Privacy Policy

Effective: 26 December 2025

Mukafa ("we", "us", "our") is committed to protecting your privacy. This policy explains how we handle your information when you visit mukafa.com, buy Qissa®, or join our mailing list.

1. Data Controller

Mukafa is operated by [Your Full Name] trading as Mukafa.
Address: [Your full UK postal address]
Email: hello@mukafa.com

2. What We Collect

• Name, email, shipping address, phone (for orders & newsletters)
• Payment info (processed securely by PayPal/Meta – we never see full card details)
• IP address, browser, device, pages visited, time spent, and interactions (via Google Analytics and Meta Pixel)
• Hashed customer data (e.g., email, phone) via Automatic Advanced Matching on the Meta Pixel, where forms collect this information

3. How We Use It

• Fulfil and ship orders (contract)
• Send marketing emails (consent)
• Improve site, prevent fraud, and optimise advertising (legitimate interests)
• Keep tax records 7 years (legal obligation)

4. Who We Share With

• Mailchimp (email marketing – USA)
• PayPal / Meta Pay (payments – USA)
• Royal Mail (shipping)
• Google Analytics (anonymised – USA)
• Meta (Facebook/Instagram – USA) via the Meta Pixel and potentially Conversions API for advertising, measurement, retargeting, and audience building

5. Cookies & Tracking Technologies

We use essential cookies for the basket and consent banner. Analytics and advertising cookies/trackers (including the Meta Pixel) are used to track website activity, measure ad performance, and show relevant ads on Meta platforms (Facebook/Instagram).

The Meta Pixel collects data such as page views and interactions. With Automatic Advanced Matching enabled, it may automatically detect and hash (encrypt) customer details like email or phone from forms to improve ad targeting and attribution, while protecting privacy.

Analytics and advertising cookies are optional and can be managed or rejected via your browser settings or our consent banner (where implemented). You can also opt out of personalised ads from Meta via your Facebook/Instagram settings or at facebook.com/settings.

6. International Transfers

Data sent to the USA (Mailchimp, Google, Meta, PayPal) is protected by the UK Extension to the EU-US Data Privacy Framework (Data Bridge) for certified organisations, or by Standard Contractual Clauses where applicable.

7. How Long We Keep Data

• Orders: 7 years (HMRC requirement)
• Email subscribers: until you unsubscribe + 90 days
• Analytics data: 26 months

8. Your Rights (UK GDPR)

You can email hello@mukafa.com to:

• Access your data
• Correct errors
• Delete everything
• Object to processing (including for marketing/ads)
• Withdraw marketing consent
• Restrict processing or request portability

We reply within 30 days, free of charge.

9. Security

HTTPS everywhere. Payments processed on PCI-DSS compliant platforms. Hashed data sent to Meta for matching.

10. Children

Our site is not aimed at children under 13. We do not knowingly collect their data.

11. Changes to This Policy

We’ll email subscribers about significant changes and update the effective date above.

12. Contact & Complaints

Email: hello@mukafa.com
You can also complain to the UK ICO: ico.org.uk

Thank you for trusting Mukafa with your information.