Privacy & cookies

1Who we are

Global Web Innovation Ltd, trading as multibargain (company number 13396743, registered in England & Wales, registered office 203 West Street, Fareham, Hampshire, PO16 0EN), is responsible for your personal information as its controller. We are registered with the Information Commission, registration number ZB688179.

Contact us about your information at customerservice@multibargain.com or by post at Unit 35548, PO Box 6945, London, W1A 6US.

2What we collect, why, and on what basis

We use your information only for these purposes:

• To take, deliver and support your order: your name, delivery address, email, your phone number if you give one, and what you ordered. Basis: to perform our contract with you.
• To keep our company records: order and payment records. Basis: a legal obligation, as company accounting records must be kept for 6 years.
• To handle returns, faults and refunds: your messages, the reason and any photos you send. Basis: our contract with you and our legal obligations under consumer law.
• To answer your messages from the Contact page or by email: your name, email, your order number if you give one, and your message. Basis: our contract with you where it is about an order; otherwise our legitimate interest in answering you.
• To prevent fraud and handle disputes and legal claims: dispatch records, serial numbers, testing records, messages and photos. Basis: our legitimate interests in preventing fraud and in defending legal claims.
• To contact you if an item you bought is recalled or has a safety notice: your order details. Basis: our legitimate interest in keeping you safe, and our legal duties as a seller of products.
• To see how the shop is used, so we can improve it: our visit counting, described below. Basis: our legitimate interest in understanding and improving the shop.
• To see how the shop is used with Google Analytics, only if you accept its cookies: the pages you visit, how you reached us, your device, browser and language, and your approximate location, worked out by Google. Basis: your consent, which you can withdraw at any time in Privacy choices.
• To send our emails (new stock, offers and gift ideas) and your 10% welcome code, only if you sign up, in the box at the foot of our pages, and then confirm by the link we email you: your email address, when and where you signed up, the words you agreed to, when you confirmed, your welcome code, and which emails we sent you. Basis: your consent, which you can withdraw at any time with the Unsubscribe link in every email, or by telling us.
• If you buy from us: to email you our news and offers on products similar to what you bought, unless you tick “No thanks” at checkout or unsubscribe later: your name, email address and when you bought. Basis: our legitimate interest in telling our customers about similar products, as the Privacy and Electronic Communications Regulations 2003 allow (regulation 22(3)). Every email has an Unsubscribe link, and we stop at once.
• To tell customers about changes that affect their orders or our service, such as our delivery or returns arrangements, or a safety notice: your name and email. These emails hold no offers. Basis: our legitimate interest in keeping our customers informed.
• To show that we asked before using analytics cookies: a random consent number kept in your browser, your choice, the date and time, and the version of this policy you saw. No IP address and nothing that identifies you. Basis: our legal obligation to be able to show that consent was given.

We send marketing emails only to people who have signed up and confirmed their email address, and to customers who did not say no at checkout. We never sell your personal information.

3Do you have to give us your details?

To place an order you must give your name, delivery address and email address: without them we cannot take, deliver or confirm your order. Your phone number is optional. Everything else you send us, such as messages and photos, is up to you.

4When you browse this website

This website uses no advertising cookies. Product photos, fonts and the home page video are served from our own server, so your browser does not contact eBay, Google or anyone else for them.

To see how the shop is used, we count visits on our own server, without cookies. For each page we record the page, the website that sent you (such as a search engine) and any campaign tags in the link, whether you use a phone, tablet or computer, the type of browser and system, your browser's language, and the country you are probably in, worked out from your device's time zone setting or reported by our hosting network. When you search the shop, we record the words and how many products were found. We also record a visitor code, made from your connection and browser with a key that changes every day and is then deleted, so it cannot identify you or follow you from one day to the next. We do not store your IP address. Nothing is counted when your browser asks websites not to track you (Do Not Track or Global Privacy Control), or when you switch counting off in Privacy choices.

If you accept analytics cookies, in the banner on your first visit or in Privacy choices, we also use Google Analytics. It records the pages you visit, how you reached us, your device, browser and screen, and your approximate location, and sets cookies to tell visits apart. Google Analytics does not log or store IP addresses. We have switched off Google signals and the advertising features, so it is used only for our statistics. If you do not accept, nothing from Google Analytics is loaded.

Like most websites, our hosting provider keeps standard technical logs, such as IP addresses, for a short time to keep the site secure.

