Privacy Policy

Data protection & privacy · momentary

Last updated: 28 September 2026

1. Introduction and Scope

This Privacy Policy describes how momentary ("we," "our," or "us") collects, uses, shares, and protects your personal information when you visit our website, make purchases, or interact with our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood this policy.

2. Information We Collect

Personal Information: Name, email, phone number, billing and delivery address, and payment details.

Business Information: Business name, VAT number, and compliance-related data where applicable.

Technical Information: IP address, browser, device information, pages visited, and timestamps.

Communication Data: Records of emails, calls, and support interactions.

3. How We Use Your Information

Order Processing: To fulfil orders and manage delivery and returns.
Account Management: To maintain your account and preferences.
Customer Support: To respond to enquiries and improve service.
Legal Compliance: To meet regulatory, VAT, and legal obligations under UK law.
Business Operations: Analytics and internal improvements.

4. Legal Basis for Processing

We process your personal data under the following lawful bases as defined by the UK GDPR:

Contract Performance: Processing necessary to fulfil your order and provide services.
Legal Obligation: Compliance with UK tax, consumer protection, and record-keeping requirements.
Legitimate Interests: Fraud prevention, system security, and business analytics, balanced against your rights.
Consent: Where you have given explicit consent for marketing communications or optional cookies.

5. Information Sharing and Disclosure

Service Providers: Trusted partners assisting with website hosting, email communications, and business operations.
Delivery Partners: Carriers such as Royal Mail, DPD, Evri, and DHL for order fulfilment.
Payment Processors: Secure third-party payment handling via providers such as Stripe, PayPal, and Klarna.
Legal Requirements: Disclosure when required by UK law, court order, or regulatory authority.
Business Transfers: Data may transfer during mergers, acquisitions, or restructuring.

We do not sell your personal data to third parties.

6. Data Security and Protection

We implement encryption, SSL security, access controls, and regular security audits to protect your data. Whilst we strive for maximum protection, no system is completely secure, and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies to enhance user experience, analyse traffic, and improve website functionality. Our use of cookies complies with the Privacy and Electronic Communications Regulations 2003 (PECR). You can manage cookie preferences through your browser settings or our cookie consent tool. Essential cookies are necessary for the website to function and do not require consent.

8. Your Privacy Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your data in certain circumstances.
Right to Restrict Processing: Request limitation of how we use your data.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy and to comply with legal obligations. Order and transaction records are typically retained for six years in accordance with UK tax and accounting requirements. Marketing data is retained until you withdraw consent or request deletion.

10. International Data Transfers

Your personal data is primarily processed within the United Kingdom and the European Economic Area. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, adequacy decisions, or other lawful transfer mechanisms under UK data protection law.

11. Third-Party Services and Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices of these external sites. We recommend reviewing their privacy policies before providing any personal information.

12. Children's Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children under the age of 13. If we become aware that we have inadvertently collected such data, we will delete it promptly.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the most recent changes were made. Continued use of our services following any updates constitutes acceptance of the revised policy.