Privacy Policy

1. Information we collect

We collect the following categories of personal information when you interact with our store:

• Contact details such as your name, email address, billing address and, where relevant, delivery address.
• Order information including the products you buy, order value, currency and order history.
• Account information if you choose to create a customer account (email, password hash, saved preferences).
• Payment information processed securely by Shopify Payments and other approved processors — we do not store full card details on our systems.
• Technical information such as IP address, browser type, device type, referring URL and pages viewed.
• Communications you send us, including support emails and newsletter interactions.

2. How we use your information

We use your information to:

• Process and deliver your digital orders.
• Provide customer support and respond to enquiries.
• Manage your customer account, if you have one.
• Send transactional emails (order confirmations, download links, receipts).
• Send marketing emails where you have opted in.
• Detect and prevent fraud, abuse and security incidents.
• Improve our website, products and customer experience.
• Comply with our legal, tax and accounting obligations.

3. Shopify checkout and payment processing

Our checkout, payment processing and order management are powered by Shopify Inc. When you place an order, information you enter at checkout (including name, address, email and payment details) is collected and processed by Shopify on our behalf. Payment card data is handled directly by Shopify Payments and its underlying processors and is never stored on our own servers. Shopify's use of your data is governed by its own privacy policy, which we recommend you review at shopify.com/legal/privacy.

4. Customer accounts

You can browse and purchase from the Archive as a guest. If you choose to create an account, we store your email, an encrypted password and your order history so you can access your downloads, view past orders and manage your details. You can request deletion of your account at any time by contacting us.

5. Email newsletter subscriptions

You may subscribe to our newsletter to receive occasional dispatches about new releases, host tips and free mini mysteries. We only send marketing emails to subscribers who have opted in. Every email includes a one-click unsubscribe link, and you can withdraw consent at any time by emailing us.

6. Cookies

We use a small number of cookies and similar technologies to make the site work, remember your selected country/currency, maintain your shopping cart, keep you signed in and understand how the site is used. Essential cookies are required for the site to function. Analytics and marketing cookies are only set where permitted by your browser settings and, where required, your consent. You can control cookies through your browser at any time.

7. Analytics

Where enabled, we use privacy-respecting analytics tools (which may include Shopify Analytics and comparable providers) to understand aggregate traffic patterns, popular products and site performance. These tools may set cookies or collect technical information such as IP address, browser and referring page. We do not use this data to identify individual visitors.

8. Data security

We take appropriate technical and organisational measures to protect your personal information, including encrypted connections (HTTPS), restricted access controls, secure hosting and vetted third-party providers. No online service can be guaranteed 100% secure, but we work continually to safeguard your data.

9. Data retention

We retain your personal information only for as long as necessary for the purposes described in this policy, including to fulfil orders, provide ongoing access to purchased digital downloads, comply with UK tax and accounting law (typically six years), resolve disputes and enforce our agreements. When information is no longer required, it is securely deleted or anonymised.

10. Your GDPR rights

Under UK GDPR you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten"), subject to legal exceptions.
• Restrict or object to certain processing.
• Request portability of the data you have provided.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us using the details below.

11. Third-party services

To operate the store we share limited data with trusted third-party providers, including:

• Shopify — ecommerce platform, checkout and payment processing.
• Filemonk — secure delivery of your digital downloads after purchase.
• Email delivery providers used for transactional and, where applicable, marketing emails.
• Analytics and hosting providers necessary to run and improve the site.

Each provider is bound by its own privacy terms and processes data only on our instructions for the purposes described above.

12. Contact us

For any privacy enquiries, or to exercise your GDPR rights, please contact:

The Midnight Archive
Email: hello@midnightarchive.co.uk