Privacy Policy
Last updated: 26/01/2026
1. Introduction
Mitchell Contracting Services Ltd (trading as "Mitchell Contracting", "we", "us", "our") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Mitchell Contracting Services Ltd
Registered Office: 8 High Trees, Eaglestone, Milton Keynes, England, MK6 5AQ
Email: [email protected]
3. Information We Collect
3.1 Enquiries and Quotations
When you contact us for a quotation or enquiry, we collect:
- Name
- Email address
- Phone number (if provided)
- Postcode or address (if provided)
- Service interest
- Message content and project details
- Preferred callback times (if provided)
- Any attachments you provide (e.g., drawings, specifications)
3.2 Website Usage
We collect limited technical information through:
- Necessary cookies: Essential for website functionality
- Analytics cookies (with consent): Anonymous usage statistics to improve our website
- Marketing cookies (with consent): To deliver relevant content
See our Cookie Policy for detailed information.
3.3 Customer and Project Data
When you become a customer, we may also collect:
- Full address and site details
- Payment information (processed securely by third-party payment providers)
- Project documentation and correspondence
- Site photographs (with permission)
4. Lawful Bases for Processing
We process your personal data under the following lawful bases:
4.1 Legitimate Interests
We have a legitimate interest in responding to enquiries, providing quotations, and running our business effectively. We balance this against your rights and interests.
4.2 Contract
Processing is necessary for entering into or performing a contract with you (providing quotations and delivering services).
4.3 Consent
For marketing communications and non-essential cookies, we rely on your explicit consent, which you can withdraw at any time.
4.4 Legal Obligation
We may process data to comply with legal obligations, such as accounting and tax requirements.
5. How We Use Your Information
We use your personal data to:
- Respond to enquiries and provide quotations
- Deliver contracted services
- Communicate about projects and schedules
- Process payments and maintain financial records
- Improve our services and website
- Send marketing communications (only with consent, and you can opt out at any time)
- Comply with legal and regulatory requirements
6. Data Retention
We retain personal data for the following periods:
- Enquiries and quotations: 12 months from last contact (unless you become a customer)
- Customer records: 6 years from completion of services (for accounting, tax, and legal purposes)
- Marketing consent: Until you withdraw consent or 3 years of inactivity
- Website analytics: Anonymised data retained for up to 26 months
After these periods, data is securely deleted or anonymised unless we have a legal obligation to retain it longer.
7. Data Sharing and Processors
We may share your data with:
7.1 Service Providers (Processors)
- Website hosting: To host and serve our website
- Email providers: To send and receive communications
- Analytics providers (with consent): To understand website usage
- Payment processors: To process payments securely
All processors are carefully selected and contractually bound to protect your data in accordance with UK GDPR.
7.2 Legal Requirements
We may disclose your data if required by law, court order, or regulatory authority.
7.3 No Third-Party Marketing
We do not sell, rent, or share your personal data with third parties for marketing purposes.
8. International Transfers
We primarily use UK-based service providers. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
- Adequacy decisions by the UK government
- Standard contractual clauses approved by the ICO
- Binding corporate rules
9. Your Rights
Under UK GDPR, you have the following rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data (in certain circumstances)
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent for marketing or cookies at any time
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
10. Security Measures
We implement appropriate technical and organisational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Access controls and authentication
- Regular security updates and monitoring
- Staff training on data protection
- Data minimisation (we only collect what we need)
- Secure disposal of data when no longer required
11. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
12. Complaints
If you have concerns about how we handle your personal data, please contact us first at [email protected]. We will investigate and respond promptly.
You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
13. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when changes were last made. Significant changes will be communicated via our website.
14. Contact Us
For any questions about this privacy policy or how we handle your data, please contact:
Mitchell Contracting Services Ltd
Email: [email protected]
Address: 8 High Trees, Eaglestone, Milton Keynes, England, MK6 5AQ