A part of theMID Group

Privacy Policy

How we collect, use and protect your personal data

Last updated: 26 October 2026

About this policy

This policy explains how MID Digital Solutions Limited (“MID Digital”, “we”, “us”) collects and uses personal data when you visit our website, make an enquiry, or deal with us as a customer, supplier or business contact. It also explains your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We provide business mobile, mobile broadband, refurbished devices and device leasing to businesses. Most of the personal data we handle is the business contact details of people who work for our customers and prospective customers.

Who we are

MID Digital Solutions Limited is the controller of your personal data. We are a company registered in England and Wales (company number 13442975), and we are registered with the Information Commissioner’s Office (ICO) under registration number ZB260438.

The personal data we collect

When you make an enquiry (through a form on this website, by email or by phone):

  • your name, job title and the company you work for
  • your business email address and phone number
  • details of what you’re interested in, such as the service, number of devices and anything you tell us in your message
  • the page of our website you enquired from
  • if you ask for a free bill review, a copy of the bill you send us, which may include the names and mobile numbers of people on your account and their usage

When you become a customer, we also hold:

  • contact details for the people who manage your account, place orders and receive bills
  • details of the services, devices and contracts you have with us
  • billing and payment information, and records of our communications with you
  • the names and mobile numbers of users connected to your account, where you give these to us to set up and manage your services

When you visit our website:

  • technical information that our hosting provider needs to deliver the site and keep it secure, such as your IP address, browser type and the pages requested. We do not use this to identify you.
  • anonymous visit statistics from Cloudflare Web Analytics, such as which pages are viewed, the type of device and the website you came from. It does not use cookies, does not track you across other websites and does not identify you.

Under UK GDPR, we must have a legal basis for each use of your personal data.

  • To respond to your enquiry and give you a quote. Legal basis: our legitimate interests in responding to businesses that contact us. If you are a sole trader or partnership, it may also be to take steps at your request before entering into a contract.
  • To set up and provide our services, manage your account, bill you and provide support. Legal basis: performance of our contract with your business, and our legitimate interests in managing our customer relationships.
  • To keep records of our dealings with you in our customer relationship management (CRM) system, so that your account manager has the full picture. Legal basis: our legitimate interests in running our business efficiently.
  • To keep accounting and tax records and meet other legal obligations. Legal basis: legal obligation.
  • To tell you about similar products and services that may be useful to your business. Legal basis: our legitimate interests, or your consent where the law requires it. You can opt out at any time (see “Marketing” below).
  • To keep our website and systems secure, and to prevent fraud and spam. Legal basis: our legitimate interests.
  • To establish, exercise or defend legal claims. Legal basis: our legitimate interests.

Where we rely on legitimate interests, we have considered your rights and expectations and are satisfied that our interests do not override them. You can object to this use at any time (see “Your rights” below).

Marketing

We may send business contacts information about our products and services that we think will be relevant, such as new devices or network offers. If you are a sole trader or a partnership, we will only send you marketing emails or texts if you have agreed to this, or if you are an existing customer and the marketing is about similar products and services.

Every marketing email we send includes a way to unsubscribe. You can also ask us to stop at any time by emailing [email protected]. We never sell your personal data.

Who we share your data with

We only share personal data where we need to, and we require the organisations we work with to keep it secure and use it only for the purposes we specify.

  • Mobile networks and their partners (for example O2, Vodafone and EE, and the distributors we work with), to connect and manage your services.
  • Our device leasing partner, Lease Group, if you ask us about leasing.
  • Service providers who help us run our business, including:
    • Cloudflare, which hosts this website, protects it from spam and attacks, and provides our cookie-free visitor statistics (Cloudflare Web Analytics)
    • Resend, which delivers the emails sent from our website enquiry forms
    • our CRM, billing, IT and email providers
    • our professional advisers, such as accountants, auditors and solicitors
  • Delivery and logistics companies, to deliver devices to you.
  • Regulators, law enforcement or other authorities, where the law requires us to.
  • A buyer or successor, if all or part of our business is sold or reorganised, in which case your data would continue to be protected in line with this policy.

International transfers

Some of our service providers, such as Cloudflare and Resend, may process personal data outside the UK, including in the United States. Where this happens, we make sure appropriate safeguards are in place, such as the UK Extension to the EU-US Data Privacy Framework, or the ICO’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

How long we keep your data

We only keep personal data for as long as we need it:

  • Bills sent for a free review: only for as long as we need them to complete the review and talk it through with you. If you don’t become a customer, we delete them.
  • Enquiries that don’t lead to an account: up to 2 years from our last contact with you, so that we can follow up on your enquiry and avoid contacting you about things you’ve already declined.
  • Customer records, including contracts, billing and account history: for the length of our relationship and then for 6 years after it ends, to meet our legal, tax and accounting obligations and in case of a dispute.
  • Marketing opt-outs: we keep a record that you’ve opted out so that we don’t contact you again.

After these periods, we securely delete or anonymise the data.

Cookies

This website does not use advertising or tracking cookies, and we do not use cookies to profile you.

  • We count visits using Cloudflare Web Analytics, which does not use cookies or similar technologies and does not identify individual visitors.
  • If spam protection is shown on our enquiry forms, it is provided by Cloudflare Turnstile, which may use technical information about your browser to check you’re not a bot. This is strictly necessary to protect our forms.
  • Links to LinkedIn, Facebook and Google take you to those sites, which have their own privacy policies.

If we introduce any other cookies in future, we will update this policy and, where required, ask for your consent first.

Keeping your data secure

We use appropriate technical and organisational measures to protect personal data, including encrypted connections to this website, access controls so that only staff who need your data can see it, and choosing suppliers with strong security standards. No system is completely secure, but we work hard to protect your information and will act promptly if something goes wrong.

Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you and receive a copy of it
  • rectification: ask us to correct data that is inaccurate or incomplete
  • erasure: ask us to delete your data in certain circumstances
  • restriction: ask us to limit how we use your data in certain circumstances
  • object to us using your data based on our legitimate interests, and to object to direct marketing at any time
  • data portability: ask us to transfer data you gave us to you or another organisation, in certain circumstances
  • withdraw consent at any time, where we rely on your consent

To use any of these rights, email [email protected] or write to us at our registered office. You don’t usually need to pay a fee. We may need to confirm your identity before we respond, and we will reply within one month (or tell you within that month if we need longer because your request is complex).

Complaints

If you’re unhappy with how we’ve handled your personal data, please contact us first and we’ll do our best to put things right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

Changes to this policy

We may update this policy from time to time, for example if we start using a new service provider. The latest version will always be on this page, with the date it was last updated shown at the top.