Legal

Privacy notice.

Last updated: 11 October 2026

This notice explains how MI:LK am ("I", "me") collects, uses and protects your personal data, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. I keep it as plain as I can.

Who I am

MI:LK am is a sole trader operating a doorstep milk-delivery round across North London (N2, N3, N10, N11, N22, NW11). The data controller is Greg, trading as MI:LK am.

Email: [email protected]

I’m a sole trader and don’t publish my home address or phone number. Registered customers have my phone number, and my full contact details, including a postal address, are sent with your confirmation email or on request.

What data I collect, and why

When you register for the round

I collect: your name, email address, delivery address & postcode, the delivery days you choose, the products you pick, anything you write in the message box, and (optionally) how you found me - including a neighbour’s name, if you give one. The form also records which page you signed up from and, where your browser shares it, the site that brought you there. I use this only to:

Confirm whether your street is on the route, and reply with a start date.
Deliver your milk and other items on the days you choose.
Send your monthly invoice and respond to any messages you send.
Thank a neighbour who recommended me, if you name one.

Lawful basis: performance of a contract with you (or steps prior to entering one) - UK GDPR Article 6(1)(b).

When you use the postcode-checker

The check runs entirely in your browser. The postcode you type is not transmitted to me or to anyone else.

When you email me

Any details you include in an email to [email protected] are stored in my inbox. I use them only to reply and to fulfil any order you place.

Who processes your data on my behalf

Web3Forms - receives the registration form on my behalf and forwards it to my inbox. See Web3Forms' privacy policy.
My email provider - receives and stores emails sent to [email protected].
My hosting provider - serves this website. Server logs may record your IP address for short periods for security and abuse prevention.
My round and invoicing software - holds your name, address, order and invoices so I can deliver and bill you.

I do not sell, rent or share your data with anyone for marketing.

Cookies, fonts and third-party content

This site sets no tracking, advertising or analytics cookies. The only browser storage used is a small flag (localStorage) that remembers whether you've dismissed the data-use banner.

When the page loads it requests:

Google Fonts (fonts.googleapis.com / fonts.gstatic.com) - Google may receive your IP address.
Pexels and Unsplash stock photographs - those servers may receive your IP address.
Cloudflare Web Analytics - counts page visits without cookies and without following you to other sites. Cloudflare may receive your IP address.

See the cookies & data page for the full list.

How long I keep your data

Active customers: for as long as you're on the round, plus six years after your last delivery (HMRC requires me to keep sales records).
Form submissions that don't lead to a delivery: deleted within 90 days.
Email correspondence: retained in my inbox for as long as it's useful, generally no more than two years for non-customer messages.

Your rights

Under UK GDPR you have the right to:

Ask for a copy of the data I hold about you.
Ask me to correct anything that's wrong.
Ask me to delete your data (subject to my legal obligation to keep sales records).
Ask me to restrict how I use your data, or object to a particular use.
Ask for your data in a portable form.
Withdraw any consent you've given (where consent is the lawful basis).

To exercise any of these, email [email protected]. I'll reply within one month.

Complaints

If you're unhappy with how I've handled your data, you can complain to the UK's data-protection regulator, the Information Commissioner's Office, at ico.org.uk.

Changes to this notice

If I change this notice I'll update the "last updated" date above. Material changes will be flagged at the top of this page for at least 30 days.

Plain summary: I collect what I need to deliver your milk and contact you about it. The sign-up form reaches me through Web3Forms. I don't track you, don't share your data for marketing, and you can ask me to delete it any time.