Privacy & Cookies

M2 Digital London is the controller for this website. You can contact us about your data on +44 20 3864 9850, in writing at 28-30 Hoxton Square, London, N1 6NN, or through the contact form on this website. We are registered with the Information Commissioner's Office as a data controller.

• Identity and contact data — your name, job title, company, email address, telephone number and billing/delivery addresses.
• Transaction data — orders, quotations, VAT invoices, payment status and correspondence about them.
• Technical data — IP address, browser type and version, time zone setting, pages visited and how you use our website.
• Support data — device models, serial numbers, service and repair history when you ask us for warranty or maintenance help.
• Marketing data — your preferences for receiving news and offers from us.

• To quote, supply, deliver and invoice your orders — performance of a contract.
• To manage payments, fees and chargebacks and to collect debts owed to us — performance of a contract, and compliance with legal obligations.
• To register HP warranties and provide technical support — performance of a contract.
• To keep our records accurate and meet HMRC and Companies Act requirements — legal obligation.
• To send email marketing where you have opted in — consent. If you are an existing customer we may occasionally email you about similar products we supply, relying on the soft opt-in in the Privacy and Electronic Communications Regulations; you can opt out at any time.
• To keep our website secure, and to understand how it is used so we can improve it — legitimate interests.

Card details are entered on our payment provider's secure page and handled under PCI-DSS. Card numbers are never written down, emailed or stored on our systems. We keep only a reference to the transaction so we can match payments to invoices and process refunds.

You will only receive marketing email from us if you have asked for it or under the soft opt-in described above. Every marketing email includes an unsubscribe link, and you can also tell us by phone or email. We do not send marketing text messages, and we do not sell or rent customer lists.

We share the minimum data necessary, under written contracts, with:

• Couriers and installation engineers, to deliver and install your order.
• HP and its authorised service partners, to register warranties and arrange repairs.
• Our payment provider, accountants, insurers and IT support providers.
• Professional advisers where required, and regulators, courts or the police where the law requires or permits it.

We do not sell personal data or share it for third-party advertising.

Our core records are held in the UK. Where a supplier processes data outside the UK, we rely on the UK adequacy regulations where they exist, and otherwise the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with additional safeguards.

• Orders, invoices and payment records: 7 years, for HMRC and legal purposes.
• Customer accounts and contact records: while you are a customer, then up to 3 years.
• Enquiries that do not become orders: 24 months.
• Service and warranty records: the life of the device plus 3 years.
• Marketing consent records: until you withdraw consent, plus 2 years to evidence it.
• CCTV held at our office premises, where applicable: up to 31 days.

We use essential cookies and local storage to keep your basket and preferences working. Analytics and any advertising cookies are only set with your consent, collected by the cookie banner shown on your first visit. Full details, including the individual cookies we set and how long they last, are in our Cookies Policy, and you can withdraw consent at any time by clearing cookies in your browser and reloading the site.

We use encrypted connections (HTTPS) across the website, access controls so only staff who need your data can see it, and we train staff on data protection. We have procedures to deal with suspected personal data breaches and will notify the ICO and affected individuals where the law requires it.

We do not make decisions about you based solely on automated processing, including profiling, that has legal or similarly significant effects.

Under the UK GDPR you have the right to:

• Request access to the personal data we hold about you.
• Request correction of incomplete or inaccurate data.
• Request erasure of your data where there is no good reason for us keeping it.
• Object to processing based on our legitimate interests, and to direct marketing (always honoured).
• Request restriction of processing while we verify a correction or objection.
• Request a portable copy of data you gave us, in a structured, commonly used format.
• Withdraw consent at any time, where we rely on consent.

We respond to all requests within one month and do not usually charge a fee. We may ask for proof of identity to protect your data. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.

We may update this policy from time to time. The version on this page is always current; we will highlight material changes on the website or by email where they affect you.