Privacy Policy

The Mining Shop UK Limited is a company registered in England and Wales, company number 14666497, VAT number GB482035600. Our registered office is Enterprise House, 202 to 206 Linthorpe Road, Middlesbrough, England, TS1 3QW. Our shop and repair centre is at 38 Church Street, Hartlepool, TS24 7DG. This policy covers our websites at theminingshop.co.uk and theminingshop.com, and the services we provide through them.

We supply cryptocurrency mining hardware, hosting, repairs and consultancy to business customers. For any question about this policy or your data, email [email protected] or call 01429 408034.

We collect the following categories of data, depending on how you deal with us:

• Identity and contact details: name, business name, email address, phone number, billing and delivery addresses, collected when you create an account, place an order, request a quote, book a repair or contact us.
• Order and transaction data: products and services purchased, order history, invoices, bank transfer references, the wallet addresses and transaction identifiers for cryptocurrency payments, and the Stripe payment record for card orders under £1,500 excluding VAT. Card details are entered directly with Stripe, our card processor, and full card numbers never touch or persist on our systems.
• Repair and warranty data: device serial numbers, fault descriptions, diagnostic logs, photographs and videos of equipment submitted with warranty or repair claims.
• Hosting data: contact and billing details for hosted fleets, device serials, and operational telemetry such as hashrate, temperatures and uptime used to monitor and maintain hosted machines.
• Compliance data: for larger orders we may collect company registration documents, proof of business address, photographic ID of directors or authorised signatories and source of funds information as part of Know Your Customer and anti money laundering checks.
• Enquiry data: anything you send us through contact forms, callback requests, email, phone or WhatsApp.
• Technical data: IP address, browser type, device information, pages visited and referral source, collected through cookies and similar technologies described in our Cookie Policy.
• CCTV: our Hartlepool premises are covered by recorded CCTV for the security of staff, visitors and stock. Office collections are escorted and recorded.

We do not knowingly collect data from anyone under 18. Our products and services are supplied to business customers only.

UK GDPR requires a lawful basis for each use of personal data. Ours are:

• Performing a contract: processing orders and payments, arranging delivery, providing hosting, carrying out repairs and warranty work, managing your account and providing customer support.
• Legal obligation: keeping accounting and tax records, carrying out Know Your Customer and anti money laundering checks including sanctions screening, and responding to lawful requests from authorities.
• Legitimate interests: securing our websites and premises, preventing fraud, verifying payments, improving our products and pages, keeping records of advice given, and contacting business customers about products and services similar to those they have bought or asked about. You can object to any processing based on legitimate interests.
• Consent: optional marketing and non essential cookies. You can withdraw consent at any time.

We do not use automated decision making that produces legal or similarly significant effects about you, and we do not sell personal data.

We share personal data only where needed to run the business:

• Delivery and logistics partners: couriers such as Royal Mail and DPD, and freight partners for international shipments, receive names, addresses and contact details to deliver orders.
• Hosting facility partners: where machines are hosted at partner facilities, the site operator receives the details needed to receive, install and manage your machines.
• Payment and banking providers: our bank processes transfer details, and Stripe processes card payments for orders under £1,500 excluding VAT as an independent controller of card data, described in the Stripe privacy policy. Cryptocurrency payments are recorded on public blockchains by their nature; we only ever publish the receiving address we issue on your invoice.
• IT and website providers: our web hosting, content delivery and security providers (including Cloudflare), analytics services and email systems process technical data on our behalf under data processing agreements.
• Professional advisers and authorities: accountants, insurers, lawyers, and HMRC or other authorities where the law requires.

We require processors to protect data to UK GDPR standards and to act only on our instructions.

We operate distribution hubs and hosting facilities outside the UK, including in the EU, the UAE, the United States and Asia. Where fulfilling your order or hosting agreement means sending personal data outside the UK, we rely on UK adequacy regulations where they apply, and otherwise on the UK International Data Transfer Agreement or Addendum with appropriate safeguards. You can ask us for details of the safeguards used for a specific transfer.

• Order, invoice and payment records: at least 6 years after the end of the financial year they relate to, as required for UK tax and accounting.
• Know Your Customer and anti money laundering records: 5 years after the end of the business relationship.
• Warranty, repair and diagnostic records: for the warranty or service period plus 12 months, so we can administer claims.
• Enquiries and quotes that do not become orders: up to 24 months.
• CCTV recordings: typically 30 days unless needed for an incident.
• Technical and analytics data: per the retention periods in our Cookie Policy.

When data is no longer needed, we delete it or anonymise it.

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected and incomplete data completed.
• Have data erased where there is no good reason for us to keep it.
• Restrict or object to processing, including any direct marketing, which we will stop on request.
• Data portability for data you provided to us under contract or consent.
• Withdraw consent at any time where consent is the basis we rely on.

To use any right, email [email protected]. We respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We protect data with encryption in transit, access controls limiting data to staff who need it, secure UK based premises with monitored CCTV, verified payment procedures (we never change bank details by email), and staff awareness of data protection duties. Compliance documents submitted for verification are handled securely and used only for the checks described above.

If we become aware of a personal data breach we will contain and assess it without delay, notify the Information Commissioner's Office within 72 hours where the breach is likely to result in a risk to individuals, and inform affected customers directly where the risk is high. Suspected security issues can be reported to [email protected].

Our websites use cookies and similar technologies for essential functionality, performance measurement and, with your consent, marketing. Full details of what we set, why, and how to manage your preferences are in our Cookie Policy.

What data do you collect when I place an order?

Your identity and contact details, delivery address, the products ordered, and the payment reference, meaning a bank transfer reference, the wallet address and transaction identifier for stablecoin payments, or the Stripe payment record for card orders under £1,500 excluding VAT. The full list is in The Personal Data We Collect above.

Do you sell my data or share it with marketers?

No. We never sell personal data, and we share it only with the operational partners listed above, such as couriers, hosting facilities and our IT providers, under data protection agreements.

Why do you ask for ID documents on larger orders?

Orders over £15,000, single or cumulative, may require Know Your Customer and anti money laundering checks, which is a legal obligation on us. Documents are handled securely, used only for those checks, and kept for 5 years after the business relationship ends.

Is my cryptocurrency payment private?

Wallet addresses and transactions are recorded on public blockchains by their nature. We only ever publish the receiving address shown on your invoice, and the link between a transaction and your order exists only in our internal records.

How do I get a copy of my data, or have it deleted?

Email [email protected]. We respond within one month. Erasure applies where no legal duty, such as tax record keeping, requires us to retain the data.

How long do you keep my order records?

At least 6 years after the end of the financial year they relate to, as UK tax law requires. Other retention periods are listed in How Long We Keep Data above.

Who do I complain to if I am unhappy?

Contact us first at [email protected] so we can put things right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Guidance only: these answers summarise the policy for convenience and do not replace or supersede the full text above, which prevails if there is any difference.

We review this policy regularly and update it when our practices or the law change. The date at the top shows the latest revision. Significant changes will be highlighted on this page. Continued use of our websites and services after an update means the current version applies.