Privacy policy

Last updated: 7 July 2026

Mind the Shop ("we", "us") is a UK web design and marketing studio operating at mindtheshop.co.uk. This policy explains, in plain English, what personal information we collect, why, and what your rights are. Questions any time: mindtheshopstudio@gmail.com.

What we collect, and why

When you contact us or book a call — your name, email address, phone number (if you give it) and whatever you write in your message. We use this to reply, to prepare for the call, and to send you a proposal if you ask for one. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries.

When you become a client — the contact, business and billing details needed to deliver the work and invoice you. Lawful basis: performance of a contract, and legal obligations (we keep invoicing records for tax purposes).

When you browse this site — the site runs on Shopify, which sets a small number of essential cookies needed for the site to function and to keep it secure. We do not run advertising cookies. If we add analytics in future, we will update this policy first.

What we never do

We never sell your information, never share it for marketing, and never add you to a mailing list you didn't ask to join.

Who we share information with

Only the services needed to run this business: Shopify (website and form hosting), our email provider, and our accountant where invoices require it. Each processes data only on our instructions. Some providers may store data outside the UK; where they do, transfers are covered by recognised safeguards such as the UK's data-bridge arrangements or standard contractual clauses.

Client data we handle for you

If, during a project, we work inside your systems (for example your customer lists in your email platform), we act as a processor: we access it only to do the agreed work, on your instructions, and we don't take copies. This is also written into our client agreements.

How long we keep things

Enquiries that go nowhere: up to 12 months, then deleted. Client records: for the length of the project plus 6 years, because UK tax law requires it. You can ask us to delete your data sooner wherever the law allows.

Your rights

Under UK GDPR you can ask us to: show you the data we hold about you, correct it, delete it, restrict or object to how we use it, or hand it over in a portable format. Email us and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Changes

If this policy changes, the new version appears here with a new date at the top.