Privacy Policy

Effective Date: [01/03/2025]

At www.midtone.co.uk we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and store your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable laws.

1. Who We Are

Midtone Ltd

Website: www.midtone.co.uk

Email: info@midtone.co.uk

Address: Unit 16 - Douglas Road Industrial Park, Kingswood, Bristol, BS158PD

We are the data controller responsible for your personal data collected via this website.

2. Information We Collect

We may collect and process the following types of personal data:

a. Information You Provide Directly:

• Full name
• Email address
• Shipping and billing addresses
• Phone number
• Payment details (processed securely via third-party providers)
  

b. Automatically Collected Data:

• IP address
• Browser type and version
• Time zone setting
• Device type

Website usage (pages visited, time spent, referring site)

c. Cookies & Similar Technologies:

We use cookies and similar technologies to improve your shopping experience. See our Cookie Policy for more details.

3. How We Use Your Data

We use your data to:

• Process and deliver orders
• Manage payments and prevent fraud
• Provide customer service and support
• Send updates about your orders
• Offer marketing communications (only with your consent)
• Improve our website and services
• Comply with legal obligations
  

Legal Bases for Processing:

We rely on the following legal grounds:

Performance of a contract (e.g. order fulfillment)

Consent (e.g. email marketing)

Legitimate interests (e.g. improving services)

Legal obligation (e.g. for tax or accounting purposes)

4. How We Share Your Information

We never sell your data. We may share it with trusted third parties including:

• Payment processors (e.g. Stripe, PayPal, Shopify)
• Shipping carriers
• Customer support platforms
• Email and marketing platforms (e.g. Mailchimp, Klaviyo)
• Website analytics tools (e.g. Google Analytics)
  
  

All third-party processors act under our instruction and are bound by data protection agreements.

5. International Transfers

Some of our service providers may process your data outside the UK. Where this occurs, we ensure your data is protected through appropriate safeguards, such as Standard Contractual Clauses (SCCs).

6. Data Retention

We retain your personal data only as long as necessary for the purposes it was collected—usually up to 7 years for financial data, in line with HMRC requirements, and shorter for marketing preferences (until consent is withdrawn).

7. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Withdraw consent at any time (for marketing)
• Request data portability
  
  

To exercise any of these rights, contact us at info@midtone.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk.

8. Security

We take data security seriously and implement measures such as encryption, secure servers, and access controls to protect your personal data.

9. Changes to This Policy

We may update this policy from time to time. The most current version will always be posted on our website with the effective date.

10. Contact Us

If you have any questions about this Privacy Policy or your data, please get in touch:

Email: info@midtone.co.uk