Last updated: 11 October 2026
This privacy policy explains how MCR Joinery collects, uses and protects personal information when you visit mcrjoinery.com or contact us. It is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is MCR Joinery [CLIENT TO CONFIRM: registered company name and number, or the name of the sole trader/partnership, and ICO registration number if applicable].
- Address: 76 Deanswood Drive, Leeds, LS17 5JQ
- Telephone: +44 7854 317260
- Email: info@mcrjoinery.com
If you have any questions about this policy or about how we handle your information, please contact us using the details above.
2. What information we collect
Enquiries through our contact form
When you use the form on our contact page we ask for your name, email address, telephone number (optional) and a message about your project. You choose what to include in the message, so please do not include sensitive information that we do not need.
Emails and phone calls
If you email or call us, we keep the details you give us (such as your name, address, contact details and project requirements) so that we can reply, visit your property, prepare a quotation and carry out any work you ask us to do.
Website usage information
We use Google Analytics 4, set up through the Google Site Kit plugin, to understand how the website is used. This collects information such as the pages you view, the approximate area you are in, the type of device and browser you use, and how you arrived at the site. Google Analytics sets cookies in your browser (see section 8). We do not use this information to identify you personally.
Technical information
Our web server and security tools may record your IP address, browser type and the date and time of your visit in server logs, which are used to keep the website secure and working.
3. How and why we use your information (lawful bases)
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Replying to your enquiry, arranging a home consultation and providing a quotation | Taking steps at your request before entering into a contract (Article 6(1)(b)), and our legitimate interests in responding to enquiries (Article 6(1)(f)) |
| Carrying out and managing work you have agreed to, including invoicing and aftercare | Performing a contract with you (Article 6(1)(b)) |
| Keeping accounting and tax records | Legal obligation (Article 6(1)(c)) |
| Understanding how the website is used and improving it | Consent where required for analytics cookies (Article 6(1)(a)), otherwise our legitimate interests in running and improving our website (Article 6(1)(f)) |
| Keeping the website secure and preventing spam | Legitimate interests (Article 6(1)(f)) |
| Establishing, exercising or defending legal claims | Legitimate interests (Article 6(1)(f)) |
We do not use your information for automated decision-making or profiling, and we do not sell your personal information.
4. Who we share your information with
We only share personal information where it is needed to run our business and the website:
- Website hosting. The website and the enquiries submitted through the contact form are stored on our hosting provider’s servers.
- Email delivery. Notification emails from the contact form are sent through SMTP2GO, an email delivery service, and are received in our email inboxes.
- Google. Google Analytics (through Google Site Kit) receives website usage data. Our contact page also contains an embedded Google Map, and if spam protection from Google reCAPTCHA is switched on for the contact form, Google receives technical information about your browser to tell humans from bots. Google may process data outside the UK; it relies on safeguards such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses.
- Professional advisers and authorities. We may share information with our accountants, insurers or legal advisers, or where we are required to by law.
- Subcontractors and suppliers. If we need a subcontractor or supplier to carry out work at your property, we will share only the details they need, such as the address and the work involved.
5. How long we keep your information
- Contact form enquiries and emails that do not lead to work: [CLIENT TO CONFIRM: suggested period, for example 12 months] from the date of the last contact, then deleted.
- Records of customers and completed work, including quotations, contracts and invoices: [CLIENT TO CONFIRM: suggested period, for example 6 years] to meet accounting, tax and legal requirements and to deal with any aftercare or claims.
- Website analytics data: according to the retention settings in our Google Analytics account [CLIENT TO CONFIRM: current retention setting].
6. Your rights
Under UK data protection law you have the right to:
- be told how your information is used (this policy);
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information erased, in certain circumstances;
- restrict how we use your information, in certain circumstances;
- object to processing based on our legitimate interests;
- receive your information in a portable format, where processing is based on consent or a contract and is carried out by automated means; and
- withdraw consent at any time, where we rely on consent. Withdrawing consent does not affect the lawfulness of processing before it was withdrawn.
To exercise any of these rights, email info@mcrjoinery.com or write to us at the address above. We will normally reply within one month. We may need to confirm your identity first.
7. Complaints
If you are unhappy with how we have handled your information, please contact us first so that we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
8. Cookies
Cookies are small text files stored on your device by websites you visit. This website uses the following:
| Cookie or service | Provider | Purpose |
|---|---|---|
| _ga and _ga_ followed by an identifier | Google Analytics | Distinguish visitors and record how the website is used. These are analytics cookies and usually last up to two years. |
| Google Maps (contact page) | When the embedded map loads, Google may set cookies and receive your IP address and device information. | |
| Google reCAPTCHA (contact form, when enabled) | Protects the contact form from spam and abuse. | |
| WordPress and form cookies | This website | Cookies the site needs to work and to prevent form abuse. These do not track you across other websites. |
You can control or delete cookies through your browser settings, and you can prevent Google Analytics from collecting data about your visits by installing the Google Analytics opt-out browser add-on. Blocking some cookies may affect parts of the website. [CLIENT TO CONFIRM: whether a cookie consent banner will be added for analytics cookies; this section should be updated to match.]
9. Links to other websites
Our website may link to other websites, such as social media pages. We are not responsible for the privacy practices of those sites, so please read their privacy policies.
10. Security
We take reasonable steps to protect personal information, including keeping the website software up to date and limiting access to enquiries to people who need them. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page, with the date shown at the top.