PRIVACY POLICY

1. INTRODUCTION

1.1 Moccus Ltd ("we", "us", or "our") is committed to protecting your privacy and personal data.

1.2 This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website and mobile applications (the "Platform").

1.3 Moccus Ltd is the data controller for the purposes of data protection law. Our registered office is at 1 Market Place, Castle Cary, BA7 7AH. Company number: 17151168.

2. INFORMATION WE COLLECT

We collect the following types of information:

2.1 Information You Provide to Us

• Account information: name, email address, password, phone number (if provided)
• Delivery information: delivery address, delivery instructions
• Payment information: handled securely by our payment processor, Stripe (we do not store full card details)
• Order history and preferences
• Communications with us (emails, support messages)

2.2 Information We Collect Automatically

• Device and browser information (device type, operating system, browser type)
• Usage data (pages visited, features used, time spent on Platform, buttons clicked)
• Location data (approximate city-level location based on IP address for delivery purposes)
• Cookies and similar technologies (see Section 7)

2.3 Information from Third Parties

• Payment confirmation from Stripe
• Delivery status updates from courier services

3. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

3.1 To Provide Our Services

• Process and fulfill your orders
• Arrange delivery of products
• Process payments
• Communicate with you about your orders
• Provide customer support

3.2 To Improve Our Platform

• Analyze usage patterns and user behavior
• Improve Platform functionality and user experience
• Develop new features and services

3.3 To Communicate With You

• Send order confirmations and delivery updates (essential communications)
• Send marketing emails about new farmers, products, and offers (only if you opt in)
• Respond to your inquiries and requests

3.4 For Legal and Security Purposes

• Comply with legal obligations
• Prevent fraud and abuse
• Enforce our Terms and Conditions
• Protect the rights and safety of Moccus, our users, and others

4. LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases:

4.1 Performance of Contract: Processing necessary to fulfill our contract with you (e.g., processing orders, delivery)

4.2 Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Platform, preventing fraud, and ensuring security

4.3 Consent: Processing based on your explicit consent, such as marketing emails (you can withdraw consent at any time)

4.4 Legal Obligation: Processing necessary to comply with legal requirements

5. SHARING YOUR INFORMATION

We share your personal information only in the following circumstances:

5.1 With Farmers: We share your order details (products ordered, delivery address, contact information) with the Farmers fulfilling your order so they can harvest and prepare your products.

5.2 With Service Providers:

• Stripe (payment processing)
• Courier services (delivery)
• Email service providers (order confirmations, marketing emails if consented)
• Analytics providers (e.g., Google Analytics, if you consent to cookies)
• Hosting and infrastructure providers

5.3 For Legal Reasons: We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

5.4 Business Transfers: If Moccus is acquired or merged with another company, your information may be transferred to the new owner.

We do not sell your personal data to third parties.

6. DATA RETENTION

6.1 We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy.

6.2 Active users: We keep your data indefinitely while your account is active.

6.3 Inactive users: If you have not used the Platform for 2-3 years, we may delete your account and associated data, unless we are required to retain it for legal or regulatory purposes.

6.4 Order data: We retain transaction records for at least 7 years for tax and accounting purposes.

6.5 You can request deletion of your data at any time (see Section 9).

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance your experience on the Platform.

7.1 Cookie consent

We use CookieYes to manage cookie consent. You can change your cookie preferences at any time by clicking "Cookie Settings" in the website footer.

7.2 Types of cookies

• Essential cookies: Necessary for the Platform to function. These include session management, security, and load balancing. No consent is required for these cookies.
• Analytics cookies: We use Google Analytics to understand how visitors use our Platform. These cookies collect anonymous data about pages visited, time on site, and user journeys. They require your consent.
• Marketing cookies: If we use them, they help show you relevant advertisements and require your consent. You can control these through the cookie banner.

7.3 Managing cookies

• Change preferences: use "Cookie Settings" in the footer to reopen the consent banner at any time.
• Browser settings: you can also block or delete cookies through your browser.
• Industry tools: for additional controls over interest-based advertising, see youronlinechoices.com (UK).

7.4 Cookie policy

For a detailed list of the cookies we use, see the Cookie Policy linked in the website footer (including the CookieYes-generated policy where we provide it).

8. YOUR RIGHTS

Under data protection law, you have the following rights:

8.1 Right to Access: Request a copy of the personal data we hold about you.

8.2 Right to Rectification: Request correction of inaccurate or incomplete data.

8.3 Right to Erasure: Request deletion of your personal data (subject to legal obligations).

8.4 Right to Restrict Processing: Request that we limit how we use your data.

8.5 Right to Data Portability: Request a copy of your data in a machine-readable format.

8.6 Right to Object: Object to processing based on legitimate interests or for marketing purposes.

8.7 Right to Withdraw Consent: Withdraw consent for marketing emails or cookie usage at any time.

To exercise any of these rights, please contact us at moccus.io@gmail.com.

9. DATA SECURITY

9.1 We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

9.2 However, no method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

10. INTERNATIONAL TRANSFERS

10.1 Your personal data is primarily stored and processed within the UK and European Economic Area (EEA).

10.2 Some of our service providers (e.g., hosting, analytics) may process data outside the EEA. We ensure that appropriate safeguards are in place for such transfers.

11. CHILDREN'S PRIVACY

11.1 The Platform is not intended for use by anyone under the age of 18.

11.2 We do not knowingly collect personal data from children under 18. If we become aware that we have collected such data, we will delete it promptly.

12. CHANGES TO THIS PRIVACY POLICY

12.1 We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

12.2 We will notify you of material changes by email or by posting a notice on the Platform.

12.3 Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. CONTACT US

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: moccus.io@gmail.com
Address: Moccus Ltd, 1 Market Place, Castle Cary, BA7 7AH

Company Number: 17151168

For data protection queries, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk.