Privacy Policy
What information we collect, why, and how we look after it.
Last updated: 18 October 2026
This website is run by Erica, trading as Mimi Joi, Bradford. Mimi Joi is responsible (the "data controller") for the personal information collected through this site.
1. What data we collect
- WhatsApp enquiries, your phone number, the content of your messages, and any photos you send us.
- Online shop checkout, your name, delivery address, email address, phone number (if you give one), and what you ordered. Card payments are taken by Square, our payment processor; your card details go straight to Square and we never see or store them.
- Therapeutic Art Classes page, this page is informational only. There's no booking form here, so no personal data is collected through it.
2. Who we share it with
- Square (part of Block, Inc.) processes card payments, including fraud checks, under its own privacy notice: squareup.com privacy notice (opens in a new tab).
- Evri, our courier, receives your name and delivery address so it can deliver your order.
- WhatsApp (Meta) processes messages sent to us through it, under its own privacy policy.
- Google Fonts: the site loads its fonts from Google, so your browser's IP address is sent to Google when pages load.
We don't use Google Analytics, advertising pixels or any other third-party analytics or ad-tracking tools, and we never sell your data.
Visit counts. To see how many people visit and which pages and links are useful, our own server counts page views and clicks (for example on “Add to basket” or WhatsApp). So that each person is counted once, your browser keeps a random code (na_uid, in your browser's local storage) for up to 13 months. It is used only for these overall counts: it holds no name, contact details or IP address, isn't used for advertising and is never shared. The counts stay on our own server and are kept for up to 13 months.
You can opt out at any time: stop counting my visits. This removes the code from your browser and leaves your visits out from then on.
3. Cookies
We don't use advertising cookies. Our shop runs on WooCommerce, which sets these cookies:
- Basket and checkout cookies (
woocommerce_cart_hash,woocommerce_items_in_cart,wp_woocommerce_session_*): keep your basket and checkout working. These are essential and last up to 2 days. - Order attribution cookies (
sbjs_*): a WooCommerce feature that records how you arrived at our site (for example, the website or search that sent you, and the pages you visited during the visit) so we can see which links lead to orders. They're first-party cookies that only work on this site; they don't follow you around other websites, and the information is stored with your order only if you buy something. They are short-lived and expire soon after your visit ends. - Square may set its own cookies on the checkout page to process your payment securely and prevent fraud.
You can block or delete cookies in your browser settings, but the basket and checkout won't work without the essential ones.
4. How long we keep your data, and your rights
We keep WhatsApp messages and order records for as long as reasonably needed to handle your enquiry or order, including a reasonable period afterwards for handmade/made-to-order items in case of a warranty or dispute query, and for as long as the law requires us to keep sales records. Under UK GDPR, you have the right to ask what personal data we hold about you, to ask us to correct it, and to ask us to delete it, just message us to make a request.
If you're unhappy with how we've handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint (opens in a new tab) or 0303 123 1113.
5. Contact us
You can email us at mimijoishoponline@gmail.com or reach us on WhatsApp: message us here (opens in a new tab). Mimi Joi is based in Bradford, West Yorkshire, serving the UK.