Privacy Policy
This policy explains what information mediha.art collects through https://mediha.art, why we collect it and how we protect it.
What we collect
- Order details: name, e-mail, phone, delivery and billing address, order contents and amount.
- Account details: if you create an account, your e-mail address, an irreversible hash of your password and your saved addresses.
- Messages: anything you send us through the forms on the site.
- Technical data: IP address, browser type and how you move through the site.
Card details
Your credit and debit card details never reach our servers. Payment is completed on the licensed payment provider's own secure page; we are told only the result of the transaction and the last four digits of the card. We keep those four digits so you can tell which card you paid with.
Why we use it
- To prepare and ship your order and keep you informed about it.
- To produce the sales and accounting records we are legally required to keep.
- To answer your questions and provide the support you ask for.
- To keep the site secure and prevent misuse.
Who we share it with
We do not sell your data. We share it only as far as the service requires, and only with:
- The courier — name, address and phone, so the parcel can be delivered.
- The payment provider — order amount and contact details, so payment can be taken.
- The e-mail provider — so order notifications can be delivered.
- Public authorities — only where the law requires it.
How long we keep it
Order and invoice records are kept for the period required by tax legislation (as a rule 10 years). Account details are kept for as long as your account is open. Messages sent through the contact form are kept for a reasonable period after they are answered.
Security
The site runs over an encrypted connection (HTTPS) end to end. Passwords are stored as irreversible hashes; payment provider keys are stored encrypted and are never shown again in the admin panel.
Your rights
Your rights over your personal data and how to exercise them are set out in detail on the Personal Data Notice page.
Contact
For questions about this policy, write to info@mediha.art.