Privacy policy
MichanDirect Privacy Policy
Last updated: 9 November 2026
This Privacy Policy explains how MichanDirect ("we", "us" or "our") collects, uses and shares your personal information when you visit our website, buy from us or contact us (the "Services"). Please read it alongside our Terms of Service.
Who we are
MichanDirect is a trading name of Michan Group Limited, a company registered in England and Wales (company number 16133556), which is the data controller for the personal information we collect through our store. You can contact us at sales.michanstores@gmail.com, on 07359 997390, or by post at our registered office: 4th Floor, 18 St. Cross Street, London, EC1N 8UN, United Kingdom.
Our relationship with Shopify
Our store runs on Shopify, which provides the platform we use to sell to you.
- Shopify as our processor: Shopify processes your information on our behalf to run our store.
- Shopify as an independent controller: Shopify also uses some information for its own purposes, for example to improve its platform and services. Shopify is responsible for that use.
For more on how Shopify handles personal information, see the Shopify Consumer Privacy Policy.
1. What personal information we collect
Information you give us
- Contact details: your name, billing and delivery addresses, phone number and email address.
- Account information: your login details and preferences, if you create an account.
- Payment information: card or other payment details. These are handled securely by our payment providers, and we do not see or store your full card number.
- Order information: the items you view, add to your basket, buy, return or exchange.
- Communications: anything you tell us when you contact customer support, leave a review or answer a survey.
Information collected automatically
- Usage information: how you use our website, such as the pages you visit and what you click on.
- Device information: your IP address, browser, device type and similar identifiers, collected through cookies, pixels and similar technologies.
Information from others
- Delivery and tracking updates from carriers.
- Order details from retailers or marketplaces when you buy one of our products through them.
2. How we use your information, and our lawful bases
- To take, deliver and support your order, including payment, delivery, returns, refunds and customer service. Lawful basis: to perform our contract with you.
- To send you marketing by email, SMS or push notification. Lawful basis: your consent or, for existing customers where the law allows, our legitimate interests. You can opt out at any time.
- To remind you about an unfinished checkout. If you enter your email address at checkout and leave before paying, we may send you up to three emails over the following three days with a link back to your basket. Lawful basis: our legitimate interests. Every email has an unsubscribe link, and the emails stop as soon as you place an order.
- To show you relevant adverts on other websites and social media, and to measure how our adverts and website perform. Lawful basis: your consent to non-essential cookies, where required.
- To keep our store secure and prevent fraud. Lawful basis: our legitimate interests.
- To meet our legal obligations, such as keeping tax and accounting records and responding to lawful requests. Lawful basis: legal obligation.
3. Who we share your information with
We share your information only where needed for the purposes above, with:
- Shopify, as described above.
- Suppliers and fulfilment partners who pack and send your order, including dropshipping suppliers such as CJdropshipping, AliExpress (through DSers), Spocket and Printify. They receive your name, delivery address, phone number and the items ordered.
- Delivery companies and tracking services, to deliver your order and send you tracking updates.
- Payment providers, to take payment and prevent fraud.
- Email, SMS and notification providers that send order updates and, if you have agreed, marketing (for example Shopify Email, Seguno, Sender, ActiveCampaign and Brevo PushOwl).
- Customer service, review and rewards tools, such as Chatty and WhatsApp for chat, Judge.me for product reviews and Smile.io for rewards.
- Advertising and analytics partners, such as Meta (Facebook and Instagram), Google and YouTube, TikTok, Pinterest and Snapchat.
- Retailers and marketplaces: if you buy one of our products through another retailer (including through Shopify Collective) or a marketplace, we receive the order details we need to fulfil it.
- Professional advisers and authorities, where the law requires it or to protect our rights, and a buyer or successor if our business is sold or reorganised.
The tools we use may change from time to time. Contact us if you would like an up-to-date list.
4. Cookies and similar technologies
We use cookies, pixels and similar technologies to run our store, understand how it is used and, with your consent where required, show you relevant adverts.
- Essential cookies make the website work, for example by keeping items in your basket.
- Analytics cookies help us understand how visitors use our website.
- Advertising cookies help make adverts more relevant to you.
You can control cookies through your browser settings and, where shown, our cookie banner. Shopify also uses its own cookies; see the Shopify Cookie Policy.
5. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict or object to how we use it, including objecting to direct marketing at any time;
- receive your information in a portable format; and
- withdraw your consent at any time, where we rely on consent.
Some of these rights have limits. For example, we may need to keep order records for tax purposes. If you live outside the UK, you may have similar rights under your local law.
Opting out
- To stop marketing emails, use the "unsubscribe" link in any email. To stop SMS, follow the instructions in the message.
- To opt out of targeted advertising, visit our Your Privacy Choices page. Where our platform supports it, we also honour the Global Privacy Control (GPC) signal from your browser.
To use any of your rights, contact us using the details below. We may need to confirm your identity first. We will reply within one month, and we will not treat you differently for using your rights.
6. International transfers
Your information may be processed outside the UK, including in the United States and Canada, where Shopify and some of our service providers are based, and in China and other countries where some of our suppliers are based. When we transfer personal information outside the UK, we rely on the safeguards or exceptions allowed by UK data protection law. These include adequacy regulations, approved contract clauses, or the transfer being necessary to fulfil your order.
7. How long we keep your information
We keep your information only for as long as we need it for the purposes above. Order and payment records are normally kept for six years to meet tax and accounting rules. We keep marketing information until you unsubscribe or ask us to delete it.
8. Security
We take reasonable steps to protect your information, but no website or online service is completely secure.
9. Children
Our Services are not intended for children, and we do not knowingly collect personal information from children under 16. If you believe a child has given us their information, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date.
11. Contact us and complaints
- Data controller: Michan Group Limited (trading as MichanDirect)
- Email: sales.michanstores@gmail.com
- Phone: 07359 997390
- Registered office: 4th Floor, 18 St. Cross Street, London, EC1N 8UN, United Kingdom
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or to your local data protection authority if you live outside the UK.