Responsible Business and Compliance Readiness

The Mining Shop UK Limited is not currently certified to ISO/IEC 27001, ISO 9001 or ISO 14001; has not completed a SOC 2 examination; is not currently Cyber Essentials certified; and is not Investors in People accredited.

We will update this statement only after an independent award or report has been obtained and its scope, date and limitations can be stated accurately. Certification marks and accreditation logos will not be displayed before award.

We have established an internal governance and accreditation-readiness framework covering:

• Document ownership, approval, version control and scheduled review.
• Risk, information-asset, data-processing, supplier, access, incident, training and corrective-action registers.
• Access control, privacy, security monitoring, backups, incident response and business continuity.
• Quality objectives, complaints, root-cause analysis and continual improvement.
• Environmental aspects covering energy, packaging, logistics, cooling, repair, reuse and electronic waste.
• Employee induction, competence, development, engagement, wellbeing and confidential reporting routes.
• Quarterly management review, internal audit and retained evidence.

These controls must operate consistently and generate evidence before an independent assessment can support any external claim.

Policy ownership and evidence

Public policies identify an owner and review date. Internal registers assign responsible people, actions, evidence, due dates and review status. Publishing a policy is the start of implementation, not proof that every control has been independently tested.

Children's privacy

Our services are business and adult oriented and are not directed to children. We do not knowingly seek children's personal data. We will reassess the UK Children's Code and provide age-appropriate information before introducing a service likely to be accessed by children. See our Privacy Policy.

United States privacy

The UK.co.uk service does not presently target US residents. We will assess applicable US state notices and opt-out mechanisms before targeted US expansion or when relevant legal thresholds are approached.

Impressum and overseas notices

An Impressum is not presented for this UK contracting website. A separately operated or German-targeted service must receive local legal review and an appropriate legal notice before launch. See our Legal, Policies and Terms index.

Acceptable use

Customer dashboards, APIs, VPNs, network and remote-management access are governed by our Acceptable Use Policy, Website Terms and applicable service agreements.

Our practical priorities are:

1. Complete Cyber Essentials readiness and independent certification.
2. Operate a functioning information-security management system suitable for later ISO/IEC 27001 assessment.
3. Maintain consistent quality, complaint and corrective-action processes suitable for later ISO 9001 assessment.
4. Measure environmental impacts and objectives suitable for later ISO 14001 assessment.
5. Retain evidence of employee engagement, development, leadership and wellbeing for a future Investors in People assessment.
6. Consider SOC 2 only if customer or market demand justifies the examination scope and ongoing evidence burden.

Our voluntary ethical-sourcing commitments are set out in our Modern Slavery and Ethical Supply Chain Policy. Security concerns should follow our Security and Vulnerability Disclosure Policy.

Policy and accreditation progress register