Home › Privacy Policy

Privacy Policy

We respect your privacy and are committed to protecting your personal data in compliance with UK GDPR — read our full policy below.

MM Engineering Services Ltd ("we", "us", "our") operates mmengservices.co.uk (the "Site"). We are committed to protecting your privacy under UK GDPR and Data Protection Act 2018. This Privacy Policy explains how we collect, use, and protect your data.


1. Data Controller

MM Engineering Services Ltd
Unit 32 Bradford Chamber Business Park, New Lane, Bradford, BD4 8BX, United Kingdom
Email: sales@mmengservices.co.uk
Data Protection Officer: M Patel


2. Data We Collect

  • Identity: Name, company, job title (forms, quotes).
  • Contact: Email, phone, WhatsApp number, address.
  • Transaction: Orders, payments (via [Stripe/PayPal]).
  • Technical: IP address, browser, device (Google Analytics).
  • Marketing: Preferences (newsletter signup).
  • Usage: Pages viewed, time spent (session cookies).

We collect minimal data for business purposes only.


3. How We Collect Data

  • Directly: Contact forms, checkout, WhatsApp, email enquiries.
  • Automatically: Cookies, analytics tools.
  • Third parties: Payment processors, shipping carriers, Google Ads.

4. How We Use Your Data (Legal Basis)

Purpose & Legal Basis

Process orders/quotes - Contract performance

Communicate (support, updates) - Legitimate interest

Improve site - Legitimate interest

Marketing emails - Consent

Security/fraud prevention - Legal obligation


5. Sharing Your Data

We share with:

  • Payment: Stripe (processors).
  • Shipping: [Carriers e.g. DHL, FedEx, TPN Pallet Network]. Analytics: Google Analytics (anonymised).
  • Marketing: Mailchimp (consent-based).

All processors have UK GDPR contracts. No selling data.


6. International Transfers

Data to US processors (Stripe, Google) uses Standard Contractual Clauses (SCCs). EU/World customers: same safeguards.


7. Data Retention

  • Orders: 7 years (accounting).
  • Enquiries: 2 years.
  • Marketing: Until unsubscribe.
  • Technical: 26 months (analytics).

Deleted securely when no longer needed.


8. Your Rights

  • Access: Free copy of your data.
  • Rectification: Update incorrect data.
  • Erasure: Delete (subject to legal holds).
  • Objection: Stop processing.
  • Portability: Receive data in machine format.
  • Withdraw consent: Anytime.

Email sales@mmengservices.co.uk. Response within 1 month.


9. Cookies

We use:

  • Essential: Cart, checkout.
  • Analytics: Google Analytics (opt-out available).
  • Marketing: Facebook Pixel (consent banner).

Manage via cookie banner (Craft plugin).


10. Security

SSL encryption, secure hosting, access controls. Report breaches within 72 hours.


11. Children's Privacy

Site for adults. No children's data knowingly collected.


12. Changes

We update this policy. Continued use = acceptance. Check footer link.


13. Contact

sales@mmengservices.co.uk
ICO complaints: ico.org.uk