Privacy Policy

1. Who is responsible for your information?

mylo ecommerce (“mylo”, “we”, “our” or “us”) is responsible for the personal information described in this policy and acts as the data controller for that information.

Privacy enquiries and requests can be sent to hello@myloecommerce.com.

2. Information we may collect

Depending on how you interact with us, we may collect:

• your name, job title, employer and business contact details;
• information included in emails, WhatsApp messages, WeChat messages or other enquiries;
• details of potential shipments, routes, volumes, commodities and service requirements;
• records of quotations, discussions and business correspondence;
• technical information necessarily processed when the website is delivered, such as IP address, browser type, device information, request logs and security records; and
• information you choose to provide in connection with a business relationship.

Please do not send sensitive personal information or unnecessary identification documents through general website or messaging channels.

3. How we collect information

We may receive information:

• directly from you;
• from your employer, colleague, agent or business partner;
• through email, WhatsApp, WeChat or other communications;
• from suppliers and service partners involved in responding to an enquiry; and
• automatically through hosting, security and server infrastructure needed to operate the website.

4. Why we use personal information

We may use personal information to:

• respond to enquiries and communicate with you;
• understand requirements and prepare or discuss a quotation;
• take steps requested before entering into a contract;
• manage prospective and existing business relationships;
• coordinate with relevant logistics, customs, technology or delivery partners where needed;
• operate, secure, troubleshoot and improve the website;
• prevent fraud, misuse and security incidents;
• keep appropriate business and compliance records; and
• establish, exercise or defend legal rights.

5. Lawful bases

Under UK data protection law, we generally rely on:

• Legitimate interests: to respond to business enquiries, develop and manage business relationships, operate the website, maintain security and protect our rights. We consider whether those interests are balanced against your rights.
• Steps before a contract and performance of a contract: where you ask us to provide information, prepare a quotation or provide agreed services.
• Legal obligation: where we need to retain or disclose information to comply with law, regulation, tax, customs or lawful authority requirements.
• Consent: where consent is specifically requested. You can withdraw consent at any time, although this will not affect prior lawful processing.

6. Who we may share information with

Where reasonably necessary, information may be shared with:

• website hosting, IT, email and security providers;
• WhatsApp, WeChat and other communications providers you choose to use;
• airlines, freight handlers, customs intermediaries, delivery carriers, technology suppliers and other logistics partners relevant to an enquiry or service;
• professional advisers, insurers, auditors and financial service providers;
• public authorities, regulators, law-enforcement bodies or courts where required or permitted by law; and
• a successor or prospective purchaser if the business or relevant assets are transferred, subject to appropriate safeguards.

We do not sell personal information.

7. International processing

Logistics and communications are international by nature. Some service providers or business partners may process information outside the UK. This can include providers of messaging, hosting, cloud, transport and customs services.

Where UK data protection law requires safeguards for an international transfer, we will take reasonable steps to use an appropriate lawful mechanism. Third-party platforms such as WhatsApp and WeChat also process information under their own privacy notices.

8. How long we keep information

We retain information only for as long as reasonably needed for the purpose for which it was collected, including to manage enquiries, maintain business records and meet legal, tax, customs, accounting, insurance or dispute requirements.

General enquiries that do not result in a business relationship will normally be reviewed for deletion within 24 months of the last meaningful contact. Records connected with contracts, transactions, compliance matters or legal claims may be retained for longer where reasonably necessary.

9. Security

We use reasonable organisational and technical measures intended to protect personal information against unauthorised access, loss, misuse or disclosure. No internet transmission or storage system is completely secure, so please use appropriate care when deciding what to send electronically.

10. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

• request access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be deleted;
• ask us to restrict how information is used;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent where processing relies on consent.

These rights are not absolute and legal exemptions may apply. We may need to verify your identity before acting on a request.

11. Complaints

Please contact us first so that we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office (ICO), the UK regulator for data protection.

12. Third-party websites and messaging platforms

This policy applies to information controlled by mylo ecommerce. Links and QR codes may take you to third-party services whose own privacy terms apply. Please review those policies before providing information.

13. Changes to this policy

We may update this policy when our website, services, suppliers or legal obligations change. The version published on this page is the current version.