Your privacy. Our responsibility.

1. Who we are

MostlyPens is a trading name of MANN ONLINE LTD, a private limited company registered in England and Wales.

MANN ONLINE LTD is the data controller for the personal information covered by this policy. This means we’re responsible for deciding how and why that information is used.

• Trading name: MostlyPens
• Registered company: MANN ONLINE LTD
• Company number: 16496850
• Website: https://mostlypens.co.uk
• Email: hello@mostlypens.co.uk

Our registered office details can be found on our Companies House registration.

We’re a small, home-based UK business and operate online only. We don’t accept visitors or customer collections.

2. What information we collect

The information we collect depends on how you use our website.

When you place an order

• Your name and contact details.
• Billing and delivery addresses.
• Email address and telephone number, where provided.
• Products purchased and order history.
• Payment status and transaction references.
• Delivery, refund and customer service information.

When you personalise a product

We collect the names, messages, custom wording or other details you provide for printing on personalised products.

If you order a gift for someone else, this may include their name and delivery details. We use these to prepare and fulfil your order.

When you contact us

We collect the information you provide in contact forms, emails or other correspondence, including your name, email address and enquiry details.

When you create an account

If you register an account, we store account details such as your name, email address, login credentials and relevant order information. Passwords are stored in protected form rather than as readable text.

When you browse the website

Our website and supporting services may collect technical information such as IP addresses, browser type, device information, pages visited, security events and cookie identifiers.

Product reviews and uploads

If you leave a product review, we may collect your review content, display name, email address and relevant technical information. Approved reviews and their display names may be published on the website.

If you provide images or files for a custom order, we may process them to complete your personalisation request.

3. How and why we use your information

We use personal information for specific purposes and rely on the appropriate lawful basis under UK data protection law.

Where we rely on legitimate interests, these include maintaining a secure website, responding to enquiries, preventing fraud and improving our services. We consider these interests alongside your privacy rights.

Some details, such as a delivery address, are necessary to complete an order. Without them, we may be unable to supply your products. Providing optional marketing information is not required to shop with us.

4. Payments and checkout

Our online shop uses WooCommerce to manage products, baskets, customer accounts and orders.

Payments are processed through the payment services offered at checkout, including Stripe where selected.

We do not store full payment card numbers or security codes in our WooCommerce order records. Payment providers handle card information according to their own security and privacy arrangements.

We receive the information needed to confirm payments, process orders, issue refunds and maintain financial records.

Payment providers may also undertake security and fraud checks under their own policies.

5. Who we share information with

We share personal information with service providers where necessary to operate MostlyPens and fulfil orders.

These may include:

• Payment providers: To process payments and refunds.
• Delivery companies: To deliver orders and provide tracking information.
• Website hosting and security providers: To operate, maintain and protect our website.
• Email and communication providers: To send order notifications and handle enquiries.
• Accounting and professional advisers: To manage our business and financial obligations.
• Analytics and marketing providers: Where enabled and permitted, to measure website performance or support marketing.
• Public authorities: Where disclosure is required by law.

We only share information that is reasonably necessary for the relevant purpose. Some providers process data on our behalf, while others, such as payment providers, may have their own legal responsibilities.

We do not sell customer mailing lists.

6. Cookies and website tracking

Like most online shops, MostlyPens uses cookies and similar technologies to help the website function.

A cookie is a small piece of information stored on your device. Different cookies serve different purposes.

Managing your preferences

You can control or delete cookies through your browser settings. Where our website offers cookie preference controls, you can also use these to manage optional technologies.

Disabling essential cookies may prevent shopping basket, checkout or account features from working correctly.

7. Marketing emails

We may occasionally send emails about new products, offers or MostlyPens news.

We’ll only send marketing emails where you have given permission or where we are legally permitted to contact you about similar products as an existing customer and the relevant conditions have been met.

Where an existing-customer exception is used, you’ll be given an appropriate opportunity to opt out when your details are collected and in subsequent marketing messages.

You can unsubscribe at any time using the link in a marketing email or by contacting hello@mostlypens.co.uk.

Unsubscribing from marketing won’t stop important service messages about your orders.

8. How long we keep information

We only retain personal information for as long as it’s needed for the purposes described in this policy or to meet legal obligations.

• Order and accounting records: Generally retained for at least six years where required for UK tax and VAT purposes, or longer where another legal requirement applies.
• Customer account details: Kept while your account remains active and afterwards only where required for legal, security or legitimate business purposes.
• Customer enquiries: Kept for the time reasonably needed to deal with enquiries, complaints, disputes and related follow-up.
• Personalisation details: Retained as part of order records where necessary, with unnecessary production files removed when no longer needed.
• Marketing preferences: Held while you’re subscribed, with limited suppression records retained where necessary to respect opt-outs.
• Website technical data: Retained according to its purpose, security requirements and the settings of relevant service providers.

When personal information is no longer needed, we’ll securely delete or anonymise it where appropriate.

9. Information processed outside the UK

Some third-party service providers may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we ensure that an appropriate legal transfer mechanism applies. Depending on the destination and circumstances, this may include UK adequacy regulations or approved contractual safeguards.

You can contact us if you’d like further information about international transfers relating to your data.

10. Keeping your information safe

We use reasonable technical and organisational measures to protect customer information from unauthorised access, loss, misuse and disclosure.

These include appropriate website security controls, restricted administrative access, protected passwords and the use of specialist payment processors.

No internet service can guarantee absolute security, but we take data protection seriously and review our arrangements as our business develops.

11. Your data protection rights

Under UK data protection law, you have rights relating to your personal information, subject to applicable conditions and exceptions.

These include the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete information.
• Erasure: Request deletion of personal information where the law allows.
• Restriction: Ask us to restrict certain uses of your information.
• Data portability: Receive certain information in a portable format where applicable.
• Object: Object to particular processing, including direct marketing.
• Withdraw consent: Change your mind where processing relies on your consent.
• Challenge certain automated decisions: Exercise rights concerning qualifying solely automated decisions, where applicable.

To exercise a right, email hello@mostlypens.co.uk.

We may need to verify your identity before responding. We’ll respond within the time limits required by law and explain if an exception applies.

Not every right applies in every circumstance. For example, we may be legally required to keep certain transaction records even after an account is deleted.

Making a complaint

If you have concerns about how we’ve handled your data, please contact us first so we can investigate.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Visit the ICO website

12. Other websites and services

Our website may include links to external websites or content provided by third parties.

These services may operate their own privacy policies and collect information independently. We recommend reviewing their policies before sharing information with them.

13. Children’s privacy

We sell products that may be purchased as gifts for children, but our online purchasing service is intended for adults.

We don’t intentionally request personal information directly from children for marketing purposes.

If you believe a child has provided us with personal information inappropriately, please contact us.