Privacy policy
Effective 24 September 2026
This policy explains how Middle Media Ltd handles personal information on middle.marketing and in Middle Media Content Research, including our tools for researching, preparing, reviewing and publishing social media content.
For privacy questions or requests, contact support@middle.marketing.
Information we use
- Website enquiries. Information you provide, such as your name, email address, company stage, budget, services of interest and message.
- Connected social accounts. Account and Page identifiers, names, usernames, profile images, granted permissions and access credentials needed to operate integrations authorised by the account owner.
- Content and performance. Posts, captions, media, public engagement information and, where authorised and available, account or post insights such as reach, views, follower counts and aggregate audience information.
- Production and review records. Source references, drafts, edits, approvals, feedback, publishing receipts and relevant operational logs.
- Technical information. Hosting and integration services may process IP addresses, browser or device information, request times and diagnostic information needed to deliver and protect the services.
Information comes from you or the account owner, authorised platform integrations, and public sources such as Instagram and Facebook profiles, public posts and original publisher websites.
Why we use it
We use this information to respond to enquiries, provide agreed services, research content, manage authorised social accounts, prepare and review creative work, publish content when authorised, measure performance and resolve operational or security problems. Access to a connected account does not itself authorise us to publish every draft.
Our tools can use automated and AI-assisted analysis, drafting and editing. Relevant content or instructions may be processed by the service providers used for that workflow. Human feedback and review decisions may also inform later creative work.
Where data-protection law requires a lawful basis, the relevant basis depends on the purpose: providing a requested service or taking steps towards a contract; our legitimate interests in responding to enquiries, operating and improving content services and protecting systems; compliance with legal obligations; or consent where we ask for it. Providing enquiry details is voluntary, although we need a way to contact you to respond. Where processing relies on consent, you can withdraw it by contacting us.
Who receives information
Information is accessible to authorised Middle Media operators and, where appropriate, the client or account owner. We use service providers for functions such as hosting, email, storage, media processing and AI-assisted work. Our website is hosted on Vercel and its enquiry form uses Resend. Meta processes information when Facebook, Instagram or other Meta services are connected or used.
We share only information relevant to the requested service, operation or legal obligation. We do not sell information obtained through Meta integrations. Content intentionally published to a social platform becomes available according to that platform's audience settings and rules.
Access and security
We restrict operational access to authorised people and systems. Social integration credentials are kept outside public website content and are used to perform authorised operations. No service can guarantee absolute security; contact us if you believe information or access has been compromised.
How long information is kept
We keep information for as long as it is reasonably needed to provide the relevant service, maintain operational records, resolve disputes or meet legal obligations. Retention depends on the information and purpose. Disconnecting an integration prevents further authorised access through that connection, but does not automatically erase previously stored records or posts already published on a third-party platform.
Your choices and requests
You can ask us about information we hold about you and request access, correction or deletion. Depending on applicable law, you may also have rights to restrict or object to processing or receive information in a portable format. We may need to verify your authority over an account before acting on a request.
Right to object: you can contact us to object to processing based on legitimate interests, including any direct marketing. You can also raise a complaint with the UK Information Commissioner's Office or your relevant data-protection authority.
To disconnect an integration or request removal of associated data, follow our data deletion instructions or email support@middle.marketing. Do not send passwords, access tokens or other secret credentials.
Third-party services and international processing
Third-party websites and social platforms apply their own privacy policies. Our service providers may process information in countries other than yours. Where applicable data-protection law requires safeguards for international transfers, those requirements apply to the relevant processing.
Changes to this policy
We may update this policy as our services change. The effective date above identifies the current version. Questions can be sent to support@middle.marketing.