The Milk Exchange

• ← Back

The Milk Exchange
Privacy Policy

Last Updated: 18th February 20251. Introduction
The Milk Exchange (“we”, “our”, “us”) is committed to safeguarding your privacy and ensuring transparency in how we handle your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in compliance with:
• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018
• The Privacy and Electronic Communications Regulations (PECR)
By using our services, you agree to the terms outlined in this Privacy Policy.2. Data Controller & Third-Party Processors
The Milk Exchange acts as a Data Controller for personal data collected through our platform. However, certain services are provided by third-party Data Processors under their own privacy policies:
• Payments: Stripe processes all financial transactions on our behalf. Your payment details are handled in accordance with Stripe’s Privacy Policy.
• Platform Hosting: Our platform is hosted on Circle.co, which processes some user data as per Circle’s Privacy Policy.3. What Personal Data We Collect
3.1 Data You Provide
• Account Registration: Name, email, and password when signing up.
• Payment Details: Handled by Stripe. We do not store full payment details.
• Community Interactions: Posts, messages, and comments shared in our online community.
• Support Requests: Voluntary case-related information you provide when seeking guidance.
3.2 Data We Collect Automatically
• Device & Browser Data: IP address, operating system, and browser type.
• Website Analytics: Activity logs, site interactions, and engagement metrics.
• Communication Logs: Emails, chat interactions, and support requests.
For cookies and tracking, see Section 6 (Cookies & Tracking Technologies).4. Legal Basis for Processing Data
We process your personal data under the following lawful bases:
• Contractual Necessity: Payment processing and service delivery.
• Legitimate Interests: Community engagement, fraud prevention, and security.
• Consent: Marketing emails, optional features, and analytics tracking.
• Legal Obligation: Compliance with UK tax, legal, and regulatory requirements.5. How We Use Your Data
• Providing & Improving Services – Account management, community support, and case guidance.
• Security & Fraud Prevention – Protecting accounts and detecting unauthorised activity.
• Marketing & Communications – If you opt-in, we may send newsletters or updates.
• Legal & Compliance Obligations – Responding to legal requests, financial record-keeping.
We do not use personal data for automated decision-making with legal or financial consequences.6. Cookies & Tracking Technologies
We use cookies for the following purposes:
• Essential Cookies: Required for website functionality.
• Analytics Cookies: To measure user engagement.
• Marketing Cookies: For personalised advertising (requires consent).
Users can manage cookie preferences through their browser settings or via our [Cookie Policy].7. Data Sharing & Third-Party Services
We only share personal data when necessary:
• Payments: Processed securely via Stripe.
• Platform Hosting: Some user data is managed by Circle.co.
• Legal Compliance: We may disclose data if required by UK regulatory authorities.
• Community Interactions: Public forum content may be visible to other users.
We do not sell, rent, or trade your personal information.8. International Data Transfers
Your data may be transferred outside the UK/EEA where our service providers (e.g., Stripe & Circle.co) process data globally. In such cases, we rely on:
• UK-approved Standard Contractual Clauses (SCCs)
• Adequacy decisions for certain countries
• Other lawful transfer mechanisms under UK GDPR9. Data Security Measures
We implement industry-standard security protocols, including:
✔ Data Encryption: Sensitive information is securely stored and encrypted.
✔ Access Controls: Restricted access based on user roles.
✔ Regular Security Audits: Continuous assessments for vulnerabilities.
While we take extensive security measures, no system is 100% secure. Users should use strong passwords and remain vigilant against phishing attempts.10. Data Retention Policy
We retain personal data for only as long as necessary:
• User Accounts: Deleted 12 months after inactivity.
• Financial Transactions: Retained for 6 years (UK tax law requirement).
• Support Requests: Retained for 3 years, unless required for legal compliance.
When no longer needed, data is securely deleted or anonymised.11. Your Rights Under UK GDPR
You have the right to:
✔ Access: Request a copy of your data.
✔ Correction: Update inaccurate information.
✔ Erasure: Request deletion of your data.
✔ Restriction: Limit processing of your data.
✔ Objection: Object to direct marketing.
To exercise your rights, email [email protected].12. Data Breach Notification Policy
In the event of a data breach, we will:
1. Assess whether it poses a high risk to user rights.
2. Notify affected users as soon as possible.
3. Report serious breaches to the ICO within 72 hours, as per UK GDPR.
For any security concerns, contact [email protected].13. Complaints & Regulatory Oversight
If you believe your data rights have been violated, you have the right to file a complaint with:
📍 UK Information Commissioner’s Office (ICO)
🔗 www.ico.org.uk
You can also contact us directly at [email protected].14. Limitation of Liability
The Milk Exchange provides guidance and community support only. We do not offer legal representation.
We disclaim liability for:
• Decisions made based on our resources.
• Financial or legal outcomes related to user actions.
• Third-party service providers (e.g., Stripe, Circle.co).
We are not liable for indirect, incidental, or consequential damages, including loss of earnings or reputational harm.15. Contact Us
For any privacy-related inquiries, contact:
📍 The Milk Exchange
Address: Parkers Cornelius House, 178-180 Church Road, Hove, East Sussex, England, BN3 2DJ
📧 Email: [email protected]16. Updates to This Policy
We may update this Privacy Policy to reflect legal or service changes. Continued use of our platform constitutes acceptance of the latest terms.Last updated: 18th February 2025