Last updated: 13 October 2026
This policy explains how McIntosh Industries Ltd ("we", "us") handles information in our internal social media publishing tool (the "App"). The App is used only by our own staff to schedule and publish posts to social media accounts that our group owns and manages: MAC Industries, Herdwick Studio and Helix.
Who we are
McIntosh Industries Ltd, a company registered in England and Wales (company number 08205526).
Registered address: Shobdon Industrial Estate, Shobdon Airfield, Herefordshire, HR6 9NR, United Kingdom.
Contact: [email protected]
We are the data controller for information processed by the App.
What the App does
The App lets our team prepare posts (images, videos and text), approve them, and publish them at a chosen time to our own Facebook Pages, Instagram accounts, LinkedIn company page, TikTok account and YouTube channel, using each platform's official API. It is not offered to the public, and no outside users sign in to it.
Information we collect through platform APIs
- Account connection details: when an administrator of our own accounts connects them, the platform gives us access tokens and basic account information, such as the Page or account ID, name, username and profile picture.
- Publishing results: post IDs, links, publishing status and any error messages returned by the platform.
- Basic insights (where enabled): summary figures for our own posts, such as reach or views.
We do not use the App to collect information about members of the public, followers, commenters or other users. We do not read messages, and we do not build profiles of individuals.
Content we upload
Images, videos and wording created by our team are stored on our own server so they can be published. Media is made available at a web address only so the platform can fetch it for publishing.
How we use information
Only to schedule, publish and check the status of our own posts, and to fix publishing errors. Our legal basis is our legitimate interest in running our businesses' social media.
Sharing
We do not sell or rent information. Content is sent only to the platform it is being published on (Meta, LinkedIn, TikTok or Google/YouTube), under that platform's own terms and privacy policy. Our hosting provider stores data on our behalf.
Storage, security and retention
- Data is stored on a server we control. Access tokens are kept in a restricted configuration file and are never shown in the App or written to logs.
- Access tokens are kept only while an account is connected, and are deleted when the connection is removed.
- Publishing records and logs are kept for up to 24 months, then deleted.
Removing access and deleting data
You can disconnect the App at any time from the platform's own settings: Facebook (Settings, then Business Integrations), Instagram (Settings, then Apps and Websites), LinkedIn, TikTok or your Google Account permissions page. To ask us to delete any data the App holds, email [email protected] with the subject "Data deletion request". We will confirm deletion within 30 days.
Google API Services
The App's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is handled in line with the YouTube Terms of Service and the Google Privacy Policy.
Your rights
Under UK data protection law (UK GDPR) you have the right to access, correct or delete your personal data, and to object to or restrict how we use it. Contact us at the address above. You can also complain to the Information Commissioner's Office (ico.org.uk).
Changes
We will update this page if anything changes and revise the date at the top.
