Privacy Policy

Last updated: 22/05/2026

This Privacy Policy explains how Midnight Merchandise collects, uses, stores and protects personal information when you visit this website, contact us, sign up to our mailing list, purchase digital products, submit a project enquiry, upload files or otherwise interact with our services.

This website is operated by Midnight Merchandise. Throughout this Privacy Policy, “Midnight Merchandise”, “Midnight”, “we”, “us” and “our” Midnight Merchandise.

Midnight Merchandise provides merchandise design services, digital design products, mockups, tech pack resources, production-ready artwork, supplier preparation, content, resources and related services.

This website is hosted on Squarespace, which provides the website platform, hosting, ecommerce and related tools that allow us to operate this website.

By using this website or submitting information through it, you acknowledge that you have read and understood this Privacy Policy.

2. Personal information we collect

The personal information we collect depends on how you interact with the website and our services.

We may collect and process the following categories of personal information.

2.1 Information you provide directly

Contact and enquiry information

When you contact us, submit a project enquiry or use the contact form, we may collect:

  • your name

  • your email address

  • the type of support you need

  • your project details

  • information about what you are making

  • information about what stage your project is at

  • any references, artwork, files or examples you upload

  • any other information you choose to include in your message

This information is used to review your enquiry, respond to you, assess whether the project is a fit, provide guidance, prepare quotes, discuss services and manage potential or active client work.

Newsletter and marketing signup information

When you sign up for updates, early access, discount codes, blog posts, digital product releases or other marketing communications, we may collect:

  • your first name

  • your last name

  • your email address

  • your signup date

  • your marketing preferences

  • email engagement information, such as whether you open or click emails, if this is tracked by our email platform

You can unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us directly.

Order and purchase information

When you purchase a digital product or other product from the website, we may collect:

  • your name

  • your email address

  • billing information

  • order details

  • product purchase history

  • payment status

  • download or access information

  • correspondence relating to the order

Payment information may be processed by third-party payment providers. We do not store full payment card details ourselves.

Client project information

If you become a client, we may collect and process information required to deliver the agreed work, including:

  • contact details

  • business or brand information

  • logos, artwork, references and design files

  • supplier information

  • production requirements

  • project briefs

  • feedback and approvals

  • invoice and payment records

  • correspondence relating to the project

This information is used to manage, deliver, revise, invoice and complete client work.

2.2 Information collected automatically

When you visit the website, certain information may be collected automatically through Squarespace, cookies, analytics tools, advertising tools or similar technologies.

This may include:

  • IP address

  • browser type

  • device type

  • operating system

  • pages viewed

  • time spent on the website

  • referring website or source

  • approximate location based on IP address

  • interactions with website content

  • cart or checkout activity

  • cookie identifiers

  • analytics and performance data

This information helps us understand how the website is used, improve the website, monitor performance, protect the website, understand marketing activity and improve our products and services.

2.3 Information from third parties

We may receive limited information from third-party platforms and service providers, including:

  • Squarespace

  • payment processors

  • email marketing platforms

  • analytics providers

  • advertising platforms such as Meta or Google, if used

  • social media platforms

  • cloud storage or file management providers

  • professional advisers or service providers

The information received depends on how those services are connected to this website and how you interact with them.

3. How we use your personal information

We use personal information for the following purposes.

3.1 To respond to enquiries

We use enquiry information to:

  • read and respond to your message

  • review your project details

  • assess whether we can help

  • ask follow-up questions

  • provide initial guidance

  • prepare quotes or proposals

  • arrange calls or consultations

Lawful basis: legitimate interests and/or steps taken before entering into a contract.

3.2 To provide services

If you become a client, we use your information to:

  • deliver agreed design or merchandise services

  • prepare artwork, mockups, tech packs or related documents

  • communicate about the project

  • manage revisions, feedback and approvals

  • liaise with suppliers where required

  • provide production or supplier-preparation support

  • invoice and receive payment

  • maintain project records

Lawful basis: contract and legitimate interests.

3.3 To process digital product orders

We use order information to:

  • process your purchase

  • provide access to digital products

  • send order confirmations

  • manage downloads or product access

  • handle customer support

  • manage refunds, cancellations or technical issues where applicable

  • keep purchase and accounting records

Lawful basis: contract, legal obligation and legitimate interests.

3.4 To send marketing emails

If you sign up to receive updates, we may use your information to send:

  • digital product updates

  • discount codes

  • blog posts

  • production notes

  • early access updates

  • service updates

  • relevant Midnight Merchandise news

You can unsubscribe at any time.

Lawful basis: consent.

3.5 To improve the website and services

We may use website and analytics information to:

  • understand how visitors use the website

  • identify popular pages, posts or products

  • improve website layout and performance

  • test and improve product pages

  • understand where visitors come from

  • improve advertising and content strategy

  • make the website more useful and reliable

Lawful basis: legitimate interests and/or consent where required for cookies or similar technologies.

3.6 To manage advertising

If we use advertising tools such as Meta, Instagram, Google or similar platforms, we may use limited website and interaction data to:

  • measure ad performance

  • understand which content drives visits or enquiries

  • retarget visitors where legally permitted

  • improve advertising relevance

  • manage campaign performance

Where required, non-essential advertising cookies or tracking technologies will only be used with your consent.

Lawful basis: consent where required, and legitimate interests where appropriate.

3.7 To protect the business and website

We may use information to:

  • prevent fraud

  • secure the website

  • detect suspicious activity

  • enforce our terms

  • protect our intellectual property

  • respond to misuse of digital products

  • resolve disputes

  • protect legal rights

Lawful basis: legitimate interests and legal obligation.

3.8 To comply with legal and administrative requirements

We may use and retain information to:

  • keep accounting and tax records

  • comply with legal obligations

  • respond to lawful requests

  • manage disputes or claims

  • maintain business records

Lawful basis: legal obligation and legitimate interests.

4. Cookies and similar technologies

This website may use cookies and similar technologies to operate the website, support ecommerce functions, understand website performance, improve user experience and support marketing or advertising.

Cookies may include:

  • strictly necessary cookies

  • analytics cookies

  • performance cookies

  • preference cookies

  • marketing or advertising cookies

Strictly necessary cookies are required for the website to function, such as checkout, cart, security or core website operation.

Non-essential cookies, such as analytics or advertising cookies, should only be used where required consent has been given through the website cookie banner or cookie settings.

You can usually adjust cookie settings through your browser or through the website’s cookie settings, where available.

5. How we share personal information

We do not sell your personal information.

However, we may share personal information with trusted third parties where necessary to operate the website, provide services, process orders, manage marketing, comply with law or protect our business.

This may include:

  • website hosting providers, including Squarespace

  • ecommerce and checkout providers

  • payment processors

  • email marketing platforms

  • analytics providers

  • advertising platforms, if used

  • cloud storage providers

  • file transfer or project management tools

  • accountants or bookkeeping providers

  • legal or professional advisers

  • suppliers or production partners, where needed for a project

  • law enforcement, regulators or public authorities where required by law

  • physical address for order deliveries

We only share personal information where there is a valid reason to do so and, where appropriate, we require service providers to protect the information they process.

6. Squarespace

This website is hosted by Squarespace.

Squarespace may process personal information on our behalf in order to provide website hosting, ecommerce, checkout, analytics, security and related website services.

Information submitted through the website may be processed by Squarespace and its service providers. Squarespace may process information in countries outside the United Kingdom.

You can review Squarespace’s own privacy information through Squarespace’s website.

7. Payment processing

Payments may be processed by third-party payment providers connected to Squarespace.

When you make a purchase, payment providers may collect and process payment details, billing details and transaction information. We do not intentionally store full card numbers or full payment account details ourselves.

Payment providers process your information in accordance with their own privacy policies and security standards.

8. Email marketing

If you sign up for emails, your name and email address may be processed by our email marketing provider.

We may use email marketing tools to:

  • manage mailing lists

  • send newsletters

  • send discount codes

  • send product updates

  • send blog updates

  • measure email performance

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us directly.

Unsubscribing from marketing emails does not stop us from sending necessary service, order, project or legal communications.

9. Uploaded files and project materials

If you upload artwork, references, examples, logos, supplier files, briefs or other project materials through the website, we will use those files to review your enquiry, respond to you and, where applicable, deliver agreed services.

Please do not upload confidential, sensitive or third-party material unless you have the right to share it with us.

You are responsible for ensuring that any files, logos, images, artwork, references, trademarks or brand materials you provide are lawful for you to share and use.

We may store uploaded files for a reasonable period to manage enquiries, project records, disputes, legal obligations and future reference.

10. International transfers

Some of the service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we rely on appropriate safeguards where required by applicable data protection law. These may include adequacy regulations, standard contractual clauses or equivalent legal mechanisms.

11. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, manage orders, comply with legal obligations, resolve disputes and maintain business records.

Typical retention periods may include:

  • general enquiries: up to 24 months after the last contact

  • client project records: up to 6 years after the end of the project

  • invoice and accounting records: up to 6 years or longer if required by law

  • digital product order records: up to 6 years for accounting, tax and customer support purposes

  • newsletter data: until you unsubscribe or we remove inactive subscribers

  • uploaded project files: for the duration of the project and for a reasonable archive period afterwards

  • analytics data: according to the retention settings of the relevant analytics tool

We may retain information for longer where necessary to establish, exercise or defend legal claims, comply with legal obligations or resolve disputes.

12. Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no website, internet transmission, email communication or digital storage system is completely secure. You should avoid sending highly sensitive or confidential information through unsecured channels.

If you are sharing confidential project information, please contact us first so we can agree the most appropriate way to receive it.

13. Your rights

Depending on your location and applicable law, you may have rights in relation to your personal information.

Under UK data protection law, you may have the right to:

  • request access to the personal information we hold about you

  • request correction of inaccurate or incomplete information

  • request deletion of your personal information

  • request restriction of processing

  • object to certain processing

  • request transfer of your information

  • withdraw consent where processing is based on consent

  • object to direct marketing

  • complain to the UK Information Commissioner’s Office

These rights are not absolute and may be subject to legal limitations.

To exercise your rights, contact us using the email address listed in this Privacy Policy. We may need to verify your identity before responding to a request.

14. Marketing choices

You can opt out of marketing emails at any time by:

  • clicking the unsubscribe link in any marketing email

  • contacting us directly using the email address in this policy

If you opt out of marketing emails, we may still send you non-marketing messages, such as order confirmations, project communications, invoices, legal notices or customer support replies.

15. Children

This website and our services are not intended for children.

We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will take reasonable steps to delete it where required.

16. Third-party links

This website may include links to third-party websites, social media platforms, payment providers, suppliers or other external services.

We are not responsible for the privacy practices, content or security of third-party websites or platforms. You should review the privacy policies of any third-party services you use.

17. Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it.

You also have the right to complain to the UK Information Commissioner’s Office.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, legal requirements, tools or data practices.

When we update this Privacy Policy, we will update the “Last updated” date at the top of this page.

The latest version will always be available on this website.

9. Contact

If you have questions about this Privacy Policy, how we handle personal information, or if you want to exercise your data protection rights, contact: info@midnightmerchandise.com