MidnightChapterUK

MidnightChapterUK Privacy Policy
Last Updated 30 September 2025.

This Privacy Policy describes how and when TebiHost Limited (trading as MidnightChapterUK, "we", "us", "our"), collects, uses, and shares your information when you purchase an item from our Etsy shop (https://www.etsy.com/shop/midnightchapteruk), contact us, or otherwise use our services through Etsy.com or its related sites and services.

By using our services, you acknowledge that you have read and understood this Privacy Policy.

We may change this Privacy Policy from time to time. If we make material changes, we will notify you by revising the date at the top of this policy.

This Privacy Policy does not apply to the practices of third parties that we do not own or control, including Etsy Inc. You can reference the Etsy Privacy Policy to learn more about how Etsy, as a separate data controller, handles your personal information.

Information We Collect

To fulfil your order, you must provide us with certain information (which you authorised Etsy to provide to us), such as your name, email address, postal address, payment information, and the details of the product that you’re ordering. This is the "Order Information."

You may also choose to provide us with additional personal information (e.g., for a custom order) if you contact us directly.

Why We Need Your Information and How We Use It (Legal Bases)

We collect, use, and share your information on several legally recognised bases, as required by the UK GDPR and EU GDPR:

As necessary to perform a contract with you (i.e., to fulfil your order), including processing your payment, arranging for shipping, and providing you with invoices and/or order confirmations.

As necessary for our legitimate interests, if those interests are not overridden by your rights or interests, such as:

Providing and improving our services.

Complying with the Etsy Seller Policy and Etsy Terms of Use.

Using analytics to understand how customers use our shop (see "Information Sharing" below).

As necessary to comply with a legal obligation, such as retaining information about your purchases as required by tax law (e.g., for HMRC).

With your consent, which you may revoke at any time, such as when you have signed up for a specific marketing mailing list we operate. (Marketing communications from Etsy itself are governed by your Etsy account preferences).

Information Sharing and Disclosure

We share your Personal Information with third parties only in very limited circumstances:

With Etsy: We share information with Etsy as necessary to provide you our services and comply with our obligations under both the Etsy Seller Policy and Etsy Terms of Use.

With Third-Party Service Providers: We engage trusted third parties to perform functions and provide services to our shop:

Google Analytics: This service helps us understand how visitors browse our Etsy shop. You can read more about how Google uses your Personal Information here. You can also opt-out of Google Analytics here.

Royal Mail & Other Shipping Providers: We share your name and postal address to facilitate the delivery of your order.
We only share your personal information to the extent necessary to perform these services.

Business Transfers: If we sell or merge our business, we may disclose your information as part of that transaction, only to the extent permitted by law.

Compliance with Laws: We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or government requests; (b) enforce our agreements, terms, and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.

Data Retention

We retain your personal information only for as long as necessary for the purposes set out in this policy.

Order Information: We are required by UK tax law to retain order details (including personal data) for 6 years from the end of the last financial year they relate to. Therefore, we will retain order data for 7 years to ensure compliance.

Customer Service Enquiries: We will retain data from direct enquiries for 2 years to allow for follow-up.

Marketing Lists: We will retain your contact information for direct marketing until you unsubscribe or request deletion.

Transfers of Personal Information Outside the UK and EU

We may store and process your information through third-party hosting services in the United States and other jurisdictions outside the UK and European Economic Area (EEA). Where we transfer your information outside of the UK/EEA, we rely on approved data transfer mechanisms, primarily the UK International Data Transfer Agreement (IDTA) and the EU Standard Contractual Clauses, to ensure that your data is protected. Our service providers, such as Google, have committed to adhering to these clauses.

Your Rights

If you reside in certain territories, including the EU and UK, you have a number of rights in relation to your personal information:

Access. You have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.

Change, Restrict, Delete. You have the right to change, restrict our use of, or delete your personal information. Absent exceptional circumstances (like our need to store data for legal reasons), we will generally delete your personal information upon request.

Object. You can object to (a) our processing of some of your information based on our legitimate interests, and (b) receiving marketing messages from us. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.

Portability. You have the right to receive a machine-readable copy of the personal information you provided to us, which you can use with another service provider.

Complain. If you reside in the EU or UK and wish to raise a concern about our use of your information, you have the right to do so with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).

How to Contact Us

For purposes of EU and UK data protection law, TebiHost Limited is the data controller of your personal information.

If you have any questions or concerns, or if you wish to exercise any of your rights, you may contact us at:
Email: privacy@tebihost.com

For general customer service enquiries, please use: help@midnightchapter.co.uk