1. Interpretation

1.1 The following definitions apply in this Privacy and Cookie Policy (Policy):

(a) Company: MEWSCRAFT LTD, registered in England and Wales with company number 05585954, trading as Mewscraft and Monnow Interiors.

(b) Personal Data: any information relating to an identified or identifiable living individual.

(c) Website: www.mewscraft.com and any associated pages operated by the Company.

(d) User: any person who accesses the Website, submits an enquiry, requests a quotation or otherwise communicates with the Company.

(e) Cookies: small text files or similar technologies stored on or accessed through a User’s device when visiting the Website.

1.2 This Policy explains how the Company collects, processes, stores and protects Personal Data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended.

1.3 The Company is the data controller in respect of Personal Data collected and processed for the purposes described in this Policy.

2. Information collected

2.1 The Company may collect and process Personal Data provided by Users when accessing the Website, contacting the Company, requesting quotations, purchasing Goods or engaging the Company’s Services.

2.2 Such information may include:

(a) names, job titles and company details;

(b) email addresses, telephone numbers and contact information;

(c) billing, delivery and project addresses;

(d) details of enquiries, quotations, orders and purchases;

(e) project specifications, drawings, requirements and related correspondence;

(f) payment and transaction records; and

(g) any other information voluntarily provided to the Company.

2.3 The Company may also collect certain technical information automatically when a User accesses the Website, including:

(a) Internet Protocol (IP) address;

(b) browser type, device information and operating system;

(c) pages visited and interactions with the Website;

(d) date, time and duration of visits; and

(e) referral sources and general website usage information.

2.4 The Company shall only collect Personal Data which is reasonably necessary for its business operations and the purposes identified in this Policy.

3. Use of Personal Data

3.1 The Company may process Personal Data for the following purposes:

(a) responding to enquiries and requests for information;

(b) preparing and issuing quotations, estimates and proposals;

(c) processing orders and arranging the supply and delivery of Goods;

(d) providing design, refurbishment, fit-out and associated Services;

(e) managing customer accounts, contracts and project communications;

(f) communicating with suppliers, manufacturers, contractors and professional advisers;

(g) issuing invoices, processing payments and maintaining financial records;

(h) maintaining, securing and improving the Website and its functionality;

(i) undertaking appropriate business administration and customer relationship management;

(j) providing information regarding the Company’s Goods, Services and business activities where permitted by law; and

(k) complying with applicable legal, regulatory and contractual obligations.

3.2 The Company shall not sell Personal Data to third parties.

3.3 Personal Data shall not be processed for purposes incompatible with those for which it was originally collected unless otherwise permitted by law.

4. Lawful basis for processing

4.1 The Company shall only process Personal Data where a lawful basis exists under applicable data protection legislation.

4.2 The lawful bases relied upon by the Company may include:

(a) Contractual necessity: where processing is necessary for the performance of a contract with an individual or to take steps at their request before entering into a contract.

(b) Legitimate interests: where processing is necessary for the Company’s legitimate business interests, including responding to enquiries, maintaining customer relationships, managing business operations and protecting the Website, provided such interests are not overridden by the rights and freedoms of the individual.

(c) Legal obligation: where processing is necessary to comply with applicable legal or regulatory requirements.

(d) Consent: where an individual has provided consent for a specific processing activity, including certain marketing communications and non-essential Cookies.

4.3 Where processing is based upon consent, the individual may withdraw that consent at any time. Withdrawal shall not affect the lawfulness of processing carried out before consent was withdrawn.

5. Enquiries, quotations and orders

5.1 Where a User submits an enquiry or requests a quotation, the Company shall process the information provided for the purpose of responding to the enquiry, assessing requirements and preparing the relevant quotation or proposal.

5.2 Where a User places an order or enters into a contract with the Company, Personal Data may be processed as reasonably necessary to:

(a) confirm and administer the order;

(b) manufacture, procure or supply the relevant Goods;

(c) arrange delivery, installation or associated Services;

(d) communicate regarding progress, alterations or completion; and

(e) maintain appropriate contractual and financial records.

5.3 The Company may retain correspondence, quotations, specifications, drawings and associated project information for legitimate business, contractual and record-keeping purposes.

5.4 Where necessary for the performance of an order or contract, relevant information may be shared with manufacturers, suppliers, delivery providers, consultants or subcontractors involved in fulfilling the Company’s obligations.

6. Marketing communications

6.1 The Company may contact existing customers and business contacts regarding its Goods, Services, projects and related business activities where permitted by applicable law.

6.2 The Company shall obtain consent before sending marketing communications where such consent is required under applicable legislation.

6.3 A recipient may object to direct marketing or withdraw any marketing consent at any time by contacting the Company using the details set out in clause 16.

6.4 The Company shall take reasonable steps to ensure that marketing preferences and requests to cease communications are respected.

7. Disclosure of Personal Data

7.1 The Company may disclose Personal Data to third parties where reasonably necessary for the operation of its business or the performance of its contractual obligations.

7.2 Such third parties may include:

(a) employees, representatives and authorised personnel;

(b) manufacturers, suppliers and subcontractors;

(c) delivery and logistics providers;

(d) website hosting, maintenance and information technology providers;

(e) payment processing and financial service providers;

(f) accountants, legal advisers and other professional consultants; and

(g) regulatory authorities, public bodies or law enforcement agencies where disclosure is required by law.

7.3 The Company shall only disclose Personal Data to the extent reasonably necessary for the relevant purpose.

7.4 Where third parties process Personal Data on behalf of the Company, appropriate contractual and organisational safeguards shall be implemented as required by applicable data protection legislation.

