Privacy Policy

Last updated: May 2026

Your privacy matters to us. This policy explains what data we collect, why we collect it, and how you can control it.

1. Data We Collect

When you interact with The Mall Street, we may collect the following categories of personal data:

Identity data — name, username, or similar identifier
Contact data — email address, phone number, billing and delivery address
Transaction data — details of purchases and payments processed through our platform
Technical data — IP address, browser type, device identifiers, and pages visited
Marketing data — preferences for receiving communications from us
Usage data — how you navigate and interact with our website

We do not collect or store full payment card numbers. All payment processing is handled by our certified third-party payment providers.

2. How We Use Your Data

Your data is used to:

Process and fulfil your orders and manage returns
Send transactional communications (order confirmation, shipping updates)
Personalise your shopping experience and recommendations
Detect and prevent fraud or misuse of our platform
Comply with legal and regulatory obligations
Send marketing emails if you have opted in (unsubscribe any time)

3. Legal Basis for Processing

We process your personal data on the following legal grounds: performance of a contract (to fulfil your order), legitimate interests (fraud prevention, service improvement), legal obligation (tax and accounting requirements), and consent (marketing communications).

4. Cookies

The Mall Street uses cookies to improve your experience, remember your preferences, and analyse site performance. You can manage your cookie preferences at any time through your browser settings or our cookie banner.

Essential cookies are always active as they are required for the site to function. Analytics and marketing cookies are only activated with your consent.

5. Data Sharing

We never sell your personal data. We may share it with trusted third-party service providers (logistics partners, payment processors, analytics tools) who are bound by strict data processing agreements. We may also disclose data when required by law or to protect our legal rights.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Transaction records are typically retained for 7 years for tax compliance. Marketing data is deleted upon request or after 3 years of inactivity.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain types of processing
Data portability — receive a copy of your data in a structured format
Withdraw consent for marketing at any time

To exercise any of these rights, contact us at privacy@themallstreet.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our site uses TLS encryption for all data in transit.

9. Contact & Complaints

For privacy-related concerns, contact our Data Protection Officer at privacy@themallstreet.com. If you are located in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority.