Privacy Policy

Who is responsible for your information

Moruk is a trading name of MRK Sales and Consultancy Ltd, registered in England and Wales under company number 14576199. Our registered office is 338A Regents Park Road, Office 3 and 4, London, N3 2LN, United Kingdom. We are not VAT registered and do not charge VAT. The company is the controller of the personal information described in this notice.

For privacy questions or requests, contact [email protected], or write to our registered office marked “Privacy”. This notice applies to moruk.co.uk and our handling of related customer enquiries and purchases.

Information we use

• Contact and delivery details: your name, email address, billing and delivery addresses, and telephone number where supplied.
• Order and payment records: the products you buy, order status, delivery details, payment method, transaction references, refunds, and correspondence about the purchase.
• Account information: the details you give when creating or using an account, saved addresses, and your order history.
• Messages and reviews: the information you send through forms, email, or other customer support channels, and any review you choose to submit.
• Technical and usage information: IP address, browser and device details, security logs, and information about pages or shopping interactions where the relevant technology is enabled.

We receive information from you directly and from service providers involved in payment, fraud prevention, and delivery. Where you provide another person’s delivery details, please make sure you are entitled to do so and that they can read this notice.

Why we use it and our legal bases

We consider the effect on your rights when relying on legitimate interests. You can object to processing based on those interests. If information is needed to take payment, deliver goods, or meet a legal obligation, we may be unable to complete the relevant service without it.

If you choose to subscribe to promotional messages, we use the applicable permission for that subscription. You can unsubscribe using the message’s instructions or contact us. Order, delivery, and support messages are separate from promotional subscriptions.

Who receives information

We share information relevant to a service with the providers that help us operate the store. These include:

• Stripe and PayPal for payments, refunds, transaction checks, and fraud prevention. Wallet providers and your bank may also receive information when you use their payment service.
• Delivery and fulfilment providers that need your recipient details and order information to deliver your purchase or handle a return.
• Website, hosting, email, and support providers that maintain the store or help us communicate with you.
• Cloudflare and Wordfence for website security and abuse prevention.
• Google services for analytics or tags when the relevant optional controls permit them.
• Professional advisers, authorities, or other recipients where needed for a legal duty, a claim, or a legitimate business transaction, subject to appropriate protections.

Payment providers can act as independent controllers for some activities. Their own notices explain that processing: Stripe privacy information and PayPal’s Privacy Statement.

International processing

Some providers operate internationally and may process information outside the UK, including in the United States or the European Economic Area. A provider’s processing location can differ from the location of the store or your delivery address.

Where a restricted transfer takes place, the applicable arrangements must provide the protection required by UK data protection law. Depending on the provider and destination, this can involve an adequacy regulation or approved contractual safeguards. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

How long we keep information

Retention depends on the record and why it is needed. We assess the following criteria:

• Orders and transactions: the time needed to fulfil the order, deal with returns or disputes, and satisfy accounting, tax, and other legal record-keeping duties.
• Accounts: the period for which an account is maintained and any separate need to retain associated purchase records.
• Enquiries and complaints: the time needed to answer the matter, provide relevant follow-up, and deal with any connected claim.
• Security records: the time needed to detect, investigate, and prevent abuse, taking account of the seriousness of an incident.
• Cookie and consent records: the purpose, expiry, and preference settings described in the Cookie Policy.

Deletion of an account or withdrawal of consent does not always mean all purchase records can immediately be removed. We may need to retain particular information for legal obligations or claims. Contact us if you need the retention criteria for a particular record.

Your choices and rights

Depending on the circumstances, data protection law gives you rights to ask for access to your information, correction of inaccurate information, deletion, restriction of use, or transfer of information to you or another provider. You may also object to use based on legitimate interests and to direct marketing.

Where we rely on consent, you can withdraw it for future processing. Withdrawal does not change the lawfulness of processing already carried out. Use Cookie Settings for optional website technologies or email [email protected] for other requests.

We may ask for information reasonably needed to verify your identity or understand a request. We respond within the applicable legal time limit, normally one month, and will explain if the law permits an extension or means a right does not apply.

You can raise a concern with us and you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, or another authority where applicable.

Cookies, security, and other websites

Read our Cookie Policy for the main categories of storage and access technologies, providers, and preference controls. Security checks and necessary shopping functions operate separately from optional tracking choices.

We use technical and organisational measures appropriate to the information, including encrypted website connections and access controls. No online service can promise absolute security. Please keep your account login private and contact us if you suspect misuse.

Links to Instagram and other external websites take you to services with their own privacy practices. This notice does not govern their websites. The store is intended for general retail customers and is not directed at children.

Changes to this notice

We may update this notice as the store, providers, or legal requirements change. The date above identifies the latest version. Where a change requires a separate notice or fresh consent, we will take the relevant step.