Privacy Policy
Effective Date: 13 August 2025
1. Introduction
Midnight Mixes (“we”, “our”, “us”) is committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains:
-
What personal data we collect
-
How and why we process it
-
Your rights under data protection law
2. Who We Are
Business Name: Midnight Mixes
Email: midnightmixes2025@gmail.com
Data Controller: Midnight Mixes
3. What Personal Data We Collect
A. Information you provide directly:
-
Name
-
Email address
-
Phone number
-
Billing address
-
Audio files and project materials you send us
-
Payment information (processed securely by third-party providers)
B. Information collected automatically:
-
IP address
-
Browser type and version
-
Pages you visit and time spent on the site
-
Device type and operating system
-
Cookies and similar tracking technologies (see section 8)
4. How We Collect Data
We collect personal data when you:
-
Contact us via our website forms, email, or phone
-
Place an order for our mixing or audio services
-
Subscribe to our mailing list (if applicable)
-
Visit our website (automatic analytics data)
5. Why We Process Your Data & Lawful Basis
Purpose of ProcessingLawful Basis (UK GDPR Art. 6)
To provide mixing and audio servicesPerformance of a contract (Art. 6(1)(b))
To respond to enquiriesLegitimate interest (Art. 6(1)(f))
To process paymentsPerformance of a contract (Art. 6(1)(b))
To send marketing emails (if opted-in)Consent (Art. 6(1)(a))
To maintain website security and functionalityLegitimate interest (Art. 6(1)(f))
6. How Long We Keep Your Data
-
Client project files: Up to 12 months after project completion, unless agreed otherwise.
-
Contact form submissions and emails: Up to 6 months.
-
Invoices and payment records: 6 years (legal obligation under UK tax law).
-
Marketing mailing lists: Until you unsubscribe or withdraw consent.
7. Sharing Your Data
We only share your data with:
-
Website hosting & analytics: Wix.com Ltd. (Israel, GDPR adequate country)
-
Payment processors: PayPal (US), Stripe (US) – protected via UK-approved Standard Contractual Clauses
-
File transfer services: SwissTransfer, WeTransfer, Google Drive, Dropbox (only when used for project delivery)
-
Email services: Gmail (Google LLC, US) – protected via Standard Contractual Clauses
We do not sell or rent your personal information.
8. International Data Transfers
Some of our third-party providers store or process data outside the UK/EEA. Where this happens, we ensure your data is protected through:
-
Adequacy decisions (e.g., Israel)
-
Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)
9. Cookies & Tracking Technologies
Our website uses cookies to:
-
Enable core site functionality
-
Analyse site traffic (Google Analytics or Wix analytics)
You can manage cookie preferences in your browser or through our cookie consent tool. Non-essential cookies are only set with your consent.
10. Your Data Protection Rights
Under the UK GDPR, you have the right to:
-
Access your data
-
Rectify incorrect or incomplete data
-
Request erasure (“right to be forgotten”)
-
Restrict processing
-
Data portability
-
Object to processing based on legitimate interests
-
Withdraw consent for marketing at any time
To exercise your rights, contact us at: midnightmixes2025@gmail.com. We will respond within 1 month.
11. Complaints
If you believe your data has been mishandled, you can lodge a complaint with the Information Commissioner’s Office (ICO)
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date.
If you want, I can now make you a matching GDPR Cookie Policy so that when you set up a Wix cookie banner, it links to something clear and compliant. That will complete your legal cover. Would you like me to create that next?
