Privacy Policy

1. Who We Are

Milk and Honey provides website design, website subscription, and related digital services. Milk and Honey is a sole trader.

For the purposes of UK data protection law, Milk and Honey is the data controller of the personal data covered by this Privacy Policy.

If you have questions about this Privacy Policy or how we handle personal data, contact us at hello@milkandhoney.tech.

2. The Personal Data We Collect

We may collect and process the following personal data:

• Name
• Email address
• Phone number
• Organisation name
• Project details
• Files and content uploaded to us through our website, including images provided for use on a client's website
• Client website content, logos, branding, images, and business information
• Payment-related records such as customer name, email address, invoices, and payment status
• Website usage data collected through Google Analytics (where you have consented to analytics cookies)

3. How We Use Personal Data

We use personal data to:

• Respond to enquiries
• Discuss potential projects or services
• Provide website design and subscription services
• Manage client relationships
• Store and use content supplied to us for client websites
• Process and administer customer records
• Issue invoices and maintain payment records
• Send service-related communications
• Send marketing emails and newsletters where permitted
• Manually follow up enquiries and leads
• Monitor and improve our website through analytics (where consented)
• Keep records for business, legal, tax, and administrative purposes

4. Our Lawful Bases for Processing

We rely on the following lawful bases:

Contract - We use personal data where necessary to take steps at your request before entering into a contract, to provide services you have signed up for, or to manage and perform our agreement with you.

Legitimate Interests - We may use personal data where reasonably necessary for our legitimate business interests, including responding to enquiries, managing client communications, following up leads, maintaining business records, improving our services, and securing and monitoring our systems.

Consent - We rely on consent for marketing emails and newsletters, and for non-essential cookies and analytics tools.

Legal Obligation - We may also use personal data where necessary to comply with legal or regulatory obligations.

5. Payments

Payments are handled entirely by Stripe. We do not store full card payment details ourselves.

However, we do keep related billing and account records, such as customer name, email address, invoices, payment status, and subscription records. These records are used for administration, accounting, and customer management purposes.

6. Marketing

We may send marketing emails and newsletters about our services where you have given consent.

You can unsubscribe from marketing emails at any time, or contact us at hello@milkandhoney.tech to object to marketing. Your right to object to direct marketing is absolute.

7. Cookies and Analytics

We use Google Analytics to help us understand how people use our website and to improve performance and content. Analytics cookies are non-essential and will only be set where you have consented through our cookie banner.

More detail about our use of cookies is set out in our Cookie Policy.

8. Who We Share Personal Data With

We may share personal data with trusted service providers where necessary to run our business and provide our services. This may include:

• Stripe for payment processing
• Google Drive and Google Workspace for file storage, email, and business administration
• Base44 for website and service delivery
• Analytics providers such as Google Analytics (where consented)

9. Data Storage and Security

We store personal data using the systems and tools we use to operate Milk and Honey, including Google Drive, Google Workspace, and Base44. We take reasonable steps to protect personal data from unauthorised access, loss, misuse, or disclosure.

10. How Long We Keep Personal Data

Our general retention approach is:

• Enquiry data: up to 12 months if the enquiry does not become an active client relationship
• Client records, billing records, and service records: up to 6 years after the end of the client relationship
• Marketing data: until consent is withdrawn, you unsubscribe, or we decide it is no longer necessary to keep it
• Uploaded files and client content: for as long as needed to provide the service and manage related records, then in line with our standard retention periods

11. Your Rights

Under UK data protection law, you may have rights including:

• The right to be informed about how your data is used
• The right to access your personal data
• The right to ask for inaccurate data to be corrected
• The right to ask for data to be erased in certain circumstances
• The right to restrict processing in certain circumstances
• The right to object to processing in certain circumstances
• The right to withdraw consent where we rely on consent
• The right to complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, contact hello@milkandhoney.tech.

12. International Transfers

Some of the third-party services we use may store or process data outside the UK. Where that happens, we expect appropriate safeguards to be used in line with data protection law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updated version will be posted on our website with a revised "Last updated" date.

14. Contact

If you have any questions about this Privacy Policy or how we handle personal data, contact:

Milk and Honey

Email: hello@milkandhoney.tech

If you are unhappy with how your personal data has been handled, you may also complain to the Information Commissioner's Office (ICO).