Privacy policy
Draft template — must be reviewed and completed by MDKG (and ideally a legal adviser) before launch.
MDKG Group Ltd (“we”) is the controller of personal data collected through this website. This policy explains what we collect and why, in line with UK GDPR and the Data Protection Act 2018.
What we collect
- Account details: name, email, phone, password (stored as a secure hash).
- Order details: delivery address, items purchased and payment status. Card details are handled by Stripe and never stored by us.
- Enquiries: details you submit via the contact form or the website assistant, including the chat conversation.
- Technical data: essential cookies for your session and basket.
Why we use it
- To process and deliver orders (contract).
- To respond to enquiries you send us (legitimate interests).
- To meet tax and accounting obligations (legal obligation).
Who we share it with
Stripe (payments), our email provider (transactional emails), our hosting provider, and delivery carriers. If you use the website assistant, your messages may be processed by an AI service provider to generate replies.
Your rights
You can request access to, correction or deletion of your data, or object to processing, by emailing mdkggroupltd@gmail.com. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We use only essential cookies needed for sign-in, security and your basket.