Effective Date: June 2025
Last Updated: July 2025
Company Name: Mid-Fab Developments Ltd trading as HYDA Products
Registered Address: 84 Cliveland Street, Birmingham B19 3SN
Email: [email protected]
1. Introduction
HYDA Products is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
HYDA Products is the data controller for the purposes of UK GDPR and is responsible for your personal data. If you have any questions about this policy or how your data is handled, please contact us.
3. What Personal Data We Collect
We may collect and process the following types of personal data:
- Full name
- Email address
- Phone number (if provided)
- Billing and/or delivery address
- IP address
- Browser type and version
- Usage data (e.g. pages visited, time on site)
- Any personal data you provide when filling out forms or communicating with us
We do not knowingly collect personal data from children under 13 years old.
4. How We Collect Your Data
We collect data from you when:
- You visit our website
- You make a purchase or enquiry
- You sign up for our newsletter or mailing list
- You contact us via forms, email, or phone
- You use cookies (see Section 9)
5. Lawful Bases for Processing
We only process your personal data when we have a lawful basis to do so, which may include:
- Consent – You have given clear consent for us to process your data for a specific purpose.
- Contract – Processing is necessary for the performance of a contract with you.
- Legal obligation – We are legally required to process your data.
- Legitimate interests – Processing is necessary for our legitimate business interests, provided your rights do not override those interests.
6. How We Use Your Data
We may use your personal data to:
- Process orders and deliver products
- Respond to your enquiries and customer service requests
- Send you service-related emails (e.g. order confirmations)
- Send you marketing communications (if consent is given)
- Improve our website and user experience
- Comply with legal obligations
7. Sharing Your Data
We do not sell or rent your personal data to third parties. However, we may share your data with:
- Payment service providers (Stripe)
- Delivery companies and logistics providers
- IT and website service providers
- Legal or regulatory authorities when required
All third parties are required to respect the security of your data and to process it in accordance with UK GDPR.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. You can request deletion of your data at any time (see Section 10).
9. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience, analyse site traffic, and personalise content.
You can set your browser to refuse cookies or alert you when cookies are being sent.
Cookies are small text files stored on your device. We use:
- Essential cookies – to ensure the website works properly
- Performance cookies – to help us understand how the site is used
- Functionality cookies – to remember your preferences
- Marketing cookies – to deliver relevant advertising (only with your consent)
Some cookies are set by third-party services like Google Analytics or Facebook Pixel.
You can manage or disable cookies in your browser settings at any time. When you first visit our site, you’ll be asked to set your cookie preferences. You can change these preferences later by visiting our Cookie Settings.
10. Your Rights Under GDPR
You have the following rights under the UK GDPR:
- Right to Access – Request a copy of the personal data we hold about you.
- Right to Rectification – Request correction of any inaccurate or incomplete data.
- Right to Erasure – Request deletion of your personal data where there is no legal reason for us to retain it.
- Right to Restrict Processing – Request that we limit how we use your data.
- Right to Data Portability – Request transfer of your data to another provider.
- Right to Object – Object to processing of your data where we rely on legitimate interest.
- Right to Withdraw Consent – Withdraw consent at any time, where consent was the legal basis.
To exercise any of these rights, please contact us.
11. Data Security
We implement appropriate technical and organisational measures to secure your personal data against unauthorised access, disclosure, alteration, or destruction.
12. Transfers Outside the UK/EEA
If we transfer your personal data outside the UK or EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to ensure your data is treated securely and in accordance with this policy.
13. Complaints
If you have concerns about how we handle your personal data, please contact us directly. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
🌐 www.ico.org.uk
14. Updates to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last Updated” date. We encourage you to review this policy regularly to stay informed.
15. Contact Us
If you have any questions about this Privacy Policy or how your data is used, please contact us.