Last updated: 2 June 2026

You have rights over your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page sets out what those rights are, how to use them, and how to contact us or the regulator.

For background on what personal data we hold and why, please read our Privacy Policy first.

Your rights

You have the following rights. Some apply only in certain situations — we have explained where that is the case.

1. The right to be informed

You have the right to know what personal data we collect about you, why, and what we do with it. Our Privacy Policy is how we provide this information.

2. The right of access

You can ask us for a copy of the personal data we hold about you. This is sometimes called a "subject access request". We will respond within one calendar month. The first request is free.

3. The right to rectification

If any of the data we hold about you is inaccurate or incomplete, you can ask us to correct it. You can also update most of your details yourself by logging into your account.

4. The right to erasure

You can ask us to delete the personal data we hold about you. We will do so, except where we are legally required to keep certain records — for example, order and payment records that HMRC requires us to retain for six years.

5. The right to restrict processing

In some cases you can ask us to limit how we use your data — for example, while we look into a dispute about its accuracy.

6. The right to data portability

Where we process your data based on your consent or to perform a contract with you, you can ask for a copy in a structured, commonly used, machine-readable format, or ask us to send it to another service.

7. The right to object

You can object to your data being used for direct marketing at any time, and we will stop. You can also object to other types of processing in some situations.

8. Rights related to automated decision-making

We do not make decisions about you based on automated processing alone (for example, automated profiling that has a legal or similarly significant effect on you). If that ever changes, you would have the right to ask for a human review.

Marketing and consent

If you have given consent for marketing (for example, signing up for email updates), you can withdraw that consent at any time:

• Click "unsubscribe" at the bottom of any marketing email we send.
• Or email nichimichiltd@outlook.com with "unsubscribe" in the subject line.

Withdrawing consent does not affect the lawfulness of any processing we did before you withdrew it.

How to make a request

Email nichimichiltd@outlook.com with:

1. Which right you want to exercise (for example, "I would like a copy of my data").
2. The email address you use with us, and any order numbers if you have them.
3. Enough information for us to verify you are the person the data is about. We may ask for additional ID if we cannot verify you from the data we already hold — this is to protect you against someone else trying to access your information.

We will respond within one calendar month. If the request is complex, we may extend by up to two further months and will tell you why.

Children

Our shop is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

How long we keep your data

• Order, payment, and tax records: 6 years (required by HMRC).
• Customer account data: until you ask us to delete the account, or after 3 years of inactivity, whichever comes first.
• Marketing consent records: until you withdraw consent, plus a short period after to evidence the withdrawal.
• Cookie consent choices: stored locally in your browser until you clear them.

Complaints

If you are not happy with how we have handled your data or your request, please tell us first — we want to put it right. Email nichimichiltd@outlook.com.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/make-a-complaint/
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Data controller

NichiMichi Ltd is the data controller for the personal data we collect through this website.

Changes to this page

We may update this page from time to time. The version that applies to your order or your use of the site is the one published at the time you placed the order or used the site. We will refresh the ‘Last updated’ date at the top whenever we make changes. Material changes will be flagged on the homepage so they are easy to spot.

NichiMichi Ltd is a company registered in England and Wales (company number 17219894). Registered office: 66 Paul Street, London EC2A 4NA. Contact email: nichimichiltd@outlook.com.