Privacy policy
This Privacy Policy explains how Mintkey collects, uses and protects personal data when you browse our website, create an account, place an order, contact us or submit a trade-in enquiry.
1. Who we are
The data controller is [Mintkey Ltd / verified legal entity name], trading as Mintkey, company number [company number], registered office at [registered office address]. Our customer service address is [customer service address, if different].
For privacy questions or to exercise your rights, contact support@mintkey.co.ukor write to [privacy contact postal address]. If Mintkey appoints a Data Protection Officer, contact them at [DPO email or “not appointed”].
2. Personal data we collect
Depending on how you use Mintkey, we may collect:
- identity and contact details, such as name, email address, telephone number and account details;
- delivery and billing information, including address and order history;
- payment and transaction references. TrueLayer and relevant payment providers handle bank authentication; Mintkey does not receive or store online-banking credentials;
- customer-service messages, returns information, trade-in information and feedback;
- technical information such as IP address, browser, device, security logs and information about how you use the site; and
- cookie and preference information, where permitted and where you have made the relevant choice.
3. How we use data and our lawful bases
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Create and manage an account | Name, email, authentication records | Contract; legitimate interests in account security |
| Process, deliver and support an order | Contact, address, order and payment references | Contract; legal obligations |
| Handle returns, refunds and complaints | Order, contact and support records | Contract; legal obligations |
| Prevent fraud and protect the site | Transaction, device and security data | Legitimate interests; legal obligations |
| Send optional marketing | Email address and preferences | Consent, where required |
| Measure site performance | Analytics and device data | Consent, where required; legitimate interests for strictly necessary measurement |
Where we rely on legitimate interests, we balance those interests against your rights and expectations. You can object to direct marketing at any time.
4. Who receives personal data
We share only the data needed for the relevant service with carefully selected providers, including [hosting/database provider], TrueLayer for bank payment services, [payment/transaction provider], [delivery and fulfilment providers], [customer-support provider],[email/newsletter provider], fraud-prevention providers, professional advisers and regulators or law-enforcement bodies where legally required.
Replace every bracketed provider before launch and link to the relevant provider privacy information where appropriate. We do not sell customer personal data.
5. International transfers
If a provider processes data outside the UK or EEA, we use an adequacy decision or other lawful safeguard such as UK International Data Transfer Agreements, the UK Addendum or EU Standard Contractual Clauses, as applicable. The countries and safeguards used by Mintkey are: [insert verified countries, providers and safeguards].
6. Retention
We keep data only for as long as necessary. Our retention schedule is:
- customer accounts: while active and for [period] after closure;
- orders, invoices, tax and accounting records: [period required by applicable law];
- support and complaint records: [period] after resolution;
- marketing preferences: until you withdraw consent, plus [suppression period] to respect that request; and
- security and fraud logs: [period], unless a longer period is needed to investigate an incident.
7. Your rights
Subject to applicable law, you may ask us to access, correct, delete or restrict use of your personal data, object to processing, receive portable data, or withdraw consent where consent is the lawful basis. You may also complain to the UK Information Commissioner's Office or your relevant EEA supervisory authority. To make a request, emailsupport@mintkey.co.uk. We may need information to verify your identity.
8. Cookies and similar technologies
Essential technologies support account sessions, security and checkout. Non-essential analytics, advertising or preference technologies will be used only where legally permitted and after the required consent. See our Cookie Policy for the current inventory and choices.
9. Automated decisions and profiling
[Confirm whether automated fraud screening or profiling is used.] If it is used to make a decision with legal or similarly significant effects, we will explain the logic, significance and available human review rights as required by law.
10. Updates
We may update this policy when our services, providers or legal obligations change. We will publish the new version here and, where required, notify affected customers by an appropriate channel.
Last updated: 17 September 2026 · Version 0.2