Privacy policy


MD Safety Publishing Ltd

Effective Date: July 2026 

1. Introduction

This Privacy Policy explains how MD Safety Publishing Ltd] (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you purchase digital documents through our website powered by Shopify.
 
We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

MD Safety Publishing Ltd is a UK-based online publisher selling digital documents.

Data Controller:

MD Safety Publishing Ltd
Registered address: Butterworth Barlow House, 10 Derby St, Prescot L34 3LG
support@mdsm.org.uk

3. How We Collect Your Data

We collect personal data when you:
  • Purchase documents through our Shopify store
  • Create an account
  • Subscribe to communications
  • Contact us for support
  • Interact with our website (via cookies and tracking technologies)

4. Personal Data We Collect

4.1 Information You Provide
  • Full name
  • Email address
  • Billing address
  • Account login details
  • Communications and enquiries
4.2 Transaction and Payment Data
  • Purchase details and order history
  • Payment information (processed securely via Shopify and third-party providers; we do not store full payment card details)
4.3 Automatically Collected Data
  • IP address
  • Device and browser information
  • Usage data (pages visited, downloads, time spent)

5. How We Use Your Data

  • We use your personal data to:
  • Process and fulfil document purchases
  • Provide access to downloadable content
  • Manage your account
  • Deliver customer support
  • Improve website functionality and user experience
  • Prevent fraud and ensure platform security
  • Send marketing communications (only where consent is provided)

6. Legal Basis for Processing

We rely on the following lawful bases:
  • Contractual necessity: to process purchases and deliver documents
  • Legal obligation: for tax and accounting compliance
  • Legitimate interests: to operate, secure, and improve our business
  • Consent: for cookies and marketing communications

7. Shopify and Third-Party Services

Our store is hosted on Shopify Inc., which provides the e-commerce platform enabling us to sell our products. Your data may be stored through Shopify’s systems, databases, and applications.
We may also share data with:
  • Payment processors (e.g., Shopify Payments, PayPal)
  • Analytics providers (e.g., Google Analytics)
  • Email marketing platforms
  • IT and hosting providers

Third-Party Data Processors

Alva Digital Downloads (Alva Apps Ltd)
We share basic order details, including customer names, email addresses, and purchase histories, with Alva to automatically deliver and manage digital files, licence keys, and download links after checkout. This processing is strictly limited to fulfilling digital orders and enforcing download security limits.
Pandectes GDPR Compliance (Pandectes P.C.)
We use this service as a consent management platform to manage cookie compliance and capture user consent preferences. They process anonymous technical data (such as anonymised IP locations, browser user agents, and timestamps) to legally log your privacy choices.
Rewind Backups (Rewind Software Inc.)
We share store data, including order histories, customer profiles, and transaction records, with Rewind to create secure, encrypted cloud backups. This ensures business continuity and protects against data loss. Data transfers are protected under standard contractual safeguards for cross-border data flows.
All third parties are required to process your data securely and in accordance with applicable law.

8. International Data Transfers

Some of our service providers (including Shopify) may process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
  • UK adequacy decisions
  • Standard Contractual Clauses (SCCs)

9. Data Retention

We retain personal data only as long as necessary:
  • Order and transaction records: up to 6 years
  • Account data: until account deletion or prolonged inactivity
  • Marketing data: until you withdraw consent

10. Your Rights

Under UK GDPR, you have the right to:
  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
To exercise your rights, contact: support@mdsm.org.uk

11. Cookies and GDPR-Compliant Consent

11.1 Use of Cookies
We use cookies and similar technologies to:
  • Enable core website functionality (e.g., shopping cart)
  • Analyse site usage
  • Personalise content and advertising
11.2 Consent Mechanism
Upon visiting our website, you will be presented with a cookie consent banner that:
  • Allows you to accept or reject non-essential cookies
  • Records your preferences in compliance with UK GDPR and PECR

12. Data Security

We implement appropriate technical and organisational measures, including:
  • SSL/TLS encryption
  • Secure payment gateways via Shopify
  • Access controls and authentication procedures
  • Regular security monitoring
Data Backups and Continuity

To protect our platform from data loss and ensure business continuity, we use automated backup services provided by Rewind Software Inc. ("Rewind"). As a data processor, Rewind securely duplicates and backs up our complete store database, which includes personal data such as customer contact details, shipping addresses, and order histories. This data is handled in encrypted formats under strict security protocols, using verified legal transfer mechanisms to ensure compliance with UK and EU data protection standards.

13. Digital Content and Intellectual Property

All documents sold are protected by copyright and intellectual property laws. Purchase grants a limited, non-transferable licence for personal or permitted business use only. Unauthorised distribution, resale, or reproduction is prohibited.

14. Takedown Policy (DMCA-Style Notice Procedure)

We respect intellectual property rights and respond promptly to valid infringement claims.
14.1 Reporting Infringement
If you believe content available on our site infringes your copyright, please submit a notice including:
  • Your full name and contact details
  • Identification of the copyrighted work
  • URL or location of the infringing material
  • A statement of good faith belief that use is unauthorised
  • A statement that the information provided is accurate
  • Your signature (electronic or physical)
Send notices to: support@mdsm.org.uk
14.2 Our Response
Upon receipt of a valid notice, we will:
  • Investigate the claim
  • Remove or restrict access to the content where appropriate
  • Notify the content provider (if applicable)
14.3 Counter-Notice
If you believe content was removed in error, you may submit a counter-notice with supporting information.

15. Children’s Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal data from children.

16. Complaints

If you are dissatisfied with how we handle your data, you may contact us or lodge a complaint with the UK Information Commissioner’s Office (ICO).

17. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.

18. Contact Us

MD Safety Publishing Ltd

Registered office:
Butterworth Barlow House,
10 Derby Street, Prescot L34 3LG


Trading address:
Suite 120C, Cotton Exchange
Bixteth Street, Liverpool L3 9LQ
e: support@mdsm.org
t: 0844 335 1499

Registered in England and Wales
Company number: 16563407