Who is responsible for your data

10ML, the operator of 10ml.com, is the controller of your personal data. For anything in this policy, or to use any of your rights, write to contact@10ml.com. Your email goes straight to the people who handle customer data.

What we collect and why

• When you order: your name, email address, delivery address, phone number (passed to the courier for delivery only), the items you buy and what you paid. We use this to take payment, pack and deliver your order, send your order emails, handle returns and keep the accounting records the law requires. The legal bases are the performance of our contract with you (Art. 6(1)(b) GDPR) and our legal obligations under tax and accounting law (Art. 6(1)(c)). We cannot deliver an order without these details.
• When you pay: Stripe handles the payment. We receive the result and limited card details such as the card brand and last four digits, never the full number. Stripe also screens each payment for fraud, using information such as your IP address and device. Legal bases: our contract with you, and the legitimate interest that we and Stripe share in preventing fraud (Art. 6(1)(f)).
• When you create an account: your name, email address, a password (stored only in scrambled, hashed form), saved addresses and your order history. If you sign in with Google or Facebook, we receive your name, email address and account ID from them. We never see your password for those services and we never post anything on your behalf. Legal basis: our contract with you.
• When you write to us: your email address and whatever your message contains, so that we can answer. Legal basis: our legitimate interest in answering you, or our contract where your message concerns an order.
• When you sign up for our newsletter: your email address, used to send you new arrivals and news from 10ML. Legal basis: your consent (Art. 6(1)(a)). Every newsletter has an unsubscribe link, and you can withdraw your consent at any time.
• When you browse: our servers process your IP address, browser type and the pages you request, which is what it takes to deliver a website and keep it secure. We also use your IP address to work out which country you are in, so the product page can show delivery information for it. Your browser remembers that country code for 24 hours; we do not store the IP address for this. Legal basis: our legitimate interest in running a secure, working shop (Art. 6(1)(f)).
• Analytics: we use PostHog in cookieless mode to count visits and see which pages work. It sets no cookies and stores nothing on your device. To tell one day’s visits apart without identifying you, PostHog derives a one-way code from your IP address and browser details with a key that changes every day. We never link analytics to your account or your orders. Legal basis: our legitimate interest in understanding and improving the shop (Art. 6(1)(f)), which you can object to at any time.
• Error monitoring: when something on the site breaks, Sentry receives a technical report: the error, the page address, and your browser and device type. It is set up not to collect your name or email address, and session recording is switched off. Legal basis: our legitimate interest in a working shop (Art. 6(1)(f)).

Who we share it with

We do not sell or rent personal data, and we do not share it for advertising. These service providers process data on our behalf, under data processing agreements and only on our instructions:

• Vercel hosts the website.
• Render hosts the system that runs our orders and accounts, on servers in the EU.
• Supabase runs our database, on servers in the EU.
• Stripe processes payments. For fraud prevention and its duties under financial regulation, Stripe acts as a separate controller under its own privacy policy.
• Resend sends our order and account emails.
• Google Workspace hosts our mailbox, where your emails to us arrive.
• PostHog provides the cookieless analytics described above, from servers in the EU.
• Sentry provides error monitoring, from servers in the EU.
• Cloudflare stores and delivers the images on our site.

We also share data with:

• our warehouse and delivery partners, who receive your name, delivery address, phone number and the contents of your order so they can pack and deliver it;
• Google or Facebook, only if you choose to sign in with them; they act as separate controllers under their own privacy policies;
• authorities, courts and professional advisers, where the law requires it or where it is needed to establish or defend legal claims.

Transfers outside the EU

Our database, order system, analytics and error monitoring are hosted in the EU. Some of the providers above, including Vercel, Stripe, Resend, Google and Cloudflare, are based in the United States or may process data there. Those transfers rely on the EU–US Data Privacy Framework for certified providers, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

• Orders and invoices: as long as tax and accounting law requires, which can be up to ten years.
• Your account: until you close it. We then delete your account data, except the order records we must keep.
• Emails with us: as long as we need them to deal with your request, and no longer than three years after it is resolved.
• Newsletter: until you unsubscribe.
• Your bag: your browser stays linked to it for 30 days after your last change to it.
• Server logs and error reports: a short period, after which they are deleted automatically; error reports are kept for no more than 90 days.

Your rights

Under the GDPR you have the right to:

• get a copy of the personal data we hold about you (access);
• have inaccurate data corrected;
• have your data deleted, where we have no legal reason to keep it;
• restrict how we use your data while a question about it is resolved;
• receive the data you gave us in a portable, machine-readable format;
• object to any use of your data based on our legitimate interests, including analytics;
• withdraw your consent at any time, where we rely on it, without affecting what we did before.

Write to contact@10ml.com and we will reply within one month. We may ask you to confirm your identity first. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work.

Automated decisions

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Stripe’s fraud screening may automatically decline a payment it judges high-risk. If that happens to you, write to us and a person will look at it.

Cookies

We use only the cookies the shop needs to work, and no advertising or analytics cookies. Each one is listed in our cookie policy.

Children

Our shop is not aimed at children under 16, and we do not knowingly collect their personal data.

Security

Every connection to our site is encrypted. Payment details stay with Stripe, and access to customer data is limited to the people who need it for their work.

Changes to this policy

When our use of personal data changes, we update this policy and the date at the top of it. For significant changes, we will also tell customers by email.