Privacy policy

Who we are

Mint Choc Media Ltd is a company registered in England and Wales, company number 14391808, with its registered office at 167-169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.

For the personal data described in this policy we are the controller, unless we are processing personal data on behalf of a client, in which case the client is the controller and our Data Processing Addendum applies.

Contact: robert@mintchocmedia.com. We are registered with the Information Commissioner's Office and pay the data protection fee.

Information we collect

We collect only what we need. Depending on how you interact with us, that may include:

Information you give us

• name and business name
• business website
• email address, and telephone number where you provide one
• the content of enquiries, applications and qualification responses
• billing information taken at checkout
• information supplied during service delivery, including advertising and ecommerce account access
• your marketing preferences

Information collected automatically

• IP address
• device and browser information
• cookie and similar identifiers
• pages viewed and general website usage

Automatically collected information beyond what is strictly necessary is subject to your cookie choices. See our Cookie Policy.

How we obtain it

Through this website and its forms, through the qualification step before purchasing an Audit, at checkout, through application forms, through direct correspondence such as email and calls, and through cookies and similar technologies where you have permitted them.

Where you engage us for services, we also receive information through access you grant us to your own advertising and ecommerce platforms.

Why we use it, and our lawful basis

We do not rely on consent for everything. The basis depends on the purpose.

Responding to enquiries and assessing fit

Legitimate interests, being our interest in responding to people who contact us and in establishing whether we can help. Where you are asking us to take steps before entering a contract, that basis applies instead.

Processing purchases and delivering services

Performance of a contract, or steps taken at your request before entering one.

Billing, accounting and record keeping

Legal obligation, and legitimate interests in running the business properly.

Security, fraud prevention and protecting our systems

Legitimate interests.

Website analytics and improvement

Consent, where analytics technologies require it.

Direct marketing

Consent where you opt in through this website. Legitimate interests may apply to limited business-to-business communications with corporate subscribers, and you can object at any time.

Marketing, and what is not marketing

Promotional marketing is optional and separate from everything else. Buying an Audit, submitting an enquiry, applying for a service or accepting our terms does not subscribe you to marketing. We do not pre-tick marketing boxes.

Service communications are different. Order confirmations, requests for access, delivery of findings, project correspondence, billing and important contractual or security notices are necessary to the work and are not affected by marketing choices.

See Marketing Preferences to change your choices.

Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy. Where consent is required, non-essential technologies are not used until you give it, and you can change your choices at any time using the Cookie Preferences link in the footer.

Who we share it with Review before launch

We share personal data only where there is a reason to.

• Shopify, which hosts this website and processes orders and payments.
• Professional advisers, such as our accountant, where necessary.
• Specialist delivery partners, where a piece of work requires them and personal data is genuinely involved. See Subprocessors.
• Authorities or others, where we are required to by law.

We do not sell personal data.

International transfers Review before launch

Some of the providers we use operate outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK, it is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum.

Details of the specific mechanism used by a given provider are available on request.

How long we keep it

Retention depends on the category. We do not apply a single arbitrary period to everything.

• Enquiries that do not become work: kept while there is an active conversation and for a reasonable period afterwards, then deleted.
• Client records and correspondence: kept for the duration of the engagement and for a period afterwards, so that we can deal with questions or disputes.
• Financial and transaction records: kept for the period required by UK tax and company law.
• Marketing preferences and opt-out records: kept for as long as needed to honour your choice, which means opt-out records are kept indefinitely so an address is not added back.
• Website analytics data: kept for the retention period of the technology concerned, where you have permitted it.

Your rights

Under UK data protection law you have the right to:

• be informed about how we use your personal data
• request a copy of it
• have inaccurate data corrected
• request erasure in certain circumstances
• restrict processing in certain circumstances
• data portability where processing is based on consent or contract and carried out by automated means
• object to processing based on legitimate interests
• object to direct marketing at any time, with no exceptions
• withdraw consent at any time where we rely on consent

To exercise any of these, email robert@mintchocmedia.com. We will respond within one month, and will tell you if we need longer.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk.

Visitors in the United States Review before launch

We are a UK business. We have not established that any United States state comprehensive privacy statute applies to us, and we do not claim to be subject to all of them.

Regardless of that, the following applies to visitors from the United States.

We do not sell your personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in California law.

Categories

The categories of personal information we collect, the purposes, and the parties we disclose to are described in the sections above.

Exercising rights

If you are a resident of a US state whose privacy law applies to you and to us, you may exercise the rights that law gives you, which may include access, deletion, correction and opting out of targeted advertising. Email robert@mintchocmedia.com. We will not discriminate against you for exercising a right.

Do Not Track

This website does not respond to Do Not Track browser signals, because there is no common standard for them. Where a recognised opt-out preference signal is supported by our consent tooling, we honour it.

Children

Our services are for businesses. This website is not directed at children and we do not knowingly collect personal data from them.

Changes to this policy

We may update this policy. The current version is always the one published on this page, and the date at the top shows when it last changed. Where a change is significant we will take reasonable steps to bring it to the attention of people it affects.