Privacy policy
This Privacy Policy explains how Mintkey collects, uses and protects personal data when you browse our website, create an account, place an order, contact us or submit a trade-in enquiry.
1. Who we are
The data controller is Mint Key Limited, trading as Mintkey, company number 15617168, registered office at 5 Brayford Square, London, England, E1 0SG.
For privacy questions or to exercise your rights, contact support@mintkey.co.ukor write to Mint Key Limited, 5 Brayford Square, London, England, E1 0SG. A separate Data Protection Officer contact is not currently published on this website.
2. Personal data we collect
Depending on how you use Mintkey, we may collect:
- identity and contact details, such as name, email address, telephone number and account details;
- delivery and billing information, including address and order history;
- payment and transaction references. TrueLayer and relevant payment providers handle bank authentication; Mintkey does not receive or store online-banking credentials;
- customer-service messages, returns information, trade-in information and feedback;
- technical information such as IP address, browser, device, security logs and information about how you use the site; and
- cookie and preference information, where permitted and where you have made the relevant choice.
3. How we use data and our lawful bases
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Create and manage an account | Name, email, authentication records | Contract; legitimate interests in account security |
| Process, deliver and support an order | Contact, address, order and payment references | Contract; legal obligations |
| Handle returns, refunds and complaints | Order, contact and support records | Contract; legal obligations |
| Prevent fraud and protect the site | Transaction, device and security data | Legitimate interests; legal obligations |
| Send optional marketing | Email address and preferences | Consent, where required |
| Measure site performance | Analytics and device data | Consent, where required; legitimate interests for strictly necessary measurement |
Where we rely on legitimate interests, we balance those interests against your rights and expectations. You can object to direct marketing at any time.
4. Who receives personal data
We share only the data needed for the relevant service with carefully selected providers, including payment and banking providers such as TrueLayer, delivery and fulfilment partners, hosting and account providers, customer-support tools, fraud-prevention and accounting providers, and regulators or law-enforcement bodies where legally required.
We do not sell customer personal data.
5. International transfers
If a provider processes data outside the UK or EEA, we use an adequacy decision or other lawful safeguard such as UK International Data Transfer Agreements, the UK Addendum or EU Standard Contractual Clauses, as applicable. We regularly review the transfer arrangements used by our providers to ensure the appropriate protection is in place.
6. Retention
We keep data only for as long as necessary. In general terms:
- customer accounts: while active and for a reasonable period after closure;
- orders, invoices, tax and accounting records: for the period required by applicable law;
- support and complaint records: for the period needed to resolve the matter and comply with legal obligations;
- marketing preferences: until you withdraw consent, plus a reasonable suppression period to respect that request; and
- security and fraud logs: for the period needed to investigate or protect against incidents.
7. Your rights
Subject to applicable law, you may ask us to access, correct, delete or restrict use of your personal data, object to processing, receive portable data, or withdraw consent where consent is the lawful basis. You may also complain to the UK Information Commissioner's Office or your relevant EEA supervisory authority. To make a request, emailsupport@mintkey.co.uk. We may need information to verify your identity.
8. Cookies and similar technologies
Essential technologies support account sessions, security and checkout. Non-essential analytics, advertising or preference technologies will be used only where legally permitted and after the required consent. See our Cookie Policy for the current inventory and choices.
9. Automated decisions and profiling
Mintkey may use automated checks to help prevent fraud and protect the integrity of payments, accounts and order processing. If automated processing has a legal or similarly significant effect, we will explain the logic, significance and available rights to human review as required by law.
10. Updates
We may update this policy when our services, providers or legal obligations change. We will publish the new version here and, where required, notify affected customers by an appropriate channel.
Last updated: 17 September 2026 · Version 0.2