🔒 Privacy Policy (UK Website Template)

Last updated 20/04/2026

1. Introduction

Welcome to [Your Website Name] (“we”, “us”, “our”).

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website: [yourdomain.com].

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are (Data Controller)

MDJ Mechanical Designs Ltd
Email: matt.lowe@mdjmechanicaldesigns.co.uk
Address: Unit 23 Folkes Road

                Lye

                Stourbridge

                DY9 8RG

We are the data controller responsible for your personal data.

3. What Data We Collect

We may collect and process the following data:

A. Information You Provide

• Name

• Email address

• Phone number

• Account details (if applicable)

• Messages or enquiries

B. Automatically Collected Data

• IP address

• Browser type and version

• Device information

• Pages visited and time spent

• Referring URLs

C. Cookies & Tracking

We use cookies and similar technologies. See our Cookie Policy for details.

4. How We Use Your Data

We use your personal data to:

• Provide and maintain our website

• Respond to enquiries

• Process transactions

• Improve user experience

• Send marketing communications (only with consent)

• Comply with legal obligations

5. Legal Bases for Processing (UK GDPR)

We rely on the following legal bases:

• Consent – for marketing emails and optional cookies

• Contract – to provide services you request

• Legal obligation – to comply with UK law

• Legitimate interests – to improve our services and website

6. How We Share Your Data

We do not sell your data.

We may share your data with:

• Service providers (e.g., hosting, payment processors)

• Professional advisors (lawyers, accountants)

• Authorities when required by law

All third parties are required to respect your data and comply with UK GDPR.

7. International Data Transfers

If we transfer your data outside the UK, we ensure it is protected by:

• UK adequacy regulations, or

• Standard contractual clauses

8. Data Retention

We keep your personal data only as long as necessary:

• To fulfil the purposes we collected it for

• To comply with legal, accounting, or reporting requirements

9. Your Rights

Under UK GDPR, you have the right to:

• Access your data

• Correct inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact us at: [email]

10. Data Security

We implement appropriate security measures to protect your data, including:

• Encryption (where appropriate)

• Secure servers

• Access controls

However, no system is completely secure.

11. Cookies

We use cookies to:

• Make our website work properly

• Analyse traffic

• Personalise content

You can manage cookies via your browser settings.

12. Children’s Privacy

Our website is not intended for children under 13, and we do not knowingly collect data from children.

13. Complaints

You have the right to lodge a complaint with the UK regulator:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk

We would appreciate the chance to resolve concerns first.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last updated” date.

15. Contact Us

If you have any questions about this Privacy Policy:

Email: [your email]
Address: [your address]

⚠️ Important Notes

• This is a template, not legal advice

• You should customise it based on:

  • Whether you use analytics (Google Analytics, etc.)

  • Whether you collect payments

  • Whether you run ads or tracking pixels

• For high-risk or commercial sites, consider a UK solicitor review

If you want, I can customise this specifically for your website (e.g., ecommerce, SaaS, blog, portfolio) to make it properly tailored and legally tighter.