Privacy policy
Last updated: 25 August 2026
Who we are
Uwhisk is operated by M Flux Lab, Office 19958, 182-184 High Street North, East Ham, London E6 2JA. We are the “data controller” for personal data collected through this website. Contact us via our contact page.
What we collect
- Order details: name, delivery and billing address, email, phone (optional), items ordered, payment status. Card details are handled by Shopify Payments (or the payment provider you choose) and never stored by us.
- Account details if you create an account.
- Communications: emails and contact-form messages you send us.
- Marketing preferences, if you opt in.
- Technical data: IP address, browser, device, pages viewed – collected via cookies (see below).
- Reviews you choose to leave through our review app.
How we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Processing and delivering your order, and dealing with returns | Performance of a contract |
| Order confirmation, dispatch and delivery emails | Performance of a contract |
| ★ Post-purchase care email (approx. day 3) and whisk replacement reminder (approx. day 75) – service messages about the product you bought, sent to customers under the “soft opt-in”; every message has an unsubscribe link | Legitimate interests |
| Marketing newsletters | Consent (you tick the box; withdraw any time) |
| Fraud prevention, security, keeping accounts | Legitimate interests / legal obligation |
| Answering your enquiries | Legitimate interests |
| Analytics to improve the site | Consent (cookie banner) / legitimate interests for essential analytics |
Who we share it with
Only as needed to run the shop: Shopify (our store platform and payment processor), Royal Mail or our delivery carrier (name, address, email/phone for tracking), Shopify Email (service and marketing emails), Judge.me or similar (review requests), and our accountant where required. Some of these providers process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as the UK Addendum to the EU Standard Contractual Clauses or the UK-US Data Bridge. We do not sell your data.
How long we keep it
Order records: 6 years after the order (tax and legal requirements). Marketing preferences: until you unsubscribe or 3 years of inactivity. Enquiries: 2 years. Reviews: while the product is listed, or until you ask us to remove yours.
Cookies
This site uses cookies that are essential to run the shop (basket, checkout, security), plus optional analytics and marketing cookies which are only set if you accept them via the cookie banner. You can change your choice at any time via the “Cookie preferences” link in the footer or your browser settings.
Your rights
Under UK GDPR you can ask us to: access the data we hold about you; correct it; delete it; restrict or object to processing (including direct marketing at any time); receive it in a portable format; and withdraw consent where consent is the basis. Contact us via our contact page – we respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Children
This site is not aimed at children under 16 and we do not knowingly collect their data.
Changes
We will post any changes here and update the date above.