Privacy Policy (MDM Marketing Ltd)
Last updated: 4 January 2026
This Privacy Policy explains how MDM Marketing Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit or use https://www.mdmmarketingltd.co.uk/logo (the “Site”), contact us, or purchase our logo/branding services. We handle personal data in line with the UK GDPR and the Data Protection Act 2018.
1) Who we are (Data Controller)
Business name: MDM Marketing Ltd
Registered address: Room 4, Mackies Corner, 106 High Street West, Sunderland, England, SR1 1TX
Email: hello@mdmmarketingltd.com
Phone: 07806 513837
We are the “data controller” for the personal data described in this policy (meaning we decide how and why your data is used).
2) What personal data we collect
Depending on how you use the Site, we may collect the following:
A) Information you provide to us
Name
Email address
Phone number
Business name and any brand details you share
Your logo/branding brief (e.g., preferences, style direction, colours, fonts, examples you like/dislike, competitors, target audience)
Messages sent via forms, email, phone, or booking requests
Any files you upload or send (e.g., images, brand assets, inspiration screenshots)
B) Payment and transaction information
If you purchase a service, payments are processed by our payment provider(s) (e.g., Stripe). We do not store full card details. We may receive and store limited details such as:
Payment confirmation and status (paid/failed/refunded)
Transaction reference/ID
Billing name and email (if provided during checkout)
The last 4 digits of the card and expiry month/year (where made available by the provider)
C) Information collected automatically when you use the Site
IP address
Device type, browser type, and operating system
Pages viewed and actions taken (e.g., button clicks)
Approximate location (city/region-level, derived from IP)
Referral source (how you arrived at the Site)
Cookies and similar technologies (see section 9)
3) How we use your data
We use your personal data to:
Provide our services and deliver your logo/branding assets
Handle enquiries and manage bookings/calls
Process payments, issue invoices/receipts, and manage refunds where applicable
Communicate with you about your project (brief, drafts, revisions, delivery, timelines)
Provide customer support and respond to questions
Improve our Site and services (including performance monitoring and analytics)
Maintain security, prevent fraud, and protect our business
Send marketing communications only where permitted (see section 6)
4) Our lawful bases for processing (UK GDPR)
We process personal data under one or more of the following lawful bases:
Contract: where processing is needed to provide the service you’ve ordered or to take steps at your request before entering a contract (e.g., responding to a quote request).
Legitimate interests: where we have a genuine business reason to use your data (e.g., improving the Site, maintaining security, answering enquiries, preventing fraud), and your rights don’t override those interests.
Legal obligation: where we must keep certain records (e.g., invoices for tax/accounting).
Consent: where required (e.g., for certain non-essential cookies and some marketing messages). You can withdraw consent at any time.
5) Who we share your data with
We may share your personal data with trusted third parties who help us operate our Site and deliver services, for example:
Payment processors (such as Stripe) to take payments and manage refunds
Booking/scheduling providers if you book a call through a booking tool
Email and communication providers to send emails and manage customer communication
Website hosting, domain, and technical service providers to host and maintain the Site
Analytics and advertising providers if we use tracking to understand performance and measure campaigns (for example, web analytics tools or ad platforms)
We only share what is necessary for those providers to perform their services, and we expect them to protect your information.
We may also disclose data where required by law, or to protect our rights, customers, or business.
6) Marketing communications
We may contact you about:
Your enquiry or order (service messages) — these are not “marketing”
Relevant updates about our services (marketing) only where permitted
You can opt out of marketing at any time by:
Using the unsubscribe link in an email (where included), or
Emailing hello@mdmmarketingltd.com with “Unsubscribe” in the subject line
Even if you opt out of marketing, we may still contact you with important service-related messages (e.g., about your order or project).
7) International transfers
Some of our service providers may process data outside the UK (for example, in the EU and/or the United States). Where personal data is transferred internationally, we use appropriate safeguards such as:
UK adequacy regulations (where applicable), and/or
Approved contractual protections (such as the UK International Data Transfer Agreement or relevant addenda)
8) How long we keep your data
We keep personal data only for as long as needed for the purposes described in this policy:
Enquiries (no purchase): typically up to 12 months after our last contact
Client project files and communications: typically up to 24 months after completion (to help with support and re-supplying files if needed)
Invoices and transaction records: typically 6 years to comply with UK tax/accounting obligations
Legal or dispute situations: if there’s a dispute or legal requirement, we may retain relevant data for longer as necessary
9) Cookies
Cookies are small files stored on your device to help websites work and to understand how visitors use them.
We may use cookies and similar technologies to:
Ensure the Site functions properly
Understand Site usage and improve performance (analytics)
Measure marketing effectiveness (where enabled)
You can control cookies through your browser settings, including deleting cookies and blocking future cookies. If you disable certain cookies, parts of the Site may not function as intended.
10) Your rights
You have rights under UK data protection law, including the right to:
Access your personal data
Correct inaccurate or incomplete data
Request deletion (in certain circumstances)
Restrict processing (in certain circumstances)
Object to processing (particularly where based on legitimate interests or for direct marketing)
Data portability (in certain circumstances)
Withdraw consent where we rely on consent
To exercise any of these rights, contact us at hello@mdmmarketingltd.com. We may need to confirm your identity before processing your request.
Complaints: You also have the right to complain to the UK Information Commissioner’s Office (ICO). You can find their contact details on the ICO website.
11) Security
We take reasonable technical and organisational steps to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. No online system is 100% secure, but we work to protect your information using appropriate safeguards and good practice.
12) Children’s privacy
Our services are not directed at children under 16, and we do not knowingly collect personal data from children.
13) Third-party links
The Site may include links to third-party websites or services (for example, payment pages, booking tools, or review platforms). We are not responsible for the privacy practices of those third parties. Please review their privacy policies before providing them with personal data.
14) Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, the Site, or legal requirements. We will update the “Last updated” date at the top of this page when changes are made.
