Privacy Policy

MM Building Solutions LTD ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share and safeguard personal data when you visit our website mmbsolutions.co.uk, request a quote, or otherwise engage our services. It is issued in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

• MM Building Solutions LTD
• Registered in England & Wales, company number 15156975
• Registered office: 17 Magnolia Court, Harrow HA3 9UB, United Kingdom
• Email: info@mmbsolutions.co.uk
• Phone: +44 7455 928639

We are not required by law to appoint a Data Protection Officer, but any data-protection enquiry can be addressed to the contact details above.

2. Personal data we collect

We may collect and process the following categories of personal data:

• Identity data – first name, last name, title.
• Contact data – billing/site address, postcode, email address and telephone number.
• Project data – information about your property and the works you wish to be carried out (e.g. photos, plans, measurements, scope description).
• Transaction data – details of quotes issued, payments made and services we have provided to you.
• Technical data – IP address, browser type and version, operating system, time-zone setting, device identifiers and other technology on the devices you use to access this site.
• Usage data – information about how you use our website (pages viewed, time on page, navigation paths).
• Marketing data – your preferences in receiving marketing from us.

We do not knowingly collect special-category data (such as health, religion or ethnicity) or data relating to criminal convictions, and we do not knowingly collect personal data from children under 16.

3. How we collect your data

• Directly from you – when you fill in our quote / contact forms, call us, email us, message us on WhatsApp, or correspond with us during a project.
• Automatically – as you interact with our website, through cookies and similar technologies (see our Cookie Policy).
• From third parties – for example referrals, public sources such as Companies House, or analytics providers such as Google Analytics.

4. How we use your data and the lawful basis

Under UK GDPR we will only use your personal data when the law allows us to. Our lawful bases are:

• Contract – to take steps at your request before entering a contract, and to perform a contract we have with you (preparing quotes, scheduling works, carrying out building services, raising invoices).
• Legitimate interests – to run, grow and improve our business; to keep our website secure; to maintain back-office records; and to send service-related communications.
• Legal obligation – to comply with our obligations under tax, accounting, health-and-safety, building-regulations and other applicable UK law.
• Consent – where you have given explicit consent (for example, optional marketing emails or non-essential cookies). You may withdraw consent at any time.

5. Who we share your data with

We will never sell your personal data. We may share it with:

• Trusted sub-contractors and tradespeople involved in delivering your project, under written confidentiality obligations.
• Our accountants, bookkeepers and legal advisers, where strictly necessary.
• IT service providers and hosting providers (such as our website host) acting as processors on our behalf.
• HMRC, regulators and other authorities where required by law.
• Insurers and any successor business in the event of a sale or restructuring of MM Building Solutions LTD.

6. International transfers

Some of our service providers (for example analytics or email providers) are based outside the United Kingdom. Where personal data is transferred outside the UK, we ensure a similar degree of protection is afforded by relying on the UK Government's adequacy regulations, the UK International Data Transfer Agreement or the EU Standard Contractual Clauses (UK Addendum).

7. How long we keep your data

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. In general:

• Quote and enquiry data not converted into a project: up to 24 months.
• Customer / project records: 6 years from the end of the financial year in which the project completes (in line with HMRC requirements).
• Website analytics: as configured in our analytics tools, typically up to 26 months.

8. Your rights under UK GDPR

You have the right to:

• Request access to your personal data (Subject Access Request).
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten") where there is no good reason for us to continue processing it.
• Object to processing carried out on the basis of our legitimate interests.
• Request the restriction of processing of your personal data.
• Request the transfer of your personal data to you or to a third party (data portability).
• Withdraw your consent at any time, where we are relying on consent.

To exercise any of these rights, please email info@mmbsolutions.co.uk. We will respond within one calendar month and will not charge a fee, save where the request is manifestly unfounded or excessive.

9. Cookies

Our website uses a small number of cookies and similar technologies to make the site work and to help us improve it. Full details are set out in our Cookie Policy.

10. Security

We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Access to your personal data is limited to those employees and sub-contractors who have a business need to know.

11. Third-party websites

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

12. Changes to this Privacy Policy

We keep this Privacy Policy under regular review. The "last updated" date at the top of this page tells you when it was last revised. Material changes will be brought to your attention.

13. Complaints to the ICO

If you are not satisfied with how we have handled your personal data or any privacy enquiry, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.