supervisory authority for data protection.

 

You can contact the ICO at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; by telephone on 0303 123 1113 (local rate) or 01625 545 745; or submit a complaint online here:  https://ico.org.uk/make-a-complaint/.

 

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.