Privacy Policy

This Privacy Policy describes how Mollie May, operated by Golden Season LLC ("we", "us", "our"), collects, uses and shares your personal data when you visit our website, make a purchase or otherwise interact with us. By using our Services, you confirm that you have read and understood this policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies with respect to personal data.

1. Personal data we collect

1.1 Depending on how you interact with us, we may collect the following data:

  • Contact details: name, billing and delivery address, phone number and email address
  • Payment details: payment method and transaction information. Card data is processed and encrypted by our payment providers; we do not store full card numbers
  • Account details: username, password, settings and preferences
  • Order history: products viewed, added to basket, purchased, returned or cancelled
  • Communications: messages you send to customer service, including photos you send us for a damage claim
  • Device data: device type, browser, IP address and other unique identifiers
  • Usage data: how you use our website, collected through cookies and similar technologies

2. How we collect data

2.1 We collect personal data:

  • directly from you (for example when you create an account, place an order or contact us)
  • automatically through cookies and similar technologies
  • from service providers that support our business processes
  • from partners or other third parties, to the extent permitted by law

3. Why we process your data

3.1 We process your personal data for the following purposes and on the following legal bases:

  • Performing our contract with you (Article 6(1)(b) UK GDPR / GDPR): processing orders, payments, deliveries, returns, replacements and account management
  • With your consent (Article 6(1)(a)): email and SMS marketing, advertising and non-essential cookies
  • Legal obligations (Article 6(1)(c)): meeting tax, accounting and legal requirements and responding to valid requests from public authorities
  • Our legitimate interests (Article 6(1)(f)): security, fraud prevention (verifying orders, payment details and addresses, and protecting our customers and business from fraudulent transactions and chargebacks) and improving our Services

3.2 We handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR) for customers in the United Kingdom, and with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 (Ireland) and the ePrivacy Regulations 2011 for customers in Ireland.

4. How we use your data

4.1 We use your data to:

  • provide and improve our Services
  • process orders and handle payments, deliveries, returns and replacements
  • personalise your shopping experience
  • carry out marketing and advertising
  • keep our Services secure and prevent fraud
  • provide customer support
  • comply with legal obligations and enforce our terms and policies

5. Sharing of data

5.1 We may share personal data:

  • with Shopify (our e-commerce platform)
  • with service providers (for example payment providers, fraud-screening services, suppliers, fulfilment partners and carriers such as Royal Mail and An Post, IT, analytics, email and SMS providers, customer service tools)
  • with marketing and advertising partners, who use your data in accordance with their own privacy notices
  • with your consent or at your request
  • within our corporate group, or as part of a business transfer such as a merger or sale
  • where required by law or to protect our rights, the Services and the rights of our users or others

5.2 Our online store runs on the platform of Shopify Inc. Shopify provides the e-commerce platform through which we offer our products and services. Personal data may be processed by Shopify to fulfil orders, process payments, prevent fraud and keep the platform secure.

5.3 You can find more information in the Shopify Consumer Privacy Policy and exercise certain rights at the Shopify Privacy Portal.

5.4 We do not sell your personal data.

6. Cookies, marketing and analytics technologies

6.1 Strictly necessary cookies are required for the shop to work and are set on the basis of our legitimate interest in operating the website. All other cookies, in particular for analytics and marketing, are only set with your consent.

6.2 We use tools such as Google Analytics, Google Ads and Meta (Facebook pixel) for analytics and advertising purposes, on the basis of your consent.

6.3 You can change or withdraw your choices at any time, with effect for the future, through the cookie banner, the cookie settings on our website or your browser settings.

7. Email and SMS marketing

7.1 With your consent, we may use your email address and phone number to send you offers, news and marketing content by email and SMS. Message and data rates may apply to SMS.

7.2 To send our emails and SMS we use Klaviyo, which processes your contact details and your interactions with our messages on our behalf.

7.3 You can unsubscribe at any time using the unsubscribe link in every email, or by replying STOP to any SMS. We may still send you non-promotional messages about your account or orders.

8. Security and retention

8.1 We take appropriate technical and organisational measures to protect your data. No system is completely secure, and we recommend that you do not use unsecured channels to send us sensitive information.

8.2 We keep your data for the following periods:

  • Order and transaction data: 6 years, to comply with tax and accounting record-keeping obligations
  • Account data: for as long as the account is active, and up to 2 years after the last activity
  • Marketing and newsletter data: until you unsubscribe or withdraw your consent
  • Customer service data, including damage claim photos: up to 3 years after the last contact

9. Who is responsible for your data

9.1 The controller responsible for the processing of personal data in connection with this website and its services is Golden Season LLC, trading as Mollie May (postal address in section 15).

9.2 For any questions about the handling of your personal data, you can contact us at info@molliemay.co.uk.

10. Your rights

10.1 Under the UK GDPR and the GDPR, you have the following rights:

  • the right of access to the personal data we hold about you
  • the right to rectification of inaccurate data
  • the right to erasure of your data, subject to legal retention obligations
  • the right to restriction of processing
  • the right to data portability, in a structured, commonly used and machine-readable format
  • the right to object to processing based on legitimate interests, and to object to direct marketing at any time
  • the right to withdraw your consent at any time, with effect for the future

10.2 To exercise your rights, contact us at: info@molliemay.co.uk. We may need to verify your identity before responding. We respond within one month, which can be extended where the law allows. You will not suffer any disadvantage for exercising your rights.

10.3 If you are not satisfied with how we have handled your data, you can lodge a complaint with the supervisory authority: in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in Ireland, the Data Protection Commission (www.dataprotection.ie).

11. Minors

11.1 Our Services are not directed at minors. We do not knowingly collect data from people under 18 years of age. If you are the parent or guardian of a minor who has provided us with personal data, contact us and we will delete it.

12. International transfers

12.1 We are based in the United States, and your data is processed there. It may also be processed in China, where our suppliers dispatch orders, and in other countries where our service providers operate, including Shopify, payment providers, logistics partners and carriers, and analytics and marketing providers.

12.2 For transfers from the United Kingdom we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and for transfers from Ireland on the EU Standard Contractual Clauses, or on an adequacy decision or the recipient's certification under the EU-U.S. Data Privacy Framework and its UK Extension where available. You can request a copy of the safeguards we use by contacting us.

13. Third-party websites

13.1 Our website may contain links to external sites. We are not responsible for their privacy or security practices, and our inclusion of a link does not imply endorsement.

14. Changes to this policy

14.1 We may update this Privacy Policy from time to time. The current version is always available on our website.

15. Contact

Customer service hours:
Monday to Friday, 9am to 5pm (UK time)

We reply to all emails within 24 hours (Monday to Friday). Messages received over the weekend are answered on the following Monday.

📩 Email: info@molliemay.co.uk

Golden Season LLC, 312 W 2nd St Unit #A9192, Casper, WY 82601, United States

© 2026 Mollie May