Privacy policy

Last updated: 2 September 2026

Mind the Shop ("we", "us") is a UK web design and marketing studio operating at mindtheshop.co.uk. This policy explains, in plain English, what personal information we collect, why, and what your rights are. Questions any time: andrea@mindtheshop.co.uk.

What we collect, and why

When you contact us or book a call — your name, email address, phone number (if you give it) and whatever you write in your message. We use this to reply, to prepare for the call, and to send you a proposal if you ask for one. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries.

When you become a client — the contact, business and billing details needed to deliver the work and invoice you. Lawful basis: performance of a contract, and legal obligations (we keep invoicing records for tax purposes).

When you browse this site — see the cookies section below.

Cookies and tracking

This site uses three kinds of cookie and similar technology.

1. Essential. The site runs on Shopify, which sets a small number of cookies needed to make pages work, remember your cookie choices, and keep the site secure. These are always on, because the site cannot function without them. Lawful basis: legitimate interest — they are strictly necessary, so no consent is required.

2. Analytics — Google Analytics 4. We use Google Analytics, connected through Shopify's Google & YouTube channel, to see how many people visit, which pages they read, roughly where in the world they are, and which of our marketing brought them here. It also records a small number of events we have set up, such as when someone books a call or submits an enquiry. We use this to work out which pages and campaigns are worth keeping. Lawful basis: your consent.

3. Advertising — Pinterest. We run ads on Pinterest, and the Pinterest tag (installed through Shopify's Pinterest app) tells Pinterest when someone who saw or clicked one of our ads later visited the site. Pinterest may also use this to show our ads to people with similar interests. Lawful basis: your consent.

Analytics and advertising cookies only load if you accept them. When you first arrive you will see a cookie banner; nothing beyond the essential cookies runs until you choose. You can change your mind at any time using the Cookie preferences link at the bottom of every page, and you can also block or delete cookies in your browser settings.

We do not use cookies to build profiles of individuals, and we do not run cookies from any advertising network other than the two named above. If that changes, this policy will be updated before the change goes live.

What we never do

We never sell your information, never share it for someone else's marketing, and never add you to a mailing list you didn't ask to join.

Who we share information with

Only the services needed to run this business: Shopify (website and form hosting), Google (analytics and advertising), Pinterest (advertising), our email provider, our scheduling tool for booked calls, and our accountant where invoices require it. Each processes data only on our instructions, except Google and Pinterest, which act as independent controllers for parts of what they collect — their own privacy policies apply alongside this one.

Some of these providers store data outside the UK, mainly in the United States. Where they do, transfers are covered by recognised safeguards such as the UK–US data bridge or the UK addendum to standard contractual clauses.

Client data we handle for you

If, during a project, we work inside your systems (for example your customer lists in your email platform), we act as a processor: we access it only to do the agreed work, on your instructions, and we don't take copies. This is also written into our client agreements.

How long we keep things

Enquiries that go nowhere: up to 12 months, then deleted. Client records: for the length of the project plus 6 years, because UK tax law requires it. Analytics and advertising data: held by Google and Pinterest for the retention periods set in those accounts; we do not keep a separate copy. You can ask us to delete your data sooner wherever the law allows.

Your rights

Under UK GDPR you can ask us to: show you the data we hold about you, correct it, delete it, restrict or object to how we use it, or hand it over in a portable format. Where we rely on your consent — as we do for analytics and advertising cookies — you can withdraw it at any time, and doing so doesn't affect anything done before you withdrew it. Email us and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Changes

If this policy changes, the new version appears here with a new date at the top.