GDPR   Privacy Policy 

Effective Date: 3-3-2025
Last Updated: 3-3-2025

1. Introduction 

Welcome to htpps://midnitemother.com ("we," "our," "us"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, store, and protect your information when you visit our website https://midnitemother.com (the "Website"). This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK laws.

2. Information We Collect 

We may collect and process the following types of personal data:

Personal Identification Information: Name, email address, phone number, postal address, etc.

 Technical Data: IP address, browser type, operating system, device information, and browsing behavior.

 Cookies and Tracking Data: Information collected through cookies and similar technologies (see our Cookie Policy below).

 Payment Information: If you make a purchase, we may collect payment details, such as credit card information, which are processed securely by our payment processors.

 User-Generated Content: Any information you voluntarily provide, such as comments, reviews, or messages.

 3. How We Use Your Information

We use your personal data for the following purposes: 

To provide and maintain our Website and services.

To process transactions and send order confirmations.

 To communicate with you, including responding to inquiries and sending updates.

To improve our Website, services, and user experience.

To comply with legal obligations and enforce our terms and conditions.

For marketing purposes, where you have provided consent.

 4. Legal Basis for Processing
 
Under the UK GDPR, we rely on the following legal bases for processing your personal data: 

Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., marketing emails).

Contractual Necessity: To fulfill a contract with you (e.g., processing an order).

Legal Obligation: To comply with legal requirements (e.g., tax or fraud prevention).

Legitimate Interests: For our legitimate business interests, provided your rights and interests do not override these (e.g., improving our services).

 5. Sharing Your Information 

We do not sell your personal data. However, we may share your information with: 

Service Providers: Third-party vendors who assist us in operating our Website, processing payments, or delivering services.

Legal Authorities: When required by law or to protect our rights and safety.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

 6. International Data Transfers 

If we transfer your data outside the UK or the European Economic Area (EEA), we will ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adherence to international frameworks like the UK-US Data Bridge. 

7. Data Retention 

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Retention periods may vary depending on the type of data and its use. 

8. Your Rights Under the UK GDPR 
You have the following rights regarding your personal data: 

Access: Request a copy of the data we hold about you.

Rectification: Request correction of inaccurate or incomplete data.

Erasure: Request deletion of your data under certain conditions.

Restriction: Request restriction of processing under certain conditions.

Data Portability: Request transfer of your data to another organization.

Objection: Object to processing based on legitimate interests or for direct marketing.

Withdraw Consent: Withdraw consent at any time, where applicable.

To exercise these rights, please contact us at [Insert Contact Email]. We will respond within one month. 

9. Security 

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. However, no internet transmission is completely secure, and we cannot guarantee absolute security. 

10. Cookies Policy What Are Cookies? 

Cookies are small text files stored on your device when you visit our Website. They help us improve your browsing experience and provide personalized services. 

Types of Cookies We Use 

Essential Cookies: Necessary for the Website to function (e.g., login, shopping cart).

Analytics Cookies: Help us understand how visitors use our Website.

Marketing Cookies: Used to deliver relevant ads and track campaign performance.

 Managing Cookies 

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Website. 
For more information, please see our Cookie Policy or visit All About Cookies. 

11. Third-Party Links 

Our Website may contain links to third-party websites. We are not responsible for their privacy practices or content. Please review their privacy policies before providing any personal data. 

12. Children's Privacy 

Our Website is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately. 

 13. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. 

14. Contact Us 

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: Email: [email protected]