Privacy & Cookie Policy
Effective Date: 1st March 2025
1. Introduction
This Privacy & Cookie Policy explains how MODAMETA Ltd. ("MODAMETA", "we", "our", or "us") collects, uses, stores, and protects your personal information, and how we use cookies and similar tracking technologies on our Platform. We are committed to protecting your privacy and processing your data lawfully in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
MODAMETA Ltd. is the data controller responsible for your personal data. We are registered in England and Wales under Company Number 14162282.
This policy applies to our main website at moda-meta.com and all subdomains operated by MODAMETA, including view.moda-meta.com (our white-labelled collection viewer), collectively referred to as the "Platform".
If you are using the Platform on behalf of a business or organisation, you represent and warrant that you have the authority to bind that entity to this policy.
2. Information We Collect
We collect personal data in the following ways, depending on how you interact with the Platform:
Information you provide directly:
- Name, email address, and contact details when you register, book a demo, or get in touch with us.
- Business name, role, and industry information when setting up a MODAMETA account.
- Billing and payment information when subscribing to the Platform (payment card data is processed securely by Stripe — we do not store card details directly).
- Communications and correspondence you send to our support team.
Information collected automatically:
- Usage data, including IP address, browser type, device information, pages visited, and time spent on the Platform.
- Technical diagnostics, such as crash reports, error logs, and performance data.
- Cookie and tracking data, as described in Section 8 of this policy.
Information relating to End-Customer transactions:
- Order and transaction data, including product selections, payment status, and delivery information, where you interact with a brand or retailer powered by the MODAMETA Platform.
3. How We Use Your Information
We use the personal data we collect for the following purposes:
- To set up, manage, and maintain your MODAMETA account and provide access to the Platform.
- To process payments and manage your Subscription via Stripe.
- To communicate with you about your account, billing, service updates, and support requests.
- To improve and develop the Platform through usage analytics and performance monitoring.
- To send limited promotional or marketing content where you have provided your consent, which you may withdraw at any time.
- To process and fulfil orders placed through the Platform on behalf of our licensed brand clients, where MODAMETA acts as a data processor.
- To detect and prevent fraud, abuse, or security incidents on the Platform.
- To comply with applicable legal, regulatory, and accounting obligations.
4. Legal Basis for Processing
We are required by law to have a valid legal basis for processing your personal data. Depending on the purpose, we rely on one or more of the following bases:
- Performance of a contract — where processing is necessary to provide the Platform services you have subscribed to, or to fulfil an order placed through the Platform.
- Consent — where you have freely given specific consent, for example when signing up for marketing emails or accepting non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Legitimate interests — where we have a genuine business reason to process your data that does not override your rights, such as improving the Platform, preventing fraud, and maintaining platform security.
- Legal obligation — where processing is necessary to comply with a legal or regulatory requirement, such as HMRC obligations for invoicing and financial records.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or regulatory obligations. Our general retention practices are:
- Account and subscription data is retained for the duration of your active subscription and for up to 7 years thereafter to meet legal and financial record-keeping requirements.
- Marketing and communications data is retained until you withdraw consent or unsubscribe, after which it is deleted or anonymised.
- Support correspondence is retained for as long as reasonably necessary to resolve the matter and manage any related claims.
- Website usage and analytics data is retained in accordance with the settings of the relevant third-party tool (e.g. Google Analytics).
Where data is no longer required, we securely delete or anonymise it. In some circumstances we may be required to retain data for longer periods to comply with legal proceedings or regulatory investigations.
6. Third-Party Services
We work with trusted third-party service providers to operate the Platform. These providers process data on our behalf under contractual data processing agreements and are only permitted to use your data for the specific purposes for which they are engaged. Our current third-party providers include:
- Stripe — payment processing and subscription management. See Stripe's Privacy Policy.
- Google Analytics — website usage tracking and performance analysis. IP anonymisation is enabled. See Google's Privacy Policy.
- Cal.com — appointment and demo scheduling.
- Resend — transactional and system email delivery.
We do not sell or share your personal data with third parties for marketing purposes. If this changes in the future, this policy will be updated and you will be notified accordingly.
7. Data Hosting & Storage
Your personal data is securely stored within the United Kingdom and/or the European Economic Area (EEA). We implement appropriate technical and organisational safeguards to protect your data against unauthorised access, loss, destruction, or alteration.
Where any of our third-party providers process data outside the UK or EEA, we ensure that appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses or adequacy decisions issued by the UK Information Commissioner's Office (ICO).
9. Your Rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you, along with information about how it is used.
- Right to rectification — to request correction of any inaccurate or incomplete personal data we hold.
- Right to erasure — to request deletion of your personal data where we no longer have a legal basis to retain it (the "right to be forgotten").
- Right to restriction — to request that we limit how we process your data in certain circumstances.
- Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format and transfer it to another provider.
- Right to object — to object to processing based on our legitimate interests or for direct marketing purposes.
- Right to withdraw consent — to withdraw any consent you have previously given at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at help@moda-meta.com. We will respond within one calendar month of receipt and may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk.
10. MODAMETA as a Data Processor
Where you interact with a fashion brand or retailer that uses the MODAMETA Platform under licence — for example, via a white-labelled storefront hosted at a Client subdomain — that brand or retailer is the data controller responsible for your personal data in respect of that interaction. MODAMETA acts as a data processor in those cases, processing your data solely on the Client's behalf and under their documented instructions.
In such circumstances, you should refer to the privacy policy of the specific brand or retailer you are transacting with for full details of how your personal data is collected, used, and retained. That brand or retailer is responsible for ensuring their privacy policy is accessible to you at the point of interaction.
If you are unsure which brand operates the service you used, or need help identifying the relevant data controller, please contact us at help@moda-meta.com and we will assist you.
11. Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include encrypted data transmission, access controls, and secure infrastructure hosting.
Payment data is processed exclusively through Stripe, which is PCI DSS compliant. We do not store payment card details on our own systems.
While we take all reasonable precautions, no method of transmission over the internet is entirely secure. We encourage you to use strong, unique passwords for your account and to notify us immediately at help@moda-meta.com if you suspect any unauthorised access.
12. Children's Privacy
The MODAMETA Platform is not intended for use by individuals under the age of 18. We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently collected personal data from a person under 18, we will take prompt steps to delete that data from our systems.
If you believe we may have collected data from a child, please contact us immediately at help@moda-meta.com.
13. Changes to This Policy
We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, the cookies we use, legal obligations, or the services we provide. The most current version will always be published on our website with an updated effective date.
Where we make material changes to how we process your personal data or use cookies, we will notify you by email or by displaying a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy & Cookie Policy or how we handle your personal data, please contact us at:
- Email: help@moda-meta.com
- Company: MODAMETA Ltd., Company No. 14162282
- Website: moda-meta.com
