Privacy notice

Who we are

Mile is a Shopify Plus agency based in London. We are the data controller for the personal data described in this notice. Anything in here, including a request to exercise your rights, goes to hello@madeitlookeasy.co.uk.

Still to complete before this notice is published: registered company name; company number; registered office address; ICO registration status. Fill these in legalEntity in src/lib/site.ts — the notice, the noindex and the sitemap all follow from there. See docs/legal-fill-in.md for where each value comes from.

We have not appointed a Data Protection Officer. One is required only of public authorities, of organisations whose core activities involve large-scale regular and systematic monitoring, and of those processing special-category or criminal-offence data at scale. None of that describes what we do, so privacy questions go to the address above and a person answers them.

What this site collects on its own

Nothing that identifies you, beyond what any web server needs in order to send you a page. Specifically:

No analytics. There is no Google Analytics, no product analytics, no session recording, no heatmap and no advertising or tracking pixel anywhere on this site.
No cookies. This site sets none. There is no cookie banner because there is nothing to consent to.
One preference, kept on your device. If you use the light/dark theme switch, your choice is saved in your browser's local storage under mile-theme. It never leaves your device, is never sent to us, and clearing your browser's site data removes it.
Self-hosted fonts. Typefaces are served from this domain, so loading a page does not announce your visit to a font CDN.
No third-party embeds by default. Where an article includes a video, the page shows a still image and a play button; the player itself (on youtube-nocookie.com) is only loaded if you click it. One caveat, stated plainly: that still image is served by YouTube's image host, so opening an article that contains a video does make a single request to Google, which will see your IP address and browser user-agent. Nothing else on the site loads from a third party.
Hosting. The site is served from Cloudflare's network. As any host must, it processes connection data such as your IP address in order to deliver pages and to protect the site from attack and abuse. Those logs stay with the host under its own retention schedule; we do not copy them into our systems and we do not use them to build a picture of you.

What you give us

Two routes, both of them ones you choose to take:

Email. If you write to hello@madeitlookeasy.co.uk we hold your email address, your name if you give it, and whatever is in the message — for as long as it takes to answer, and to keep a record of the conversation afterwards.
The newsletter form in the footer — not yet live.It has no destination at present: submitting it is blocked in the page, so an address typed there is never sent anywhere, never stored, and never reaches a server — not even in a URL or a log. When it does go live it will hold the email address you enter and nothing else, to send one article email a month.

To complete before the newsletter form goes live: the email service provider that receives and stores subscriber addresses, the country it processes them in, and the safeguards for any transfer outside the UK.

We do not buy lists, we do not sell or rent your details to anyone, and we do not use what you send us to profile you or to make automated decisions about you.

Who else sees it

We do not sell, rent or trade personal data, and we do not share it for anyone else's marketing. A small number of suppliers process data on our behalf, under contract and on our instructions only — they cannot use it for their own purposes:

Cloudflare, Inc.. Hosting and content delivery for this site; connection logs and abuse prevention. Processed in: Global edge network, including servers outside the UK.
Google LLC (YouTube). Serves the still image for an embedded video, and the player itself only if you click it. Processed in: United States.

Beyond that we would only disclose personal data where the law requires it — a court order, or a properly made request from an authority entitled to it. If that ever happened we would tell you, unless we were legally barred from doing so.

Where in the world it goes

Hosting this site means some data is processed outside the UK. Where it is, the transfer is covered by the UK International Data Transfer Addendum to the European Commission's standard contractual clauses — the mechanism UK GDPR provides for sending personal data to a country without a UK adequacy decision. In practice the data in question is connection data such as an IP address, not anything you have typed into a form.

Why we are allowed to hold it

Enquiries — legitimate interests. You asked us something and we cannot answer without holding the address you asked from. You can object to this at any time.
Newsletter — consent. Once the form is live: you will have opted in, every email will carry an unsubscribe link, and you can withdraw consent whenever you like. Leaving is as easy as joining. Nothing is held on this basis today.
Hosting and security logs — legitimate interests.Keeping the site available and unabused.

How long we keep it

Enquiry email: while the conversation is live, and then for up to 24 months so we can pick up a thread that went quiet. After that it is deleted.
Newsletter address: none held today; once the form is live, until you unsubscribe or ask us to remove it. Unsubscribes are deleted rather than kept in a suppression list, wherever the provider allows that.
Hosting logs: held by our host under its own schedule, not by us.

Your rights

Under UK GDPR you can ask us to give you a copy of what we hold (access), correct it (rectification), delete it (erasure), pause what we do with it (restriction), or hand it over in a portable format. You can object to anything we do on the basis of legitimate interests, and where we rely on consent you can withdraw it at any time without giving a reason.

Email hello@madeitlookeasy.co.uk and we will respond within one month, usually a great deal sooner. There is nothing to pay.

If you think we have got it wrong you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can fix it, but that is your right, not our permission to give.

Changes to this notice

This notice describes the site as it stands: a marketing site with no analytics, no cookies and one form. If that changes — an analytics tool, a booking widget, a chat box — this page is updated before the change ships, and the date at the top moves with it. Last updated26 July 2026.