PRIVACY.

About this notice

Updated 13 September 2026. Owen Marete operates MUTUMA at mutumas.com and is responsible for the personal information described in this notice. For privacy questions or requests, email shopmutuma@gmail.com. See also About MUTUMA.

Information we handle

When you shop or contact us, we handle your name, email, delivery and billing addresses, order contents, selected options, payment references, delivery tracking and messages. Account features also use login and session information. Google sign-in shares the profile information authorised during sign-in, such as your name and email; it does not give us your Google password.

With your analytics permission, our website also collects browsing and technical information, including pages visited, product interactions, referral and campaign information, device category, screen dimensions and performance or error events. Hosting and service providers may process IP addresses and security logs. Currency location services may use your IP address to estimate your country.

Why information is used

We use order, contact and address information to perform our contract with you: taking payment, arranging delivery, supporting orders and handling returns. We use records where needed to meet legal accounting obligations. Security, fraud prevention and resolving disputes may rely on legitimate interests, balanced against your rights.

Newsletter marketing relies on your subscription consent. You can withdraw it using the unsubscribe link or by contacting us. Buying something or signing in with Google does not by itself mean that you have agreed to marketing. Essential order messages are separate from newsletters.

Service providers and payments

Services used by the store include Netlify for hosting and server functions, Supabase for accounts and stored records, Stripe for payments, MailerLite for newsletters and Resend for transactional and contact emails. Google handles Google sign-in when you choose it. Location lookups may use ipapi.co or ipwho.is. Relevant delivery details are shared with fulfilment partners and carriers to deliver your purchase.

Card details are entered with the payment provider. Our order system stores payment references and status, not your full card number or security code. Providers may also handle information for their own legal and security purposes under their privacy notices.

Browser storage and analytics

The site uses browser storage for features including account sessions, cart contents, wishlists, currency preferences and recently viewed products. Optional store analytics uses identifiers and referral information to measure visits and shopping interactions only after you select Allow analytics. You can reject analytics without preventing shopping. Browser settings let you inspect or clear stored data; doing so may sign you out or reset saved preferences.

Use Privacy settings in the footer to change your analytics choice at any time. Rejecting analytics stops future store analytics events and removes its saved session and referral identifiers; it does not delete records already received. Clearing all browser storage resets your choice and we will ask again. Essential hosting security logs and order processing are separate from optional analytics. Contact us with privacy questions. Links to other websites, including social platforms, are governed by those websites' own policies.

Retention and international processing

Information is kept for as long as needed for its purpose, including active orders, support, returns, disputes and applicable tax or accounting obligations. Newsletter details are used while you remain subscribed; a limited suppression record may be needed to respect an unsubscribe request. Account deletion requests may not remove order records that must be retained by law.

Some providers and fulfilment partners may process information outside your country, including outside the UK. Applicable data protection rules may require adequacy decisions, contractual safeguards or another permitted transfer mechanism. Contact us for information about arrangements relevant to your data.

Your choices and rights

Depending on the applicable law, you can request access, correction, deletion, restriction or portability of personal information and object to processing, including direct marketing. You can withdraw consent without affecting processing that was lawful before withdrawal. Some rights have exceptions, for example where records are needed to comply with the law.

Email shopmutuma@gmail.com to make a request. We may need proportionate verification of your identity; please do not send passwords or card details. UK data-rights requests normally require a response within one month, subject to lawful extensions. You can complain to the Information Commissioner's Office or your local data protection authority.

Changes and security

We use access controls and service-provider security features to protect information, but no online system can guarantee absolute security. Please contact us if you suspect unauthorised account activity. We will update this notice when practices change and provide additional notice where required.