MM Engineering Services Ltd ("we", "us", "our") operates mmengservices.co.uk (the "Site"). We are committed to protecting your privacy under UK GDPR and Data Protection Act 2018. This Privacy Policy explains how we collect, use, and protect your data.
1. Data Controller
MM Engineering Services Ltd
Unit 32 Bradford Chamber Business Park, New Lane, Bradford, BD4 8BX, United Kingdom
Email: sales@mmengservices.co.uk
Data Protection Officer: M Patel
2. Data We Collect
- Identity: Name, company, job title (forms, quotes).
- Contact: Email, phone, WhatsApp number, address.
- Transaction: Orders, payments (via [Stripe/PayPal]).
- Technical: IP address, browser, device (Google Analytics).
- Marketing: Preferences (newsletter signup).
- Usage: Pages viewed, time spent (session cookies).
We collect minimal data for business purposes only.
3. How We Collect Data
- Directly: Contact forms, checkout, WhatsApp, email enquiries.
- Automatically: Cookies, analytics tools.
- Third parties: Payment processors, shipping carriers, Google Ads.
4. How We Use Your Data (Legal Basis)
Purpose & Legal Basis
Process orders/quotes - Contract performance
Communicate (support, updates) - Legitimate interest
Improve site - Legitimate interest
Marketing emails - Consent
Security/fraud prevention - Legal obligation
5. Sharing Your Data
We share with:
- Payment: Stripe (processors).
- Shipping: [Carriers e.g. DHL, FedEx, TPN Pallet Network]. Analytics: Google Analytics (anonymised).
- Marketing: Mailchimp (consent-based).
All processors have UK GDPR contracts. No selling data.
6. International Transfers
Data to US processors (Stripe, Google) uses Standard Contractual Clauses (SCCs). EU/World customers: same safeguards.
7. Data Retention
- Orders: 7 years (accounting).
- Enquiries: 2 years.
- Marketing: Until unsubscribe.
- Technical: 26 months (analytics).
Deleted securely when no longer needed.
8. Your Rights
- Access: Free copy of your data.
- Rectification: Update incorrect data.
- Erasure: Delete (subject to legal holds).
- Objection: Stop processing.
- Portability: Receive data in machine format.
- Withdraw consent: Anytime.
Email sales@mmengservices.co.uk. Response within 1 month.
9. Cookies
We use:
- Essential: Cart, checkout.
- Analytics: Google Analytics (opt-out available).
- Marketing: Facebook Pixel (consent banner).
Manage via cookie banner (Craft plugin).
10. Security
SSL encryption, secure hosting, access controls. Report breaches within 72 hours.
11. Children's Privacy
Site for adults. No children's data knowingly collected.
12. Changes
We update this policy. Continued use = acceptance. Check footer link.
13. Contact
sales@mmengservices.co.uk
ICO complaints: ico.org.uk