8. Security of Personal Data

8.1 The Company shall implement appropriate technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure.

8.2 Such measures may include:

(a) restricted access to personal and business information;

(b) appropriate website and information technology security measures;

(c) secure storage and transmission of information where appropriate;

(d) maintenance and updating of relevant systems; and

(e) limiting access to Personal Data to authorised persons with a legitimate business requirement.

8.3 Although the Company shall take reasonable measures to protect Personal Data, no method of electronic transmission or storage can be guaranteed to be completely secure.

9. Retention of Personal Data

9.1 The Company shall retain Personal Data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including any applicable legal, contractual, accounting or regulatory requirements.

9.2 Retention periods may vary depending upon the nature of the information and the circumstances in which it was obtained.

9.3 The Company may retain:

(a) enquiry and quotation records for a reasonable period to manage potential and ongoing business relationships;

(b) customer and project records for the purposes of contractual administration, warranties, dispute resolution and legitimate business requirements;

(c) financial and transaction records for the periods required by applicable tax and accounting legislation; and

(d) marketing information for as long as there is a lawful basis for its continued processing.

9.4 Where Personal Data is no longer required, the Company shall take reasonable steps to securely delete or anonymise such information, subject to any continuing legal obligations.

10. International transfers

10.1 The Company may engage with customers, suppliers and service providers located outside the United Kingdom.

10.2 Where Personal Data is transferred outside the United Kingdom, the Company shall ensure that such transfers are carried out in accordance with applicable data protection legislation.

10.3 Where required, appropriate safeguards shall be implemented, which may include transfers to countries covered by UK adequacy regulations or the use of approved contractual arrangements.

11. Rights of individuals

11.1 Subject to applicable legal requirements and exemptions, individuals have certain rights in relation to their Personal Data.

11.2 These rights may include:

(a) the right to request access to Personal Data held by the Company;

(b) the right to request correction of inaccurate or incomplete Personal Data;

(c) the right to request erasure of Personal Data in certain circumstances;

(d) the right to request restriction of processing;

(e) the right to object to processing based upon legitimate interests;

(f) the right to object to direct marketing;

(g) the right to data portability where applicable;

(h) the right to withdraw consent where processing is based upon consent; and

(i) rights relating to certain solely automated decisions, where applicable.

11.3 Requests relating to Personal Data should be submitted to the Company using the contact information set out in clause 16.

11.4 The Company shall respond to such requests in accordance with the time limits and requirements established by applicable data protection legislation.

11.5 Individuals also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Website: www.ico.org.uk

12. Use of Cookies

12.1 The Website may use Cookies and similar technologies to support its functionality, maintain security, remember User preferences and improve the experience of visitors.

12.2 Cookies are small text files stored on or accessed through a User’s device when visiting a website.

12.3 The Company may use the following categories of Cookies:

(a) Strictly Necessary Cookies: Cookies required for the operation, security and essential functionality of the Website, including maintaining sessions, supporting shopping basket functionality where applicable and remembering privacy preferences.

(b) Functional Cookies: Cookies used to remember User preferences and support additional Website features.

(c) Analytical Cookies: Cookies used to collect information regarding Website traffic, visitor interactions and general Website performance, enabling the Company to assess and improve its online services.

(d) Third-Party Cookies: Cookies which may be used by external service providers in connection with embedded content, website features or other services integrated into the Website.

12.4 Cookies may be temporary and expire when a browsing session ends, or may remain on a User’s device for a specified period, depending upon their purpose.

12.5 The Company shall only use non-essential Cookies requiring consent where the User has provided the necessary consent.

12.6 Strictly Necessary Cookies may be used without consent where permitted by applicable legislation.

13. Management of Cookies

13.1 Users may manage or restrict the use of Cookies through their internet browser settings.

13.2 Most browsers allow Users to:

(a) view Cookies stored on their device;

(b) delete existing Cookies;

(c) block some or all Cookies; and

(d) configure preferences relating to the storage of Cookies.

13.3 Where the Website provides Cookie consent controls, Users may use those controls to accept, reject or amend their preferences concerning optional Cookies.

13.4 Where consent is required, Users may withdraw that consent at any time through the available Cookie preference controls.

13.5 Restricting or disabling certain Cookies may affect the operation or functionality of parts of the Website.

13.6 The Company shall not make access to the principal content of the Website conditional upon acceptance of non-essential Cookies where consent is required.

14. Third-party websites

14.1 The Website may contain links to websites, platforms or services operated by third parties.

14.2 The Company shall not be responsible for the privacy practices, security arrangements or content of websites which it does not own or control.

14.3 Users are encouraged to review the privacy policies and terms of use of any third-party websites they access.

15. Amendments to this Policy

15.1 The Company reserves the right to amend this Policy from time to time to reflect changes in its business operations, Website functionality or applicable legal and regulatory requirements.

15.2 Any amendments shall be published on the Website, together with the date upon which the Policy was last updated.

15.3 Users are encouraged to review this Policy periodically to remain informed about how their Personal Data is processed.

16. Contact details

16.1 Any questions, requests or concerns relating to this Policy or the processing of Personal Data should be directed to:

MEWSCRAFT LTD
Company Registration Number: 05585954
St John Hall
St Mary’s Street
Monmouth
NP25 3DB
United Kingdom

Email: [email protected]
Telephone: 01600 891522
Website: www.mewscraft.com

16.2 The Company shall endeavour to respond to all reasonable enquiries and shall handle requests concerning Personal Data in accordance with applicable data protection legislation.