Privacy notice.

I'm George, and I run Middo Creates on my own. This page explains what personal information I collect, why, and what you can ask me to do with it. In short: I only collect what I need to do your job, I never sell it, and the site doesn't track you.

Who's responsible for your data

George Middleton, trading as Middo Creates, is the data controller. That means me.

I’m registered with the Information Commissioner’s Office (ICO) as a data controller, registration number ZC271823. You can check it on the ICO register.

Harpenden, Hertfordshire
[email protected]

What I collect

• When you get in touch: your name, email address, phone number if you give it, and whatever you tell me about your project. The brief on the contact page doesn't send anything by itself. It opens a pre-filled email that you choose whether to send.
• When you book me: your business name and address, invoice and payment details, and the messages we exchange about the work.
• On a shoot: photos and video, which can include you, your staff, your customers, or people and property in the background.
• On Instagram and other social apps: anything you send me there. Those apps have their own privacy policies.

Why I use it, and the legal basis

• To reply to you and quote for work: taking steps at your request before a contract.
• To do the work, invoice and get paid: performing our contract.
• To keep business and tax records: legal obligation.
• To show finished work in my portfolio and on social media: legitimate interests (showing what I do). You can ask me not to, or to take something down, at any time.

I don't send marketing emails. I don't sell or rent your information, and I don't use it to make automated decisions about you.

Who I share it with

Only the services I need to run the business, and each one only gets what it needs for its part:

• Fly.io: hosts this website on servers in London.
• Cloudflare: protects the website and forwards email sent to my address.
• Google: my email inbox, and the fonts on this site, which your browser loads from Google.
• My accountant and HMRC, for tax.
• Anyone else only if the law requires it.

Some of these companies are based in the US. Where your information leaves the UK, it's protected by the UK's adequacy rules or the standard contract terms the law requires.

How long I keep it

• Enquiries that don't turn into work: up to 12 months, then deleted.
• Client records and invoices: 6 years, as required for tax.
• Raw footage: as long as it's useful for your project and my portfolio. Ask me any time and I'll delete it.

Cookies

This site doesn't use cookies, analytics or advertising trackers, so there's nothing to accept or reject. Like any website, the hosting and security services keep short-lived technical logs (such as IP addresses) to keep the site running and safe.

Your rights

You can ask me to:

• give you a copy of the information I hold about you
• correct it
• delete it
• stop or limit using it
• send it to you or someone else in a usable format

You can also object to any use based on legitimate interests, including portfolio use. Email [email protected]. It's free, and I'll reply within a month.

If you're in footage I've posted and you'd like it taken down, just ask.

Complaints

Please talk to me first, and I'll do my best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes

If I change how I handle your information, I'll update this page and the date at the top.