Privacy Policy
Last updated: 8 June 2026
1. Introduction
This Privacy Policy explains how Mila Resources plc (“Mila Resources”, “we”, “us”, “our”) collects, uses and protects personal data when you visit milaresources.com (the “Site”) or otherwise interact with us.
For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Mila Resources is the data controller of the personal data we collect through the Site.
Our registered office is at C/O Arch Law Limited, Level 1, Devonshire House, 1 Mayfair Place, London, W1J 8AJ, United Kingdom.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact details you submit via forms on the Site, including your name, email address, telephone number and the contents of any enquiry.
- Subscription details if you sign up to receive investor updates, including your name, email address and (optionally) investor type.
- Technical and usage data automatically collected when you visit the Site, including your IP address, browser type and version, device type, operating system, referring URL, pages visited, time and duration of visit, and similar diagnostic information.
- Cookie data, as set out in our cookie banner.
We do not knowingly collect any special category data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, or health information) through the Site.
3. How We Use Your Personal Data
We use personal data for the following purposes:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries you submit | Our legitimate interests (responding to you) |
| Sending you investor or corporate updates that you have requested | Your consent |
| Operating, maintaining and improving the Site | Our legitimate interests (running our website) |
| Detecting and preventing fraud, security breaches and misuse of the Site | Our legitimate interests (security) |
| Complying with legal, regulatory or stock-exchange obligations | Legal obligation |
Where we rely on legitimate interests, we have carried out a balancing assessment and concluded that our interests are not overridden by your rights and freedoms. You have the right to object — see Section 8.
Where we rely on consent (e.g. marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Who We Share Your Data With
We share personal data only where necessary and only with the following categories of recipient:
- Our service providers, including hosting providers (WordPress.com / Automattic, Inc.), analytics providers, email delivery providers and IT support, all of whom are bound by contractual obligations to protect your data.
- Our professional advisers, including legal counsel, auditors, brokers and Nominated Adviser, where relevant to their work for us.
- Regulatory bodies, stock exchanges and law enforcement where we are required to do so by law.
- A prospective buyer in the event of a sale, merger or restructuring of all or part of our business, subject to appropriate confidentiality protections.
We do not sell or rent personal data to third parties for marketing purposes.
5. International Transfers
Some of our service providers are located outside the United Kingdom and the European Economic Area. Where we transfer personal data outside the UK, we ensure an appropriate safeguard is in place, such as:
- a transfer to a country recognised as providing an adequate level of protection by the UK Government; or
- an agreement incorporating the UK International Data Transfer Agreement or the EU Standard Contractual Clauses (with the UK Addendum).
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. Typical retention periods are:
- Enquiry correspondence: up to 24 months after the last interaction.
- Investor mailing list: until you unsubscribe, plus a short reasonable archive period.
- Server logs and analytics: typically up to 26 months.
After retention periods expire, we securely delete or anonymise the data.
7. Security
We have implemented appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no method of transmission over the internet or method of electronic storage is 100% secure.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (“ICO”) and affected individuals as required by applicable law.
8. Your Rights
Under UK GDPR you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to ask us to correct inaccurate or incomplete data.
- Right to erasure — to ask us to delete your personal data in certain circumstances.
- Right to restrict processing — to ask us to suspend processing in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly-used, machine-readable format.
- Right to object — including to processing based on legitimate interests, and to direct marketing.
- Right to withdraw consent — where processing is based on consent.
- Right to lodge a complaint with the ICO at ico.org.uk (or your local supervisory authority).
To exercise any of these rights, contact us using the details in Section 12. We may need to verify your identity before responding.
9. Cookies
The Site uses cookies and similar technologies. A cookie is a small text file stored on your device when you visit a website. We use:
- Strictly necessary cookies — required for the Site to function (no consent needed).
- Analytics cookies — to understand how visitors use the Site (consent-based).
- Embedded content — third-party services (such as YouTube videos or investor newsfeed widgets) may set their own cookies; their cookie practices are governed by their own privacy policies.
You can manage your cookie preferences via the cookie banner on the Site or through your browser settings.
10. Children
The Site is not directed at children under the age of 16 and we do not knowingly collect personal data from them. If you believe that a child has provided us with personal data, please contact us so that we can delete it.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. We encourage you to check this page periodically. Material changes will, where appropriate, be brought to your attention by a notice on the Site.