Privacy Policy

Last updated: 1 January 2026

1. Who we are

Milestone Ventures Limited (“we”, “us”, “our”) is the data controller responsible for the personal data described in this policy. We are a company registered in England & Wales under company number 08630719, with our registered office at Grove House Third Floor, 55 Lowlands Road, Harrow, England, HA1 3AW.

If you have any questions about this policy or about how we handle personal data, you can contact us by email at info@milestoneventures.co.uk, by telephone on 01273 360249, or by writing to us at the registered office address above. Please mark any written correspondence for the attention of the Data Protection contact.

2. Scope of this policy

This policy explains how we collect and use personal data when you visit milestoneventures.co.uk, make an enquiry, correspond with us, or enter into or perform a business relationship with us as a customer, supplier or trade partner. As a business-to-business manufacturer of prepared meals and dishes, the personal data we handle is primarily that of professional contacts acting on behalf of the organisations we deal with, together with website visitor data.

3. Categories of data we collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

• Identity and contact data — your name, job title, employer or organisation, email address, telephone number and postal address, where you provide these to us.
• Enquiry and correspondence data — the content of messages you send us through our contact form, by email, by telephone or by post, including details of the products or services you are interested in.
• Commercial relationship data — information needed to manage orders, contracts, deliveries, invoicing and payments where your organisation becomes a customer or supplier, including purchase history and account contact details.
• Technical and usage data — your IP address, browser type and version, device information, and information about how you use our website, collected through cookies and similar technologies (see section 5).

We do not seek to collect special category data (such as health, racial or ethnic origin, or political opinions) through this website. Please do not include such information in enquiry messages unless it is strictly necessary, for example where allergen or dietary requirements are relevant to a product development discussion.

4. Lawful basis for processing

We only process personal data where the law allows us to. The lawful basis we rely on depends on the activity:

Processing activity	Lawful basis
Responding to enquiries made through our website, by email or by telephone	Legitimate interests — to deal with and respond to enquiries about our products and services. Where you initiate contact, we also rely on taking steps at your request prior to entering into a contract.
Managing orders, contracts, deliveries and accounts with customers and suppliers	Performance of a contract with you or your organisation, and our legitimate interest in administering our business relationships.
Keeping accounting, tax and statutory business records	Compliance with a legal obligation.
Operating, securing and improving our website (including necessary cookies)	Legitimate interests — to run a safe, functional website. Optional analytics cookies are set only with your consent.
Sending business updates about our manufacturing services to existing trade contacts	Legitimate interests, or consent where required. You can opt out at any time.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your interests and fundamental rights, and we have concluded that our processing is proportionate and expected in a business context. You have the right to object to processing based on legitimate interests, as explained in section 8.

5. Cookies and analytics

Our website uses a small number of cookies and similar technologies. Strictly necessary cookies are required for the website to function and to remember your cookie preferences. With your consent, we may also use performance and analytics cookies to understand how visitors use the site so we can improve it. Pages that embed a map from Google Maps may set cookies controlled by Google.

You can manage or withdraw your consent at any time. Full details of the cookies we use, their purpose and duration are set out in our Cookie Policy.

6. Sharing and recipients

We do not sell personal data. We share it only where necessary and with appropriate safeguards in place. Recipients may include:

• Service providers who process data on our behalf, such as our website host, IT and email providers, and analytics providers — all bound by contract to act only on our instructions.
• Logistics and delivery partners where their involvement is needed to fulfil an order.
• Professional advisers such as our accountants, auditors and legal advisers, where reasonably required.
• Payment and banking providers for the processing of payments.
• Government bodies, regulators and law enforcement where we are required to disclose data by law, including food safety and tax authorities.

We may also disclose data in connection with the sale, transfer or reorganisation of our business, subject to appropriate confidentiality protections.

7. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet our legal and regulatory obligations:

• Enquiries that do not lead to a relationship — typically retained for up to 24 months from your last contact, then deleted.
• Customer and supplier records — retained for the duration of the relationship and for a period afterwards to handle any queries or claims.
• Accounting and tax records — retained for at least six years after the end of the relevant financial year, as required by UK law.
• Website analytics data — retained for no longer than 26 months.

When personal data is no longer required, we securely delete or anonymise it.

8. Your rights

Under UK data protection law you have the following rights in relation to your personal data:

• The right to be informed about how we use your data — which this policy provides.
• The right of access to a copy of the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure of your data in certain circumstances.
• The right to restrict processing in certain circumstances.
• The right to data portability, to receive certain data in a structured, commonly used format.
• The right to object to processing based on legitimate interests or for direct marketing.
• Rights relating to automated decision-making, as described in section 9.

To exercise any of these rights, please contact us using the details in section 1. We will respond within one month. There is normally no charge, although we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive. We may need to verify your identity before acting on a request.

9. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing, and we do not carry out profiling of this kind. All meaningful decisions in our customer, supplier and enquiry handling involve human consideration.

10. International transfers

We are based in the United Kingdom and aim to keep personal data within the UK or the European Economic Area. Where a service provider processes data outside the UK, we ensure an appropriate safeguard is in place — such as transfer to a country covered by UK adequacy regulations, or the use of the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses — so that your data continues to receive an equivalent level of protection.

11. How we protect data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include access controls, secure storage, staff confidentiality obligations and the use of reputable service providers. While no transmission over the internet can be guaranteed to be completely secure, we take all reasonable steps to safeguard the information we hold.

12. Complaints and the ICO

If you have a concern about how we have handled your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Helpline: 0303 123 1113. Website: ico.org.uk.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when it was last revised. We encourage you to review this page periodically.