5Cookies and what is stored on your device

The law allows a website to store information on your device when it is needed for a service you asked for, and, with clear information and a simple way to switch it off, for statistics or to improve how the site works. Anything else needs your consent. This is what we use:

• Your cart, kept in your own browser. It is needed for the shop to work, so it is always on. It reaches us only when you go to checkout.
• Your privacy choices, kept in your browser so we remember them. Always on.
• Recently viewed: the item numbers of the last 12 products you opened, kept in your browser and never sent to us. You can switch it off in Privacy choices, which also clears it, or use the Clear link in the shop.
• A note that your order was counted, kept until you close the tab, so a payment is counted once. It is part of visit counting and stops when you switch counting off.
• Google Analytics cookies (named _ga and _ga_Y6MR7CB1ZP), set only if you accept them, to tell visits apart and count returning visitors. They last up to 13 months. Refusing is as easy as accepting, and switching Google Analytics off in Privacy choices deletes them.
• At checkout, our checkout page loads its payment form from Stripe, our payment provider. Stripe sets its own cookies there (named __stripe_mid, kept for a year, and __stripe_sid, kept for 30 minutes) and reads information about your device and browser, to process your payment securely and to prevent fraud. They are needed for the payment you asked for, so they are always on, and only the checkout page loads them.

You can change your choices at any time in Privacy choices, also linked at the foot of every page. Google Analytics is the only part that needs your consent: we ask in a banner on your first visit, with Accept and Reject equally easy, and nothing from Google Analytics loads until you accept. We keep a record of each choice, so we can show we asked: a random consent number, your choice, the date and time, and the version of this policy, with no IP address and nothing that identifies you. We ask again after 12 months, or sooner if we change how we use cookies.

6Who we share it with

Only those who help us run the shop, each only for that purpose:

• Stripe (Stripe Payments Europe Limited, in Ireland, and Stripe Payments UK Ltd), our payment provider, for payments, discount codes and fraud checks. Your welcome code is made in Stripe without your email address. If you pay with Apple Pay or Google Pay, Apple or Google also handle that payment, under their own terms and privacy policies. If you use Link, Stripe's service for saving your payment details, Stripe keeps them under its own terms and privacy policy.
• Royal Mail, with your name and delivery address, to deliver your parcel.
• Hostinger, which hosts this website, in the UK and Europe.
• Titan (Titan Solution Ltd, in the Cayman Islands), our email provider, which we buy through Hostinger, to send and receive our emails.
• Google, through Google Analytics if you accept analytics cookies, and through Google Pay if you choose to pay with it.

We may also share information where the law requires it, with our professional advisers, or with a buyer if our business is sold. We never sell your personal information.

7Transfers outside the UK

Stripe's European company is in Ireland, which UK law recognises as giving adequate protection. Stripe and Google may also process your information in the United States. Both take part in the UK Extension to the EU-US Data Privacy Framework, which UK law also recognises as giving adequate protection (the UK-US data bridge).

Our email provider, Titan, runs its mail servers with Amazon Web Services in the United States, so emails you send us, and the emails we send you, are processed there. Titan's data processing terms protect these transfers with standard data protection contract clauses. Our website host keeps your information in the UK and Europe, which UK law also recognises as giving adequate protection. You can ask us for details.

8Automated decisions

We do not make decisions about you by automated means alone. At checkout, Stripe automatically checks card payments for fraud and may decline a payment. If that happens, contact us and we will look into it.

9How long we keep it

• Orders, payments and the records of returns and refunds: 6 years from the end of the financial year they belong to, as company law requires.
• Return photos and messages about an order: with that order's records.
• Other messages: up to 2 years after our last contact.
• Visit counts: 13 months, then deleted.
• Google Analytics data: 14 months, then deleted by Google.
• Records of cookie choices: 2 years, then deleted.
• Our emails: while you are signed up. If you unsubscribe, we keep only your email address and the record of when you signed up and left, so that we never email you news or offers again. A sign-up that is not confirmed is deleted after 30 days.

10Your rights

You can ask to see the personal information we hold about you, and to have it corrected, deleted, or its use restricted, or to receive a copy to take elsewhere. Email us at customerservice@multibargain.com. We reply within one month.

11Your right to object

Where we use your information on the basis of our legitimate interests, you can object at any time, and we will stop unless we have compelling grounds, such as defending a legal claim. To stop visit counting straight away, switch it off in Privacy choices.

You can stop our news and offers at any time, with the Unsubscribe link in any of them or by telling us, and we stop at once.

12Complaints

If you are unhappy with how we handle your information, please tell us first at customerservice@multibargain.com, so we can put it right. We acknowledge every complaint within 30 days and reply as quickly as we can.

You can also complain at any time to the Information Commission (formerly the Information Commissioner's Office, ICO), the UK's data protection regulator: ico.org.uk.

13Children

Our shop is not aimed at children, and you must be 18 or over to place an order. We do not knowingly collect information about children.

14Changes to this policy

If we change how we use your information, we will update this page and, where the change matters to you, tell you before it applies.