Privacy Policy – La Griffe Creative (United Kingdom)

Last updated: 24 September 2026

1. Introduction

This Privacy Policy explains how La Griffe Creative (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website or purchase our products.

We comply with the UK GDPR, the Data Protection Act 2018, and applicable UK consumer transparency requirements.

By using this website, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

La Griffe Creative is the trading name of:

MAP TON MIND FZE

Office - C1 - 1F - SF8710

Ajman Free Zone C1 Building

Ajman Free Zone

United Arab Emirates

Licence Number: 52960

Email: hello@la-griffe-creative.com

MAP TON MIND FZE is the data controller for all personal data processed through this website.

As a non‑UK company serving UK consumers, we may be required to appoint a UK Representative under Article 27 UK GDPR. If applicable, details will be added here.

3. Personal Data We Collect

We collect only the data necessary to operate our e‑commerce service.

Categories of personal data include:

3.1 Data you provide directly

Full name
Billing address
Shipping address
Email address
Order details
Any information you include when contacting us

3.2 Data collected automatically

IP address
Browser type and device information

Basic analytics data (if applicable)

These may be collected through essential cookies or analytics tools.

3.3 Payment information

Payments are processed securely through Stripe.

We do not store or access your full payment card details. Stripe acts as an independent data controller for payment processing.

4. Purposes and Legal Bases for Processing

Under UK GDPR, we must specify our lawful bases for each processing activity.

Our purposes and legal bases are:

4.1 To process and deliver your order

Purpose: Managing orders, payments, shipping, and customer communication
Legal basis: Contract performance (Article 6(1)(b))

4.2 To maintain website functionality and security

Purpose: Operating and protecting our website
Legal basis: Legitimate interests (Article 6(1)(f)) — ensuring a secure and functional e‑commerce platform

4.3 To comply with legal obligations

Purpose: Record‑keeping, tax compliance (if applicable), consumer rights
Legal basis: Legal obligation (Article 6(1)(c))

4.4 Analytics (if used)

Purpose: Understanding website performance
Legal basis: Consent (Article 6(1)(a)) — required for non‑essential cookies under PECR

We do not use personal data for marketing, profiling, or advertising.

5. Cookies and Tracking Technologies

Our website uses essential cookies required for basic functionality (shopping cart, checkout, security).

If we implement analytics or marketing cookies in the future, we will request explicit consent in accordance with UK PECR rules and ICO guidance.

A separate Cookie Policy will be provided if non‑essential cookies are used.

6. Data Sharing

We share personal data only with trusted third parties necessary to operate our business:

6.1 Payment processor

Stripe (payment processing)

Stripe may process your payment data outside the UK. Their privacy policy applies.

6.2 Shipping and logistics providers

We share your name and shipping address with postal carriers to deliver your order.

6.3 Technical service providers

If applicable: hosting providers, security tools, or analytics platforms.

We do not sell or rent your personal data.

7. International Data Transfers

As MAP TON MIND FZE is based outside the UK, some data may be processed outside the UK.

We ensure that any international transfers comply with UK GDPR requirements, including the updated “materially lower protection” test introduced by the Data (Use and Access) Act 2025 .

Where required, we use appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Contractual protections with service providers

8. Data Retention

We retain personal data only for as long as necessary for each purpose:

Order data: 6 years (UK consumer law and accounting requirements)
Shipping data: Until delivery is confirmed
Customer communications: Up to 24 months
Analytics data: As defined in the Cookie Policy (if applicable)

We do not keep data longer than necessary.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

Secure hosting
Encrypted connections (HTTPS)
Restricted access to administrative systems
Secure payment processing via Stripe

No method of transmission is 100% secure, but we take reasonable steps to protect your information.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object
Right to withdraw consent (for consent‑based processing)

To exercise your rights, contact us at: hello@la-griffe-creative.com

11. Complaints Handling (DUAA 2025 Requirement)

Under the Data (Use and Access) Act 2025, we must maintain a clear complaints process .

If you believe your data rights have been infringed, you may:

If unresolved, escalate your complaint to the Information Commissioner’s Office (ICO):

https://ico.org.uk/make-a-complaint/

12. Children’s Privacy

Our website and products are not intended for children under 18.

We do not knowingly collect data from minors.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements.

Updates will be posted on this page with a revised “Last updated” date.

14. Contact Us

For questions about this Privacy Policy or your data rights, contact:

La Griffe Creative