1) Who we are (Data Controller)
Mid Ridge Collective (“we”, “us”, “our”) operates the website available at cookcraft.example (the “Site”). Controller details:
- Mid Ridge Collective, Reg No 42876074
- Address: 2 Palmer Rue, Port Joshua, SK2 5XT, UK
- Phone: +44 1324 397267 • Email: [email protected]
2) Data we collect
We collect and process the following categories of personal data:
- Contact data: name, email, phone, message content submitted via the contact form.
- Technical data: IP address, device and browser type, operating system, referring URLs, pages viewed, time on page, and interactions (via analytics).
- Cookie data: preferences and consent choices stored locally for cookie management.
- Transaction-related data (if you purchase): order details, delivery information, and limited payment meta-data (processed by third-party payment providers; we do not store full card details).
- Social media data: if you click our social links or interact with embedded pixels, platforms may collect additional data per their policies.
3) How and why we use data (legal bases)
- Provide and improve the Site: to operate, secure, and enhance content and features (Legitimate interests).
- Respond to inquiries: to answer messages sent via the contact form or email (Contract/Legitimate interests).
- Analytics and performance: to understand usage patterns and improve user experience (Consent where required; otherwise Legitimate interests).
- Marketing measurement: to measure traffic from campaigns using cookies/pixels (Consent).
- Compliance and enforcement: to comply with legal obligations, resolve disputes, and enforce terms (Legal obligation/Legitimate interests).
4) Cookies and tracking technologies
We use cookies and similar technologies to run the Site and measure performance. Categories:
- Strictly necessary: required for basic site features (e.g., cookie consent choice). These are always on.
- Analytics: Google Analytics (GA4) to understand traffic and usage. Controlled via consent.
- Marketing: Facebook (Meta) Pixel to measure visits from our social channels. Controlled via consent.
You can control cookie choices via the cookie banner on our Site or in your browser settings. You may withdraw consent at any time by clearing cookies and revisiting the banner.
Google Analytics
We use Google Analytics with IP masking where available. Learn more at Google’s Privacy Policy and opt-out via your ad settings or the GA opt-out browser add-on.
Facebook Pixel
Facebook may process data for ad measurement per its Data Policy. You can manage ad preferences in your Facebook account and device settings.
5) Sharing and international transfers
We share data only with trusted service providers acting as processors, under agreements requiring appropriate safeguards:
- Hosting and infrastructure providers
- Analytics (Google Analytics)
- Marketing measurement (Meta/Facebook Pixel)
- Payment and order processing (if you purchase)
Some providers may process data outside the UK/EEA. Where this occurs, we rely on adequacy decisions or Standard Contractual Clauses (SCCs) and supplementary measures where appropriate.
6) Security, retention, and children
- Security: We implement administrative, technical, and organizational measures to protect personal data. No method is 100% secure.
- Retention: We keep personal data only as long as necessary for the purposes outlined, or as required by law. Typical periods: inquiries (up to 24 months), analytics (per provider defaults), orders/records (per legal obligations).
- Children: Our Site is not directed to children under 13 (or under 16 where local law so provides). We do not knowingly collect their data.
7) Your rights
Subject to applicable law (e.g., UK GDPR/EEA GDPR), you may have the right to:
- Access your personal data and receive a copy
- Rectify inaccurate or incomplete data
- Erase data (“right to be forgotten”)
- Restrict or object to processing (including profiling)
- Data portability
- Withdraw consent at any time (where processing relies on consent)
To exercise these rights, contact us at [email protected]. We may need to verify your identity before responding. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO).
8) Sources of data and automated decision-making
We collect data directly from you (e.g., forms) and automatically via cookies/analytics. We do not engage in automated decision-making that produces legal or similarly significant effects.
9) Changes to this policy
We may update this Privacy Policy from time to time. Changes become effective when posted on this page with an updated “Effective date.”
