Privacy

Privacy Policy

How we collect, use, and protect personal data, and your rights under GDPR.

Effective date: February 27, 2025

MP Midi Ltd ("us", "we", or "our") operates the https://mpmidi.com website (the "Service").

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from mpmidi.com

At MP Midi we are committed to protecting personal data and to fair and transparent processing. Please read our privacy policy, it will help you to understand how we collect and use personal data from individuals, our clients, suppliers or others during the course of our business. We will only use personal data for the purposes described in this privacy policy or as stated at the point of collection.

We regularly review this privacy statement and may make changes at any time without giving prior notice.

Who we are

MP Midi Ltd is a limited liability company registered in Cyprus.

This privacy policy only applies to MP Midi Ltd. We are not responsible for the privacy practices of any other organisation our website may link to.

Our lawful basis for processing

We rely on several lawful bases for processing when we collect and use personal data to operate our business and provide products and services to our clients. These include:

  • Consent - where an individual has freely given, specific, informed and unambiguous consent at the time their personal data was provided to us. You can withdraw your consent at any time (see "Your rights" below).
  • Contract - in order to perform contractual obligations we may have with an individual or to take steps to enter into a contract with an individual.
  • Legal obligations - in order to comply with the legal and regulatory obligations we are subject to as a commercial business.
  • Legitimate interests - the legitimate interests can be ours, our clients or other third parties (e.g. to provide our services, to develop or protect our business, or to keep people informed about relevant products and services) and we always balance the rights of individuals with ours' and others' legitimate interests.

Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Cookies and Usage Data

Usage Data

We may also collect information on how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Non-essential cookies (such as analytics, advertising and support cookies) are only set after you have given your consent via our cookie consent banner.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service.

You can manage your cookie preferences at any time by clicking the "Cookie Settings" button on our Website. You can also instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

  • Necessary Cookies. We use necessary cookies for essential Website functionality and to store your cookie consent preference. These are set without requiring consent.
  • Analytical Cookies. We use analytical cookies to understand how visitors interact with our Website. These require your consent.
  • Advertising Cookies. We use advertising cookies to track the effectiveness of our advertising campaigns. These require your consent.
  • Support Cookies. We use support cookies for our live chat service. These require your consent.

For more details refer to our Cookie Policy.

Use of Data

MP Midi Ltd uses the collected data for various purposes:

  • To provide and maintain the Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer care and support
  • To provide analysis or valuable information so that we can improve the Service
  • To monitor the usage of the Service
  • To detect, prevent and address technical issues

Transfer of Data

Transfer to third parties

We only share personal data with others when absolutely necessary for the purposes for which we hold it and when necessary for our legitimate professional and business needs, for the purpose of executing your instructions or requests and/or as required or permitted by applicable legislation, professional standards or any applicable agreement between us, and where appropriate contractual arrangements and security mechanisms are in place.

We share personal data only with affiliates for our lawful professional and business necessities which comprise of:

  • suppliers that support us and help provide services to our clients, such as providers of cloud-based software, IT systems, security, archiving storage, marketing and payment services
  • professional advisors, auditors or insurers, where we are required by law or as reasonably required in the management of our business
  • law enforcement or other government and regulatory agencies or to other third parties, where we are required by law, the courts or any legal or regulatory authority we are subject to. We will only provide personal data in these circumstances where permitted or there is a legal requirement.

International data transfers

Whilst we store personal data on servers within the European Economic Area (EEA), some of our third-party service providers are based outside the EEA, including in the United States. Specifically:

  • Google (Google Analytics, Google Ads): data may be processed in the United States
  • Tawk.to (live chat): data may be processed in the United States
  • Vimeo (video hosting): data may be processed in the United States

Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or other legally recognised transfer mechanisms under the GDPR, to ensure your data is protected to the standard required within the EEA.

How long do we keep personal data?

The personal data you submit to us will only be held for as long as is required for the purposes for which it was collected and as required by applicable law.

We keep personal data only for as long as necessary and this will reflect the requirements of:

  • the activity or service for which it is being processed
  • any legal, regulatory or contractual requirements
  • the time in which any litigation or investigations might arise from providing a service.

Your rights under GDPR

Under the General Data Protection Regulation (GDPR), individuals have certain rights over their personal data that we process as data controllers.

If we process your personal data and you exercise any of your rights, we will aim to respond promptly and in any event within one month of your request. However, please note that the length of time it will take us to respond will be dependent on the nature and extent of your request.

