Privacy policy

Last updated: 1 October 2026

Who we are

Milky Fittings & Fab is a UK partnership operated by Jakub Bloniarz and Katarzyna Bloniarz. We are the data controller for the personal information we use to run our business. This policy explains how we handle personal information when you browse our Shopify store, place an order, request a quotation or contact us.

Online checkout is available for UK orders only. Customers outside the UK can contact us to discuss an order; this policy also applies to those enquiries and any resulting orders.

Email: enquiries@milkyfittings.co.uk
Telephone: +44 7402 411723
Address: 70 Estoril Road South, Darlington, DL1 4SP, United Kingdom.

Information we collect

  • Your name, business name where supplied, email address, telephone number, and billing and delivery addresses.
  • Order details, purchased products and variants, delivery instructions, payment status, refunds and transaction references.
  • Messages, quotation requests, drawings, photographs and specifications you provide when discussing fittings or custom fabrication, to the extent these contain personal information.
  • Technical information such as your IP address, browser and device details, and interactions with our website, collected through Shopify and cookies or similar technologies.
  • Your email address and subscription preferences if you choose to sign up for future email updates.

Payments are processed by Shopify Payments and other payment providers available at checkout. We receive information needed to confirm and manage payments, but do not receive or store your full payment card number or card security code. Our store does not offer customer account registration.

We obtain information directly from you, automatically when you use the store, and from providers supporting payments, delivery and the operation of our website.

How and why we use information

  • Orders and quotations: to respond to enquiries, prepare quotations, manufacture or supply products, process payments, arrange deliveries and handle returns. Our legal basis is taking steps at your request before entering a contract or performing our contract with you. When dealing with a business representative, we also rely on our legitimate interest in managing business enquiries and orders.
  • Business records: to maintain accounting and tax records and comply with applicable legal requirements. Our legal basis is compliance with legal obligations.
  • Customer service and security: to manage correspondence, resolve disputes, prevent fraud and keep our business and website secure. We rely on our legitimate interests in operating a reliable business and protecting customers, taking account of your rights.
  • Optional email updates: we are not currently sending newsletters. If you subscribe through our signup form, we retain your subscription details for future updates based on your consent. You can withdraw consent at any time by contacting us or using the unsubscribe link in any future marketing email. Order and service messages are separate from marketing.
  • Optional cookies: where consent is required, we rely on your consent before using optional cookies or similar technologies.

Information such as a delivery address is necessary to fulfil an order. If you do not provide the information needed, we may be unable to process your order or quotation request.

Who receives information

We share information where needed with Shopify, payment providers, delivery companies, IT and email providers, accounting services such as QuickBooks, and professional advisers. For example, a courier needs your delivery address and may need your contact details to deliver your parcel. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims.

We do not sell customer personal information for money.

Shopify and cookies

Our store is hosted by Shopify. Shopify processes information to operate the store, checkout, payments and related services, including security and fraud prevention. For some services, Shopify acts as a separate data controller. Details of its processing and your options are available in the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Cookies and similar technologies help the store function, for example by keeping items in your basket and supporting checkout and security. Optional analytics or advertising technologies, if enabled, are subject to applicable consent requirements. We have not currently added Google Analytics or Meta Pixel. You can manage available cookie choices using the Cookie preferences link in the footer and your browser settings. Blocking essential cookies may prevent parts of the store from working correctly. We will update this policy when we introduce new uses of personal information.

International processing

Although online orders are restricted to the UK, Shopify and other providers may process information outside the UK. Where required, transfers are protected by applicable adequacy regulations or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum to the European Commission's Standard Contractual Clauses. Contact us for further information about safeguards relevant to your data.

How long we keep information

We keep information only for as long as needed for the purposes described in this policy:

  • Order and accounting records are kept for applicable tax and accounting record-keeping periods, and longer where necessary for an unresolved dispute or legal obligation.
  • Enquiries, quotations and related drawings are kept while the enquiry is active and for a reasonable period afterwards where needed for follow-up, repeat work or potential claims. We assess continued need based on the status of the enquiry, the work supplied and applicable claim periods.
  • Subscription details are kept while your subscription remains active. We review unused subscription lists and remove information no longer needed. Following an unsubscribe request, we may keep a minimal suppression record to respect your preference.
  • Technical data is retained according to its operational purpose and the relevant provider's retention arrangements. Cookie lifetimes vary by function.

We review retained information and delete or anonymise it when it is no longer needed.

Security

We use appropriate safeguards to protect personal information and restrict access to those who need it for business purposes. No online system is completely secure. Please do not send full payment card details or unnecessary sensitive information by email or through our contact form.

Your rights

Under UK data protection law, depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of processing or transfer of your information. You can object to processing based on legitimate interests and to direct marketing, and withdraw consent where we rely on it. These rights have exceptions; for example, we may need to retain accounting records despite a deletion request.

Contact enquiries@milkyfittings.co.uk to make a request. We may need to confirm your identity. We normally respond within one month, subject to any lawful extension.

You can complain to us about how we handle your information. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint/.

Other websites and children

External websites have their own privacy policies. Our products and services are not directed at children. If you believe a child has provided personal information to us, please contact us.

Changes to this policy

We may update this policy as our services or legal requirements change. The current version will be published here with an updated date. We will provide additional notice where required.