M Hale’s Privacy Policy

Privacy Policy – M Hale Ltd

This Privacy Policy explains how M Hale Ltd (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website or contact us regarding our services.

1. Information We Collect

We may collect the following information:
• Name, email address, phone number, and contact details
• Project information submitted through enquiry forms
• Technical data such as IP address, browser type, and device information
• Any information you voluntarily provide when communicating with us

2. How We Use Your Information

We use your information to:
• Respond to enquiries and provide quotations
• Deliver our services
• Improve our website and customer experience
• Maintain internal records
• Comply with legal obligations
We do not sell or share your data with third parties for marketing.

3. Legal Basis for Processing

We process personal data under the following lawful bases:
• Contract — to provide services or respond to enquiries
• Legitimate Interests — to operate and improve our business
• Consent — when you choose to receive communications from us
• Legal Obligation — where required by law

4. Data Storage & Security

We store your information securely and take reasonable steps to protect it from loss, misuse, or unauthorised access. Only authorised personnel can access your data.

5. How Long We Keep Your Data

We retain personal information only as long as necessary for:
• Providing services
• Meeting legal or accounting requirements
• Resolving disputes

6. Your Rights

Under UK GDPR, you have the right to:
• Access your personal data
• Request correction or deletion
• Object to processing
• Request data portability
• Withdraw consent at any time
To exercise these rights, contact us at info@mhaleltd.co.uk

7. Cookies

Our website may use cookies to improve functionality and analyse traffic. You can disable cookies in your browser settings.

8. Third‑Party Services

We may use trusted third‑party tools (e.g., analytics, hosting providers). These providers only process data on our behalf and must comply with UK GDPR.