1. Who is responsible for your information

C. M. Zangenberg is the controller of personal information handled through this website. Questions or requests concerning privacy can be sent to contact@millsandmorrison.com.

2. Information that may be handled

Depending on how you use the website, the following information may be handled:

• Correspondence: your email address and anything you choose to include when you contact us.
• Newsletter and marketing information: your email address, name if provided, subscription preferences, sign-up source and date, messages sent to you, delivery status, and interactions such as email opens and link clicks associated with your subscriber record.
• Order information: your name, contact details, billing and delivery addresses, items ordered, order history, transaction references, payment status, and information needed to arrange delivery, returns, refunds or customer support. Full payment-card details will ordinarily be collected directly by a payment provider rather than stored by this website.
• Technical and usage information: an IP address, browser or device information, requested pages, referring pages, dates and times, cookie or similar identifiers, and interactions with the website.

Newsletter information may be stored and analysed directly by us or through an email-service provider. Engagement information may be used to understand which updates are useful and to tailor future communications. It will not be used to make decisions that produce legal or similarly significant effects.

3. How and why information is used

Personal information may be used to:

• operate, secure, maintain and troubleshoot the website;
• respond to messages and requests;
• administer newsletter subscriptions and send book news or other updates where you have consented;
• measure newsletter delivery, opens and link activity and improve the relevance of communications;
• accept, process and fulfil direct orders placed through the website, including taking payment, arranging delivery, handling returns or refunds, and providing customer support; and
• comply with legal, tax and accounting obligations or protect legal rights.

The legal bases relied upon are performance of a contract or steps taken at your request for orders, consent for email marketing and optional tracking technologies, legitimate interests in operating and protecting the website and understanding reader engagement, and compliance with legal obligations.

4. Cookies and browser storage

This website may use cookies and similar technologies for essential functions such as security, shopping baskets, checkout, remembering preferences and maintaining a session. These technologies are necessary for services you request and cannot always be disabled through the website.

With your consent, analytics or marketing technologies may also be used to understand visits, improve the website and measure campaigns. Email newsletters may contain tracking pixels or tracked links that record delivery, opens and clicks against a subscriber record. Where consent is legally required, optional technologies will not be used until you have made a choice through the cookie or consent controls provided.

5. Sharing information

Personal information is not sold or rented. It may be shared when necessary with providers of website hosting, email and newsletter delivery, ecommerce systems, payment processing, fraud prevention, analytics, order fulfilment, postage or courier services, customer support, and professional advice. Information may also be disclosed where required by law. Providers acting on our behalf are permitted to use information only for the relevant service and subject to appropriate protections.

6. International transfers

Some service providers may process information outside Malta or the European Economic Area. Where this occurs, an applicable legal transfer mechanism or other appropriate safeguard will be used as required by data-protection law.

7. How long information is kept

Information is retained only for as long as reasonably necessary for the purpose for which it was collected. Subscriber and engagement records are generally kept while you remain subscribed; after you unsubscribe, limited information may be retained on a suppression list so that your choice can be respected. Order and transaction records may be retained for the periods required by tax, accounting, consumer-protection and other laws. Correspondence, technical logs and security records are kept only for as long as needed for their relevant operational, support or legal purpose.

8. Your data-protection rights

Subject to the circumstances and applicable law, you may have rights to:

• request access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• request erasure or restriction of processing;
• object to processing based on legitimate interests or for direct marketing;
• receive certain information in a portable format; and
• withdraw consent at any time where processing relies on consent.

To exercise a right, email contact@millsandmorrison.com. You may also lodge a complaint with Malta’s Information and Data Protection Commissioner or another competent supervisory authority.

9. Security

Reasonable technical and organisational measures are used to protect personal information. No internet transmission or storage system can be guaranteed completely secure, however.

10. Children

This website is not directed at children under 16 and does not knowingly seek to collect personal information from them.

11. Other websites

Links to third-party websites are provided for convenience. Those websites are responsible for their own privacy practices and policies.

12. Changes to this policy

This policy may be updated when the website, its services or legal requirements change. The latest version will always appear on this page with its revision date.