Privacy Policy | The Mini Mall

1. Who We Are

The Mini Mall operates from Unit 16-18, Merrion Centre, Leeds, LS2 8DB. We are the data controller for personal information collected through this website and our booking system. Contact: hello@theminimall.co.uk

2. Data We Collect

We collect: (a) Identity data — full name, brand name, Instagram handle; (b) Contact data — email address; (c) Financial data — Nominated Bank Account Name, Account Number, Sort Code (for outbound vendor payouts only); (d) Compliance data — Public Liability Insurance documents, VAT registration numbers; (e) Technical data — IP address, browser type, cookies, analytics identifiers; (f) Transaction data — booking details, payment records processed via Stripe.

3. How We Use Your Data

Your data is used to: process bookings and payments; verify vendor eligibility and compliance; execute 14-day batch bank transfer payouts to vendors; send operational communications (booking confirmations, load-in reminders, POS onboarding); improve our platform using aggregated analytics data; comply with UK tax and legal obligations.

4. Bank Details & Financial Data

Bank details (Account Name, Number, Sort Code) are stored securely in our database solely for the purpose of processing vendor payouts. This data is accessed exclusively by authorised finance personnel. We do not share this data with third parties beyond our payment processing workflow. This data is retained for 7 years in compliance with HMRC record-keeping requirements.

5. PLI Document Storage

Public Liability Insurance documents are uploaded and stored securely. These documents are reviewed by management for compliance purposes and are retained for the duration of your tenancy plus 12 months.

6. Stripe & Payment Processing

Payments are processed by Stripe, Inc. Your payment card details are transmitted directly to Stripe and are never stored on our servers. Stripe's privacy policy is available at stripe.com/privacy. We receive transaction confirmation and metadata from Stripe for record-keeping purposes.

7. Analytics & Marketing

We use Google Analytics (GA4) and Meta Pixel to measure website traffic and advertising performance. These services use cookies to track user behaviour anonymously. You can opt out of analytics tracking by declining cookies via our cookie consent banner or by using browser opt-out tools.

8. Your Rights Under UK GDPR

You have the right to: access a copy of your personal data; correct inaccurate data; request deletion (subject to legal retention obligations); restrict or object to processing; data portability; withdraw consent at any time. To exercise these rights, contact hello@theminimall.co.uk.

9. Data Retention

Booking records are retained for 7 years. Bank details are retained for 7 years (HMRC compliance). PLI documents are retained for the tenancy period plus 12 months. Marketing data is retained until you unsubscribe or request deletion.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email. Continued use of our platform after changes constitutes acceptance.