Privacy Policy

Mitch Makes Magic Happen

Last updated: 18 October 2026

1. Who operates this website?

Mitch Makes Magic Happen is the personal website of John Mitchell, based in Scotland, United Kingdom.

The website introduces visitors to my professional activities, including graphic design, household utilities, business energy services and skincare.

Mitch Makes Magic Happen is not a separate limited company. I operate the website personally and am the data controller responsible for personal information collected through its contact forms and direct enquiries.

Privacy contact details

Email: mitch@mitchmakesmagichappen.com

Correspondence address: 7 The Muir, Bogmoor, Spey Bay, Fochabers, Moray IV32 7PN

Website: https://www.mitchmakesmagichappen.com

Where you engage with one of the businesses or service providers featured on this website, that organisation may have its own privacy notice and responsibilities.

2. What information do I collect?

When you contact me, I may collect:

  • Your name, email address and telephone number, where provided.

  • The service or business activity you're interested in.

  • Information you include in an enquiry form, email or subsequent correspondence.

  • Relevant details you voluntarily provide about household bills, utility suppliers, business energy contracts or design requirements.

  • Records of our communications, quotations, recommendations and agreed work.

The website and its hosting services may also process technical information, such as IP addresses, browser details, device information, cookies and website usage information.

Please don't send passwords, payment card details, bank account information or unnecessary sensitive personal information through the website's general enquiry forms.

3. How do I use your information?

I use personal information to:

  • Respond to enquiries and communicate with you.

  • Understand your requirements and discuss possible solutions.

  • Provide information about relevant services.

  • Prepare quotations, proposals or recommendations.

  • Arrange introductions or services that you request.

  • Maintain appropriate records of our communications.

  • Administer my activities and comply with legal obligations.

  • Protect the website and understand its performance.

I do not automatically add people who contact me to marketing mailing lists.

4. What are my lawful bases for processing?

Under UK GDPR, I rely on different lawful bases depending on the circumstances.

Legitimate interests

To respond to enquiries, manage communications, maintain proportionate business records and protect the website.

My legitimate interests include operating the website effectively and responding to people who have contacted me. I consider these interests against your rights and reasonable expectations.

Contract or steps before entering into a contract

Where processing is necessary to prepare a quotation, discuss services you have requested or fulfil an agreement with you.

Legal obligation

Where information must be processed or retained to comply with applicable law, including relevant accounting and tax requirements.

Consent

Where consent is required for a particular activity, including certain cookies or similar technologies.

The lawful basis used will depend on the specific purpose for which information is processed.

5. Household utilities and business energy enquiries

If you contact me about household bills or business energy, your enquiry comes directly to me first.

I'll use the information you provide to understand your circumstances and help you explore suitable options.

Submitting an enquiry through this website does not automatically register you with Utility Warehouse, an energy supplier, broker or other provider.

If progressing your enquiry involves sharing your personal information with another organisation, I'll explain who will receive it, what information is needed and why before proceeding.

The relevant organisation may then process your information under its own privacy notice and legal responsibilities.

Depending on the particular service and contractual arrangements, I may also be acting in a capacity defined by the relevant supplier or provider. Any additional privacy information required for that activity will be provided at the appropriate stage.

6. Design, skincare and other services

This website includes links to businesses and services with which I am involved.

Stormbringer Design

Stormbringer Design operates through a separate limited company. If you follow a link to its website or engage directly with that company, its own privacy arrangements apply.

If you send a design enquiry to me through Mitch Makes Magic Happen, I'll initially handle that enquiry personally. Where appropriate, I may discuss transferring the enquiry to the company so it can provide the requested services.

Tropic Skincare and other external services

If you follow a link to Tropic or another independently operated website, that organisation's privacy notice will apply to information you provide directly to it.

7. Who receives your information?

Depending on your enquiry and the services involved, personal information may be processed by:

  • Squarespace, which hosts this website and handles contact form submissions.

  • Google Workspace, which provides my business email service and is used to receive, store and respond to enquiries.

  • Professional advisers and service providers where reasonably necessary for administration, security or legal compliance.

  • Utility suppliers, brokers or other service partners where appropriate to an enquiry or service you have requested.

  • Stormbringer Design's operating company, where a design enquiry is passed to it for follow-up.

  • Public authorities where disclosure is required by law.

I don't sell personal information to third-party marketing lists.

I share information only where there is an appropriate purpose and lawful basis.

8. How long do I keep information?

I keep personal information only for as long as reasonably necessary.

My intended retention arrangements are:

Enquiries that do not lead to work or an ongoing service

Normally up to 12 months after our last meaningful contact, unless there is a specific reason to retain the information longer.

Customer and project records

For the duration of the relevant relationship and any additional period necessary for contractual, legal or record-keeping purposes.

Accounting and tax records

For the period required by applicable law.

Website analytics

According to the retention settings and arrangements of the relevant Squarespace services.

I periodically review the information I hold and delete or securely dispose of records that are no longer needed.

9. How do I protect your information?

I take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse and inappropriate disclosure.

These measures include appropriate account security, controlling access to information and limiting disclosure to what is necessary.

No internet-based system can guarantee absolute security.

10. International processing and transfers

Squarespace and Google Workspace may process or store information outside the United Kingdom.

Where personal information is transferred internationally and UK data protection law requires safeguards, I use service providers with appropriate transfer arrangements, such as applicable adequacy regulations or recognised contractual safeguards.

Further information about the relevant arrangements can be requested using the contact details above.

11. Cookies and website analytics

This website is built using Squarespace and uses its built-in analytics to understand website visits and performance.

Squarespace may use cookies and similar technologies for website operation, security and analytics.

I do not currently use Google Analytics, Meta Pixel or separate advertising tracking tools.

Where consent is required for non-essential cookies or similar technologies, the website will provide an appropriate choice before they are used.

Visitors can manage applicable preferences through the website's cookie controls.

Further details about the cookies actually used, their purposes and duration are available through [cookie information or cookie settings link].

12. Marketing communications

I don't currently operate a general promotional email mailing list through this website.

Contacting me through an enquiry form does not automatically subscribe you to marketing.

I'll use your contact details to respond to your enquiry and communicate about services you have requested or agreed to receive.

If I introduce marketing communications in future, I'll update my practices and privacy information and obtain consent where required.

13. Your data protection rights

Depending on the circumstances, you may have the right to:

  • Request access to personal information I hold about you.

  • Ask for inaccurate information to be corrected.

  • Request deletion of your information.

  • Ask for processing to be restricted.

  • Object to certain processing, including processing based on legitimate interests.

  • Request portability of certain information.

  • Withdraw consent where processing relies on consent.

You also have the right to object to the use of your personal information for direct marketing at any time.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, email:

mitch@mitchmakesmagichappen.com

I will normally respond within one month, subject to applicable legal rules.

14. Complaints

If you're concerned about how I've handled your personal information, please contact me first so I can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Website: https://ico.org.uk/make-a-complaint/

15. Changes to this policy

I may update this Privacy Policy if the website, my activities, service providers or legal obligations change.

The latest version will be published on this page with its revision date shown above.