Policies
Privacy Policy
Last updated 6 August 2026
We collect what an order needs, and nothing we cannot justify. We do not sell your personal information, and we never sell or rent your email address.
This policy explains what MILH collects when you visit this site, sign up for the list, or buy a jar — and what we do with it. It covers this website and the checkout we operate.
What we collect
When you buy something
Checkout is operated for us by Shopify. To fulfil an order we need your name, delivery address, email address, phone number if you give one, and the contents of your order. Shopify and its payment processors handle the payment itself.
We never see or store your full card number. It goes directly to the payment processor. We see only the last four digits, the card brand, and whether the payment succeeded.
When you join the list
Your email address and the fact that you ticked the consent box, with the date. That is all. Every email we send has an unsubscribe link, and it works immediately.
When you just visit
Our host records standard server logs — IP address, browser type, the page requested and the time. These are ordinary security and reliability records, not a profile of you.
The site stores one small item in your browser: your light or dark theme choice. It stays on your device, we cannot read it, and it is not used to identify you.
Advertising and analytics
This site does not currently run third-party advertising or analytics trackers, and sets no advertising cookies. If we add measurement tools — for example the Meta pixel, to see whether an advert actually worked — we will update this policy and the date at the top of it before they go live, and ask for consent where the law requires it.
If you arrived here from an advert, the platform that showed you the advert may already know that. That happens on their side, under their privacy policy, not ours.
Why we are allowed to hold it
| What | Why |
|---|---|
| Order and delivery details | To perform the contract — we cannot ship a jar without them |
| Payment records | Legal obligation — tax and accounting rules require us to keep them |
| Marketing emails | Your consent, which you can withdraw at any time |
| Server logs | Our legitimate interest in keeping the site up and secure |
Who we share it with
Only the companies that make an order physically possible, and only with what they need:
- Shopify — store platform, checkout and payment processing.
- Our fulfilment warehouse and carriers — your name and delivery address, so a parcel can reach you.
- Our email provider — your email address, to send order confirmations and, if you asked for it, the list.
- Our hosting provider — which serves this site and keeps the server logs.
We also disclose information where the law compels us to. Beyond that, no one. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
How long we keep it
- Order records — seven years, because tax law says so.
- Marketing list — until you unsubscribe, then we keep only the record that you opted out, so we do not email you again by mistake.
- Server logs — a short rolling window, typically under 30 days.
Your rights
Wherever you live, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it, where we are not required to keep it;
- stop using it for marketing — always, immediately, no reason needed.
Email support@milh.online and we will action it within 30 days. We will not charge you, and we will not make the service worse for you because you asked.
If you are in the EU or UK and you think we have handled your data badly, you can complain to your national data protection authority. We would rather you told us first so we can fix it.
Children
This site is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us data, email us and we will delete it.
Security
The site is served over HTTPS. Payment data is handled by the processor, not by us. No system is perfect, and anyone who tells you otherwise is selling something — but we hold as little as we can, which is the only real protection.
International transfers
Our service providers operate internationally, so your information may be processed outside your own country, including in the United States. Where required, those transfers rely on appropriate legal safeguards such as the European Commission's standard contractual clauses.
Changes
If this policy changes, the date at the top changes with it. If a change materially affects what we do with your data, we will email anyone on the list before it takes effect.
Contact
Privacy questions, requests, complaints: support@milh.online.