Privacy
Privacy policy
Last updated 24 October 2026
Who this covers
This policy covers md-dashboard.com, the private dashboard used by the staff of M&D Group. The dashboard has no public users and no sign-up: it is reachable only with a password held by our own team.
What the dashboard holds
- Business data of our own stores — orders, revenue, advertising cost and supplier costs, read from Shopify, Google Ads and our own accounting records.
- Customer data, when a support request is open — the name, email address and order history of a customer who has written to us, shown only so we can answer them. It is read from the store that took the order and is not copied anywhere else.
- A session cookie — set when a member of staff signs in, so they stay signed in. No analytics, no advertising trackers and no third-party cookies are used on this site.
Advertising platform data
Data read from the Google Ads API — campaign cost, impressions, clicks and conversions for accounts owned by M&D Group — is used only to calculate the profitability of our own stores, and is shown only to our own staff. It is never sold, published, shared with third parties, or combined with data from other advertising networks in any product offered to anyone outside the company.
Where it is kept
The dashboard runs on hardware we own and control. API credentials are stored on that machine, are never sent to the browser and are never placed in source control. Access is limited to the staff who need it.
Your rights
If you have bought from one of our stores and want to know what we hold about you, or want it deleted, write to [email protected] and we will answer within 30 days. The store you ordered from is the controller of that order data; this dashboard only reads it.
Changes
If this policy changes we update the date at the top of this page.