Effective Date: [INSERT DATE, e.g., 1st January 2026]
MX Plus Foods is a trading name of MX PLUS LIMITED.
Company Number: [INSERT COMPANY NUMBER]
Registered Office: [INSERT REGISTERED ADDRESS]
Registered in: England and Wales
Website: mx-plus.co.uk
Privacy Contact: info@mx-plus.co.uk
For the purposes of applicable data protection laws, MX PLUS LIMITED is the data controller responsible for the personal information collected through our website and business operations.
We may collect, store, and process the following types of personal information:
Identity & Contact Details: Your name, billing address, delivery address, email address, telephone number, account username, and communication preferences.
Order & Transaction History: Details of products ordered, order values, applied discounts, delivery methods, order status, refund history, and customer service records.
Payment Information: Payment processing is handled securely by our third-party payment providers (e.g., Stripe, PayPal). MX Plus Foods receives only limited transaction details necessary for accounting and verification, such as payment status, card type, last four digits of the card, and fraud-screening outcomes.
Account Information: Login details (stored securely in protected form), saved delivery addresses, wishlists, shopping basket contents, and account preferences.
Enquiry & Application Data: Information submitted via contact forms, wholesale enquiries, stockist applications, catering requests, vendor submissions, customer complaints, or product-safety reports.
Marketing Preferences: Records of newsletter subscriptions, opt-in consents, opt-out requests, and campaign interactions.
Technical & Website Usage Data: Depending on your cookie preferences: your IP address, browser type, device information, pages viewed, referral sources, site interactions, approximate location, and cookie consent identifiers.
Reviews & User Content: Ratings, written reviews, display names, and any photographs or videos you voluntarily submit.
We use your personal data to:
Process, fulfill, and deliver your orders
Securely process payments, refunds, and returns
Create and manage your customer account
Send order updates and customer service communications
Respond to enquiries and investigate complaints or issues
Maintain food traceability and manage product recalls or safety withdrawals
Evaluate wholesale, stockist, and supplier applications
Prevent fraud and protect the security of our website
Comply with tax, accounting, and legal obligations
Send marketing communications where legally permitted
Improve our products, services, and overall website experience
We rely on the following lawful bases under data protection law to process your personal data:
Contractual Necessity: To perform an agreement with you (e.g., processing and delivering your order or managing your account).
Legal Obligation: To comply with statutory duties, such as tax, accounting, consumer law, and food safety/traceability compliance.
Legitimate Interests: To run our business securely and efficiently, including fraud prevention, customer support improvements, website analytics, and defending legal claims.
Consent: Where you have explicitly given us permission, such as subscribing to non-essential cookies, optional direct marketing, or publishing user-submitted photos/reviews. You can withdraw your consent at any time.
We will only send direct electronic marketing communications if you have consented to receive them or where permitted by applicable consumer laws (e.g., existing customer “soft opt-in” rules).
Unsubscribing: You can opt out of marketing communications at any time by clicking the “unsubscribe” link at the bottom of any marketing email or by contacting us at info@mx-plus.co.uk.
Transactional Emails: Service and transactional communications (such as order confirmations, shipping updates, or safety notices) are non-marketing messages and will still be sent as necessary.
To provide our services, we may share relevant personal information with trusted third-party service providers, including:
Website & E-Commerce Platforms: WooCommerce and WordPress host/technical support providers.
Payment Processors: Stripe and PayPal.
Delivery & Logistics: Royal Mail and designated courier services.
Communication & Marketing: Email delivery services, WhatsApp Business, and customer review platforms.
Analytics & Search: Google Services and Meta Analytics.
Professional Advisers: Accountants, legal counsel, insurers, and regulators where required by law.
We never sell your personal information to third-party advertisers.
Some of our third-party service providers may store or process personal data outside the United Kingdom. Where international transfers occur, we ensure appropriate safeguards (such as UK Standard Contractual Clauses or equivalent legal protections) are in place to keep your data secure.
We only keep personal information for as long as necessary to fulfill the purposes for which it was collected, including legal, tax, and accounting requirements:
Order & Financial Records: Retained for up to 6 years from the end of the financial year to satisfy UK tax and company accounting laws.
Customer Support & Complaints: Retained for a reasonable period following resolution to handle follow-up queries or potential claims.
Account Information: Retained while your account remains active and for a reasonable period following account closure.
Marketing Records: Retained until you withdraw consent or opt out (with basic opt-out suppression records kept to respect your preference).
Food Traceability & Recalls: Retained in accordance with food safety regulations.
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse.
Please note that no online system is 100% secure. You are responsible for keeping your customer account credentials and password confidential.
Under UK data protection laws, you have rights regarding your personal information, including the right to:
Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data (where applicable).
Restriction: Request that we restrict processing of your data in certain circumstances.
Portability: Request a transfer of your data to another provider in a structured format.
Object: Object to data processing based on legitimate interests or direct marketing.
Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please email us at info@mx-plus.co.uk.
If you have a concern about how we handle your personal data, we encourage you to contact us first so we can resolve the issue promptly.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
Our website and products are not intentionally directed at children. Customers placing orders must have full legal capacity to complete a transaction or have appropriate adult authorization.
We do not carry out automated decision-making that produces legal or similarly significant effects. Third-party payment processors may use automated fraud-screening tools to flag high-risk transactions for manual review.
We may update this Privacy Policy from time to time to reflect changes in our technology, services, or legal obligations. Updates will be published on this page with a revised effective date.
Bringing authentic African
food to your table
