1. INTRODUCTION
This privacy notice provides you with details of how I collect and process your personal data through your use of my website www.MaheshaRice.com.
By providing me with your data, you warrant that you are over 13 years of age.
I, Mahesha Rice, trading as Mahesha Rice, am the data controller and am responsible for your personal data (referred to as “I,” “me,” or “my” in this privacy notice).
Contact Details
My full details are:
- Full name of legal entity: Mahesha Rice
- Email address: mahesha@mahesharice.com
- Postal address: 22 Hawthorn Way, Hellingly, East Sussex, BN27 4FQ, UK
It is very important that the information I hold about you is accurate and up to date. Please let me know if, at any time, your personal information changes by emailing me at mahesha@mahesharice.com.
2. WHAT DATA DO I COLLECT ABOUT YOU, FOR WHAT PURPOSE, AND ON WHAT GROUND I PROCESS IT
Personal data means any information capable of identifying an individual. It does not include anonymised data.
I may process the following categories of personal data about you:
-
Communication Data: Any communication you send to me, whether via contact forms, email, text, social media messaging, or posting. I process this data to communicate with you, keep records, and for legal claims. My lawful ground for this processing is my legitimate interests, which include replying to your communications, keeping records, and establishing, pursuing, or defending legal claims.
-
Customer Data: Data related to purchases of goods/services such as your name, billing address, email address, phone number, purchase details, and card details. I process this data to fulfill the goods and services you have purchased. My lawful ground for this processing is the performance of a contract between us or steps taken at your request to enter into such a contract.
-
User Data: Data on how you use my website and online services, along with any data you post on my website. I process this data to operate my website, ensure relevant content is provided, and maintain security. My lawful ground for this processing is my legitimate interests in administering the website and my business.
-
Technical Data: Data about your use of my website and online services such as IP address, login data, browser details, and navigation paths. This data is processed to analyze your use of my website, administer and protect my business, and measure advertising effectiveness. My lawful ground for this processing is my legitimate interests in administering the website and growing my business.
-
Marketing Data: Data about your preferences in receiving marketing communications. I process this data to enable you to take part in promotions and deliver relevant content. My lawful ground for this processing is my legitimate interests in developing my business and deciding my marketing strategy.
I may also use Customer Data, User Data, Technical Data, and Marketing Data to deliver relevant content and advertisements to you. My lawful ground for this processing is my legitimate interests in growing my business.
Sensitive Data
Sensitive data includes details about race, ethnicity, religious beliefs, health, and other sensitive personal matters. I do not collect any sensitive data unless it is necessary for delivering the services (e.g., medical conditions or medication details).
If sensitive data is needed, I will request your explicit consent to process it.
3. HOW I COLLECT YOUR PERSONAL DATA
I may collect data about you directly when you provide it, such as when you fill out forms on my website or send me emails. I may also automatically collect data through the use of cookies and similar technologies. For more details on this, please refer to my [Cookie Policy].
Additionally, I may receive data from third parties such as:
- Analytics providers (e.g., Google Analytics)
- Advertising networks (e.g., Facebook)
- Payment and delivery services
- Publicly available sources (e.g., Companies House)
4. MARKETING COMMUNICATIONS
I process your personal data for marketing communications based on either your consent or my legitimate interests (namely, growing my business).
I may send you marketing communications if you have made a purchase or requested information from me. You can opt-out of marketing communications at any time by following the opt-out links in any marketing emails or by emailing me at mahesha@mahesharice.com.
If you opt-out of marketing communications, this will not affect personal data provided in relation to purchases, warranty registrations, etc.
Before sharing your personal data with any third party for their marketing purposes, I will obtain your express consent.
5. DISCLOSURES OF YOUR PERSONAL DATA
I may share your personal data with:
- Service providers (IT and system administration services)
- Professional advisers (lawyers, auditors, etc.)
- Regulatory authorities (government bodies, tax authorities)
I will only allow third parties to process your personal data for specific purposes and in accordance with my instructions.
6. INTERNATIONAL TRANSFERS
I may transfer your personal data to countries outside the UK or EU, including service providers in the US or other countries. I will ensure appropriate safeguards are in place for such transfers, such as using providers that are part of privacy frameworks approved by UK/EU regulators or specific contractual clauses to ensure data protection.
You have the right to withdraw consent for such transfers at any time.
7. DATA SECURITY
I take security seriously and have put measures in place to protect your personal data from accidental loss or unauthorized access. Only employees or partners with a business need to know will have access to your data, and they must keep it confidential.
In case of a data breach, I will notify you and any applicable regulator if required by law.
8. DATA RETENTION
I will retain your personal data for no longer than is necessary for the purposes for which it was collected. In particular:
- Customer Data: I will retain basic information (e.g., name, contact details, and transaction data) for a period of six years after the last transaction, in compliance with legal obligations, such as tax laws.
- Marketing Data: I will retain marketing preferences and communication records for as long as you remain a subscriber to marketing communications or until you request to opt-out.
- Sensitive Data: I will only retain sensitive data for as long as necessary to provide services, after which it will be securely deleted.
In some cases, I may anonymize personal data for research or statistical purposes, in which case I may use this information indefinitely without further notice to you.
9. YOUR LEGAL RIGHTS
Under data protection laws, you have the right to:
- Access your personal data
- Correct your personal data
- Erase your personal data
- Restrict or object to processing
- Transfer your personal data
- Withdraw consent (where applicable)
If you wish to exercise any of these rights, please email me at mahesha@mahesharice.com.
If you are not happy with how I process your data, you can lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or your local data protection authority.
10. THIRD-PARTY LINKS
My website may contain links to third-party websites. I am not responsible for the privacy practices of these external sites. When leaving my website, I encourage you to read their privacy policies.
11. COOKIES
You can set your browser to refuse all or some browser cookies or alert you when websites set or access cookies. If you disable cookies, some parts of my website may not function properly. For more information on the cookies I use, please refer to my [Cookie Policy].