Privacy Policy

Data protection & privacy · Momentary

Last updated: 1 September 2026

1. Introduction and Scope

This Privacy Policy describes how Momentary ("we," "our," or "us") collects, uses, shares, and protects your personal information when you visit our website, make purchases, or interact with our services.

We comply with applicable privacy laws including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood this policy.

2. Information We Collect

Personal Information: Name, email, telephone number, billing and shipping address, and payment details.

Business Information: Business name, VAT registration number, and compliance-related data.

Technical Information: IP address, browser type, device information, pages visited, and timestamps.

Communication Data: Records of emails, telephone calls, and customer support interactions.

3. How We Use Your Information

Order Processing: To fulfil orders and manage delivery and returns.
Account Management: To maintain your account and preferences.
Customer Support: To respond to enquiries and improve service.
Legal Compliance: To meet regulatory and VAT obligations.
Business Operations: Analytics and internal improvements.

4. Lawful Basis for Processing

Under the UK GDPR, we process your personal data on the following lawful bases:

Contract Performance: To fulfil our contract with you (order processing, delivery).
Legal Obligation: To comply with VAT, consumer protection, and other legal requirements.
Legitimate Interests: To improve our services, prevent fraud, and analyse website usage, where such interests do not override your fundamental rights.
Consent: For marketing communications and non-essential cookies, where you have given explicit consent.

5. Information Sharing and Disclosure

Service Providers: Trusted partners assisting with business operations.
Delivery Carriers: Royal Mail, DPD, Evri, Yodel, or other couriers for order fulfilment.
Payment Processors: Secure third-party payment handling (Visa, Mastercard, PayPal, Klarna, Clearpay).
Legal Requirements: Disclosure when required by law or to protect our rights.
Business Transfers: Data may transfer during mergers or acquisitions.

6. Data Security and Protection

We implement encryption, SSL security, and restricted access controls to protect your data. While we strive for maximum protection, no system is completely secure. We will notify you and the Information Commissioner's Office (ICO) of any data breach where required by law.

7. Cookies and Tracking Technologies

We use cookies to enhance user experience, analyse traffic, and improve website functionality. Under the Privacy and Electronic Communications Regulations 2003 (PECR), we require your consent before setting non-essential cookies.

You may manage your cookie preferences through our cookie banner or your browser settings. Essential cookies necessary for the website to function do not require consent.

8. Your Privacy Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data in certain circumstances.
Right to Restrict Processing: Request that we limit how we use your data.
Right to Data Portability: Request transfer of your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
Right to Lodge a Complaint: Complain to the Information Commissioner's Office (ICO) at ico.org.uk or telephone 0303 123 1113.

To exercise any of these rights, please contact us using the details below.

9. Data Retention

We retain your personal data only as long as necessary for the purposes set out in this policy and to comply with legal obligations, including VAT record-keeping requirements (six years under HMRC regulations) and the limitation periods under the Limitation Act 1980 (six years for contract claims in England and Wales).

10. Third-Party Services and Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If we become aware that we have collected such data, we will take steps to delete it promptly.

12. International Data Transfers

Your data may be processed outside the United Kingdom, including in countries that may not offer the same level of data protection. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as:

UK adequacy decisions recognising equivalent protection.
Standard Contractual Clauses approved by the ICO with the UK addendum.
The UK-US Data Bridge (Extension to the EU-US Data Privacy Framework) for transfers to certified US organisations.

13. Supervisory Authority

The supervisory authority for data protection in the United Kingdom is the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

14. Updates to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates the most recent revision. Continued use of our services following any updates constitutes acceptance of the revised policy.