Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains how G.E. Middleton & Co Ltd, trading as G.E. Middleton (“we”, “us”, “our”), collects and uses personal information when you visit gemiddleton.shop, place an order, or contact us. We are the controller of your personal information for the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. How to contact us about privacy

G.E. Middleton & Co Ltd
359-363 City Rd, Stretford, Manchester M15 4DE, United Kingdom
Email: contact@gemiddleton.shop
Phone: +44 161 872 8409

2. Information we collect

Depending on how you use our website, we may collect:

Contact and delivery details: your name, email address, phone number, and billing and delivery addresses.
Order and transaction details: the products you buy, order value, order and delivery history, returns, refunds and cancellations.
Payment details: payment is processed by our payment providers through Shopify's checkout. We see limited information such as the payment method type, the last digits of a card and whether payment was successful. We do not see or store your full card number.
Account details: if you sign in to a customer account, your sign-in email and account activity such as past orders.
Communications: messages you send us by email, phone or our contact form, including any order number you provide.
Device and usage information: information collected automatically when you browse, such as your IP address, browser and device type, pages viewed, items added to your basket and how you arrived at the website.
Marketing preferences: whether you have agreed to receive marketing emails from us.

We collect most of this information directly from you. Some device and usage information is collected automatically through cookies and similar technologies (see section 6).

3. How we use your information and our legal bases

To process and deliver your order, take payment, send order and shipping updates, and handle returns, refunds and cancellations. Legal basis: performance of our contract with you.
To respond to your enquiries and provide customer service. Legal basis: our legitimate interest in helping our customers, or performance of a contract where your enquiry relates to an order.
To keep records for accounting, tax and legal purposes, and to deal with consumer rights requests. Legal basis: compliance with legal obligations.
To keep our website and checkout secure, and to prevent and detect fraud. Legal basis: our legitimate interests in protecting our business and customers.
To understand how our website is used and improve it. Legal basis: our legitimate interests, or your consent where the law requires consent for the cookies involved.
To send marketing emails, only if you have agreed to receive them. Legal basis: consent, which you can withdraw at any time.

4. Who we share your information with

We share personal information only where needed for the purposes above:

Shopify, which hosts our website and provides our online store, checkout, customer accounts and messaging tools. Shopify processes personal information on our behalf to provide these services. For certain features, Shopify may also process information as an independent controller; see the Shopify Privacy Policy and the Shopify Privacy Portal.
Payment providers that process payments made at checkout. They use your payment details to process the transaction and to prevent fraud.
Delivery services that deliver your order, which receive your name, delivery address and, where needed for delivery updates, your phone number or email address.
Professional advisers such as accountants or lawyers, where necessary.
Public authorities, such as HMRC or the police, where we are required by law or where it is necessary to prevent fraud or crime.

We do not sell your personal information.

5. International transfers

Some of our service providers, including Shopify, may process personal information outside the United Kingdom. Where this happens, we rely on the protections required by UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum approved for use in the UK.

6. Cookies and similar technologies

Our website uses cookies that are essential for it to work, for example to keep items in your basket, enable checkout and keep the site secure. These do not require your consent.

Shopify's platform can also use analytics and marketing cookies to measure how the website is used. Where consent is required for these, we ask for it through the cookie banner shown when you first visit, and they are only set if you agree. You can change your choice at any time using your browser settings or the cookie preferences option on our website where available.

7. Marketing

We only send marketing emails if you have opted in, for example by ticking the marketing box at checkout. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time by emailing contact@gemiddleton.shop. We will still send emails about your orders, which are not marketing.

8. How long we keep information

Order, payment and refund records: generally six years after the end of the financial year in which the order was placed, to meet accounting and tax requirements.
Customer service messages: as long as needed to deal with your enquiry and any follow-up, and with the related order records where they concern an order.
Customer accounts: while your account is active. You can ask us to close your account at any time.
Marketing preferences: until you unsubscribe, after which we keep a record of your opt-out so that we do not contact you again.

When we no longer need information, we delete it or anonymise it.

9. Keeping your information secure

Our store and checkout run on Shopify, which uses encryption and security measures designed to protect personal information. Payment card details are handled by our payment providers and are not stored by us. No online service can be completely secure, so please avoid sending sensitive information, such as full card numbers, by email.

10. Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct information that is inaccurate or incomplete;
ask us to delete your information in certain circumstances;
ask us to restrict how we use your information in certain circumstances;
object to our use of your information where we rely on legitimate interests, and object at any time to direct marketing;
ask us to transfer information you have given us to you or another organisation in certain circumstances; and
withdraw your consent at any time where we rely on consent.

To exercise any of these rights, email contact@gemiddleton.shop or write to us at the address in section 1. We may need to confirm your identity before acting on a request. We will respond within one month, or tell you within that time if we need longer because a request is complex.

11. Complaints

If you are unhappy with how we have handled your personal information, please contact us first using the details in section 1, so that we can try to put things right. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you informed, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint, or phone 0303 123 1113.