0% Peroxide — gentle on enamel, every time.100% money-back guarantee.0% Peroxide — gentle on enamel, every time.100% money-back guarantee.0% Peroxide — gentle on enamel, every time.100% money-back guarantee.0% Peroxide — gentle on enamel, every time.100% money-back guarantee.0% Peroxide — gentle on enamel, every time.100% money-back guarantee.0% Peroxide — gentle on enamel, every time.100% money-back guarantee.0% Peroxide — gentle on enamel, every time.100% money-back guarantee.0% Peroxide — gentle on enamel, every time.100% money-back guarantee.
Mawlo

Legal

Privacy policy

Last updated: September 2026

Disclaimer — marketplaces

If you purchase through TikTok Shop, Amazon, or third-party marketplaces, please refer to their respective privacy policies for information on how your data is handled.

1. Who we are

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.

We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR). We are also subject to the EU General Data Protection Regulation (EU GDPR) in relation to goods we offer to individuals in the European Economic Area (EEA).

  • We, us, our: ASTRAEON Limited (trading as Mawlo). Contact email: support@mawlo.co.
  • Personal data: any information relating to an identified or identifiable individual.
  • Special category personal data: personal data revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership; genetic and biometric data; data concerning health, sex life or sexual orientation. (We do not collect special category data through this website.)
  • Data subject: the individual who the personal data relates to.

2. Personal data we collect about you

The personal data we collect about you depends on the particular products and services we provide to you. We will collect and use the following personal data:

  • Your name and contact information, including email address, telephone number, and billing/shipping address.
  • Information to check and verify your identity (e.g., date of birth if required for payment verification).
  • Your billing information, transaction and payment card status (processed securely via PCI-DSS compliant providers; we do not store full card numbers).
  • Your order history, purchase history, and saved items.
  • Your contact history with our customer support team.
  • Technical data including IP address, browser type, device information, and website interaction data.

3. How and why we use your personal data

We process your personal data under the lawful bases outlined by the UK GDPR:

  • To fulfil orders and deliver your purchases: performance of our contract with you.
  • To handle payments and prevent fraud: performance of contract and our legitimate interests.
  • To provide customer support and service updates: performance of contract and legitimate interests.
  • To send marketing emails (only with your opt-in consent): consent (freely withdrawable at any time).
  • To comply with legal, tax, and accounting regulations: compliance with legal obligations.

4. Who we share your personal data with

We only share data with trusted service providers who help us operate our store and deliver your orders (such as our 3PL logistics partners, delivery carriers, payment processors, and hosting platforms). All third parties are contractually bound to process data securely and strictly on our instructions.

We do not sell, rent, or trade your personal data to anyone.

5. International transfers

Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

6. How long we keep your personal data

We retain your personal data only for as long as necessary:

  • Order and transaction data is retained for 6 years to satisfy statutory tax and accounting requirements.
  • Marketing data is kept until you unsubscribe or withdraw consent.
  • Customer support records are kept for up to 24 months.

7. Your rights

Under UK and EU GDPR, you have the right to access, rectify, or request erasure of your personal data, restrict or object to its processing, and data portability.

To exercise any of these rights, contact us at support@mawlo.co.

If you have concerns about how we handle your data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies & updates

We use cookies to make our store work and understand browsing trends. You can manage your preferences through our cookie banner. We may update this policy periodically; the latest version will always be available on this page.