You have a right to:

  • Access: you can ask us for a copy of the personal data that we hold on you.
  • Rectification: if you become aware of any errors or inaccuracies concerning your personal data, please let us know either by updating your details on the website or by contacting us.
  • Withdraw consent: where we process personal data based on consent, you have a right to withdraw consent at any time. For cookies, you can change your preferences via the "Cookie Settings" button on our Website. To stop receiving direct marketing emails from us, please click on the unsubscribe link in the relevant email. For any other withdrawals of consent please contact our DPO.
  • Erasure/deletion: you can ask us to erase or delete your personal data when we no longer need it for the purposes it was obtained.
  • Data portability: you can ask for your personal data to be sent to you or to another organisation in a structured, commonly used, machine-readable format.
  • Review automated decision making: if we make automated decisions about you, you can ask for those decisions to be reviewed.
  • Restrict or object to our processing: you can ask to restrict or object to our processing of your personal data (e.g. removal from a marketing subscription list).
  • Lodge a complaint: if you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. In Cyprus, this is the Commissioner for Personal Data Protection (website: www.dataprotection.gov.cy).

If you wish to exercise any of these rights, please send an email to our Data Protection Officer (DPO), see the contact details below.

Disclosure of Data

Legal Requirements

MP Midi Ltd may disclose your Personal Data in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of MP Midi Ltd
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

Security of Data

Security is of utmost importance to us. Whilst no data transmission over the internet or any other network can be guaranteed as 100% secure, we take all reasonable steps to safeguard the personal data we hold, and we have in place appropriate technical and organisational security measures in order to protect personally identifiable data and information from loss, misuse, alteration or destruction. These include detailed policies, procedures and training of our people relating to data protection, confidentiality and information security. These are regularly reviewed to ensure they are effective and fit for purpose to prevent any unauthorised or unlawful disclosure or processing of such information and data and the accidental loss or destruction of or damage to such information and data.

Service Providers

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We use the following third-party analytics services to monitor and analyse the use of our Service. These services are only activated after you give your consent via our cookie banner.

  • Google Analytics. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.

    You can opt out of having your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visit activity.

    For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Advertising

We use the following third-party advertising services to measure the effectiveness of our advertising campaigns. These services are only activated after you give your consent via our cookie banner.

  • Google Ads. Google Ads is an advertising platform provided by Google. We use Google Ads conversion tracking to understand how users interact with our advertisements and to measure campaign effectiveness. Google may use the data collected to contextualise and personalise the ads of its advertising network.

    For more information, please visit: https://policies.google.com/privacy?hl=en

Live Chat

We use the following third-party live chat service to provide customer support on our Website. This service is only activated after you give your consent via our cookie banner.

  • Tawk.to. Tawk.to is a live chat service that allows us to communicate with visitors in real time. When the chat widget is active, Tawk.to may collect your IP address, browser information, pages visited, and any information you voluntarily provide during a chat session.

    For more information on the privacy practices of Tawk.to, please visit: https://www.tawk.to/privacy-policy/

Embedded Content

Our Website may embed content from third-party services. When you interact with this content, these services may collect data about you.

  • Vimeo. We embed videos from Vimeo on certain pages. When you play a video, Vimeo may collect usage data and set cookies. For more information, visit: https://vimeo.com/privacy

  • YouTube (via Electric Blaze widget). We display a YouTube video feed on our homepage using the Electric Blaze widget. When this content loads, YouTube/Google may collect usage data and set cookies. For more information, visit: https://policies.google.com/privacy

Visitors and others

Website

Visitors to our website are usually in control of the personal data shared with us. We may collect a limited amount of personal data about visitors to our website by using cookies, but only after you have given consent for non-essential cookies (refer to our Cookie Policy). We accept personal data, such as name, company address, email address, and telephone numbers, from website visitors; for example, when an individual fills out our contact form.

When you register with us, use our services, make an enquiry, order products or services from us, you may be asked to provide some personal data such as your name, address, phone number and email address. We log your Internet Protocol (IP) address in order to receive and send information from and to you over the internet.

We would not expect to receive any sensitive personal data from any inquiry made using our website, such as race or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, physical or mental health, genetic data, biometric data, sex life or sexual orientation, or criminal records. If you choose to provide such sensitive data, you are giving your explicit consent for us to process it for reasons you are choosing to provide it.

Where you do provide personal data to us, we will only use it for the stated purpose at collection or any purpose obvious in the circumstances of the collection, e.g.:

  • making an enquiry via our contact form
  • ordering products or services
  • subscribing to newsletters or updates
  • engaging with our live chat support

We will indicate where it is necessary for you to provide information or where it is voluntary to enable us to handle your request. We usually only ask for extra information so we can provide the most suitable response to your request.

Personal data collected via our website will be retained by us for as long as necessary for the purposes described above.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via a prominent notice on our Service, prior to the change becoming effective, and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Inaccuracies and Corrections

We would like to keep your personal data accurate and up to date. If you become aware of any errors or inaccuracies please let us know by contacting our Data Protection Officer (DPO), see the contact details below.

Contact Us

If you have any questions about this privacy policy, wish to complain about our use of personal data or exercise one of your rights, please send your correspondence to our Data Protection Officer:

Data Protection Officer (DPO)

E-mail: dpo [at] mpmidi [dot] com