Legal
Privacy policy
What we collect, why we collect it, how long we keep it, and what you can ask us to do about it.
Last updated: [DATE — TO CONFIRM]. Version 1.0.
Who we are
Milk Technology is a trading name of Milk Technology, a company registered in England and Wales under company number [TO CONFIRM], whose registered office is at [REGISTERED OFFICE ADDRESS — TO CONFIRM].
For the personal data described in this policy we are the data controller. That means we decide what is collected and why. You can contact us about anything in this policy at enquiry@milktechservices.com.
We are not currently required to register a Data Protection Officer, and we have not appointed one. Enquiries come to us directly.
What we collect, and why
We have deliberately kept this short, because we collect very little.
| What | When | Why | Lawful basis | Kept for |
|---|---|---|---|---|
| Your name, email address, organisation and the message you write | When you use the enquiry form or email us | To reply to you and, if it goes further, to provide the service you asked about | Legitimate interests (responding to an enquiry you made), moving to Contract if we work together | 24 months from our last contact, unless you become a client |
| Anonymous information about how the site is used — pages viewed, approximate region, device type | Only if you allow analytics cookies | To understand which pages are useful and improve them | Consent | [RETENTION — depends on the analytics provider chosen] |
| Your cookie preferences | When you answer the cookie banner | So we do not ask you again, and so we honour your choice | Legal obligation (PECR) / strictly necessary | 12 months, then we ask again |
| Your IP address and request details, in server logs | Every visit | Security, abuse prevention and diagnosing faults | Legitimate interests (keeping the site available and secure) | [RETENTION — depends on the host chosen] |
What we do not do
- We do not sell or rent your personal data. Ever, to anyone.
- We do not add enquirers to a marketing list without asking separately.
- We do not use your data to make automated decisions about you, and we do not profile you.
- We do not run advertising trackers or social media pixels on this site.
Who else sees it
We use a small number of suppliers who process data on our behalf. Each is bound by a contract that limits them to acting on our instructions.
- Our website host — [PROVIDER — TO CONFIRM]. Serves the site and keeps server logs.
- Our email provider — [PROVIDER — TO CONFIRM]. Carries and stores enquiry emails.
- Our analytics provider — [PROVIDER — TO CONFIRM]. Only if you have allowed analytics cookies.
We will also disclose data where we are legally required to, for example in response to a valid court order.
Where your data is held
[TO CONFIRM once the host and analytics provider are chosen. If any supplier stores data outside the UK, this section must name the country and the safeguard relied on — normally the UK International Data Transfer Addendum.]
How we keep it safe
The site is served over HTTPS only. Access to enquiry data is limited to people who need it, protected by multi-factor authentication. We keep the number of systems holding personal data deliberately small, because the simplest way to protect data is not to spread it around.
Your rights
Under UK GDPR you have the right to:
- ask what we hold about you, and get a copy (a subject access request);
- have inaccurate data corrected;
- have your data erased, where we have no overriding reason to keep it;
- restrict or object to how we use it, including objecting to anything we do on the basis of legitimate interests;
- receive the data you gave us in a portable format;
- withdraw consent at any time, where consent is what we relied on — this does not affect anything done before you withdrew it.
Email enquiry@milktechservices.com and we will respond within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
If we change how we use personal data we will update this page and change the version number at the top. Where the change is significant, we will ask for your cookie preferences again rather than assume the old answer still applies.