Privacy policy

Privacy Policy & Cookie Policy — Matrix Velox

 

This Privacy Policy describes how Matrix Velox, operated by Paula Margaret Allison ("we", "us", "our"), collects, uses, discloses, and protects your personal information when you visit or make a purchase from our store.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and relevant Australian privacy standards under the Privacy Act 1988 (Cth).

1. Data Controller Identification & Contact Details

For the purposes of the UK GDPR and data protection legislation, the Data Controller responsible for your personal information is:

  • Data Controller Name: Paula Margaret Allison (trading as Matrix Velox)

  • Registered Address: 12 Melbourne Avenue, Camp Hill, Queensland 4152, Australia

  • Contact Email: matrixvelox@outlook.com

  • Contact Telephone: +61 424 489 146

2. Personal Data We Collect

When you visit our site, interact with us, or make a purchase, we collect several categories of personal data:

  • Identity & Contact Data: Your full name, billing address, shipping address, email address, and telephone number.

  • Order & Transaction Data: Information about products viewed, items added to cart, orders placed, payment status, purchase history, and customer service interactions.

  • Technical & Usage Data: IP address, browser type and version, time zone setting, operating system, device details, page interaction data, referring URLs, and browsing activity.

  • Payment Data: Payment transactions are processed securely through Shopify Payments Australia (and integrated gateway providers). We do not store or process raw credit card numbers or full payment credentials on our servers.

3. Lawful Bases for Processing Your Personal Data

Under UK GDPR, we rely on the following legal bases to process your personal data:

  1. Performance of a Contract: Processing is necessary to process your orders, arrange delivery, manage payments, communicate about your order status, and provide customer support.

  2. Compliance with Legal Obligations: Processing is necessary to satisfy tax, accounting, customs, and consumer protection reporting requirements.

  3. Legitimate Interests: Processing is necessary for our legitimate business interests, provided these are not overridden by your data protection rights (e.g., fraud prevention, site security, and store performance analysis).

  4. Consent: Where required by law (e.g., placing non-essential analytical/marketing cookies or sending direct electronic marketing communications), we rely on your explicit consent, which you may withdraw at any time.

4. How We Share & Transfer Your Personal Data

We share your personal information with trusted third-party service providers (Data Processors) to assist us in operating our store:

  • Shopify: Our e-commerce platform host (Shopify International Limited / Shopify Inc.), which handles store infrastructure, customer data storage, and order processing.

  • Shopify Payments Australia & Financial Institutions: To process payment transactions securely and detect fraudulent activity.

  • Logistics & Postal Carriers: International courier and postal services required to package, transport, and deliver your orders to your address in the United Kingdom.

  • IT & Communication Providers: Email routing, hosting, and customer support management tool providers.

Cross-Border International Data Transfers

As our business is operated from Australia and our platform infrastructure utilizes international servers (including Shopify infrastructure in Canada and the United States), your personal data will be transferred and stored outside the United Kingdom.

We ensure that all international transfers comply with UK GDPR requirements through the use of standard contractual clauses (SCCs), International Data Transfer Agreements (IDTAs), or adequacy decisions recognized by the UK Information Commissioner’s Office (ICO).

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, tax, or regulatory requirements.

  • Order and Transactional Records: Retained for up to 7 years to satisfy statutory financial, tax, and record-keeping obligations.

  • General Customer Queries: Retained for as long as necessary to resolve your request and up to 2 years thereafter.

6. Your Legal Rights Under UK GDPR

If you are a resident or consumer located in the United Kingdom, you possess the following statutory rights regarding your personal data:

  • Right of Access: The right to request copies of the personal data we hold about you.

  • Right to Rectification: The right to request that we correct inaccurate or incomplete personal data.

  • Right to Erasure ("Right to be Forgotten"): The right to request that we erase your personal data under certain conditions.

     

  • Right to Restrict Processing: The right to request that we restrict the processing of your personal data under specific circumstances.

     

  • Right to Object to Processing: The right to object to our processing of your personal data based on legitimate interests or for direct marketing.

  • Right to Data Portability: The right to request the transfer of your data to another organisation or directly to you in a structured, machine-readable format.

  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at matrixvelox@outlook.com. We will respond within one calendar month as required by UK law.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk | Helpline: +44 303 123 1113.

7. Cookie Policy

Our website uses cookies and similar tracking technologies to ensure functional store operations, improve user experience, and analyze site traffic.

Types of Cookies We Use:

  • Strictly Necessary Cookies: Essential for the website to function (e.g., remembering shopping cart items, secure login, and checkout procedures). These do not require user consent.

  • Performance & Analytics Cookies: Collect aggregated, anonymous information on how visitors navigate our store (e.g., pages visited, loading speed). Placed only with your consent via our cookie banner.

  • Functionality Cookies: Remember choices you make (such as language or currency selection) to provide enhanced features.

  • Marketing & Targeting Cookies: Used to track browsing habits across websites to deliver relevant advertisements (placed only with your explicit consent).

Managing Cookies

You can manage or modify your cookie preferences at any time via our store’s cookie management banner or by adjusting your web browser settings to block or delete cookies. Note that blocking essential cookies may impact store functionalities like checkout.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Updated versions will be posted directly on this page with an updated "Last Updated" date.