Legal
Privacy policy
What we collect, why we collect it, how long we keep it, and what you can ask us to do about it.
Last updated: 26 August 2026. Version 1.1.
Who we are
Milk Technology is a trading name of Milk Technology Ltd, a company registered in England and Wales under company number 17389344, whose registered office is at 10, Hawthorn Road, Bromsgrove, England, B61 0EN.
For the personal data described in this policy we are the data controller. That means we decide what is collected and why. You can contact us about anything in this policy at enquiry@milktechservices.com.
We are not currently required to register a Data Protection Officer, and we have not appointed one. Enquiries come to us directly.
What we collect, and why
We have deliberately kept this short, because we collect very little.
| What | When | Why | Lawful basis | Kept for |
|---|---|---|---|---|
| Your name, email address, organisation and the message you write | When you use the enquiry form or email us | To reply to you and, if it goes further, to provide the service you asked about | Legitimate interests (responding to an enquiry you made), moving to Contract if we work together | 24 months from our last contact, unless you become a client |
| Anonymous information about how the site is used — pages viewed, approximate region, device type | Only if you allow analytics cookies | To understand which pages are useful and improve them | Consent | [RETENTION — depends on the analytics provider chosen] |
| Your cookie preferences | When you answer the cookie banner | So we do not ask you again, and so we honour your choice | Legal obligation (PECR) / strictly necessary | 12 months, then we ask again |
| Your IP address and request details, in server logs | Every visit | Security, abuse prevention and diagnosing faults | Legitimate interests (keeping the site available and secure) | [RETENTION — depends on the host chosen] |
What we do not do
- We do not sell or rent your personal data. Ever, to anyone.
- We do not add enquirers to a marketing list without asking separately.
- We do not use your data to make automated decisions about you, and we do not profile you.
- We do not run advertising trackers or social media pixels on this site.
Who else sees it
We use a small number of suppliers who process data on our behalf. Each is bound by a contract that limits them to acting on our instructions.
- Cloudflare, Inc. — hosts and serves this website, and provides its security and content delivery network. Keeps short-lived request logs, which include IP addresses.
- Resend (Plus Five Five, Inc.) — delivers the message you send through our enquiry form to our mailbox. We use their EU region, in Ireland.
- Fasthosts Internet Limited — provides our email service in the United Kingdom, and stores the enquiries we receive.
- Analytics — we do not currently use any analytics provider, and no analytics cookies are set. If that changes we will name the provider here and ask your permission before anything is enabled.
We will also disclose data where we are legally required to, for example in response to a valid court order.
Where your data is held
Your enquiry is stored in our email system in the United Kingdom. The service that delivers it from the website to that mailbox runs in the European Union (Ireland), which the UK recognises as providing an adequate level of protection.
Our website host operates a global network, so a request from your browser is served by whichever of their locations is nearest to you, and their request logs may therefore be processed outside the UK. Where that happens it is covered by the International Data Transfer Addendum to the European Commission’s standard contractual clauses, which is part of the contract we hold with them.
How we keep it safe
The site is served over HTTPS only. Access to enquiry data is limited to people who need it, protected by multi-factor authentication. We keep the number of systems holding personal data deliberately small, because the simplest way to protect data is not to spread it around.
Your rights
Under UK GDPR you have the right to:
- ask what we hold about you, and get a copy (a subject access request);
- have inaccurate data corrected;
- have your data erased, where we have no overriding reason to keep it;
- restrict or object to how we use it, including objecting to anything we do on the basis of legitimate interests;
- receive the data you gave us in a portable format;
- withdraw consent at any time, where consent is what we relied on — this does not affect anything done before you withdrew it.
Email enquiry@milktechservices.com and we will respond within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change how we use personal data we will update this page and change the version number at the top. Where the change is significant, we will ask for your cookie preferences again rather than assume the old answer still applies.