top of page

MRI - PRIVACY AND DATA PROTECTION POLICY

 

Document title - Privacy & Data Protection Policy

Company - Mechanical Removals & Installations Ltd ("MRI Ltd")

Document owner - Managing Director

Version - 1.0

Policy Number - POL-009

Approved by - Mark Collier Snr, Managing Director

Approval date - 21/01/2026

Effective date - 21/01/2026

Next review date - 21/06/2026

 

PRIVACY AND DATA PROTECTION POLICY

Mechanical Removals & Installations Ltd ("MRI Ltd")

 

1. Purpose

This policy defines MRI Ltd’s commitment to protecting personal data and ensuring that all information is handled securely, fairly and in accordance with applicable data protection legislation.

As a business operating across enquiries, project delivery, client relationships and digital platforms, MRI Ltd recognises the importance of maintaining the confidentiality, integrity and lawful processing of personal data.

This policy is aligned with:

  • UK General Data Protection Regulation (UK GDPR)

  • Data Protection Act 2018

  • Information Commissioner’s Office (ICO) guidance and best practice

 

2. Scope

This policy applies to all personal data processed by MRI Ltd in connection with its operations, including:

  • Client and customer information

  • Supplier and subcontractor data

  • Employee and contractor data

  • Website enquiries, contact forms and communications

  • Project-related documentation and correspondence

It applies to all employees, management personnel and any third parties handling data on behalf of MRI Ltd.

 

3. Responsibilities

Responsibility for data protection is defined as follows:

  • Managing Director
    Overall accountability for data protection compliance and implementation

  • Management Team
    Responsible for ensuring appropriate controls and procedures are in place

  • Employees and Operatives
    Responsible for handling personal data securely and in accordance with this policy

  • Third Parties & Service Providers
    Required to process personal data in line with legal requirements and MRI Ltd standards

 

4. Commitments

MRI Ltd is committed to the following:

 

4.1 Lawful, Fair & Transparent Processing

  • Processing personal data in a lawful, fair and transparent manner

  • Collecting data only for legitimate business purposes

  • Ensuring individuals are aware of how their data is used

 

4.2 Data Minimisation & Accuracy

  • Collecting only data that is necessary for defined purposes

  • Maintaining accurate and up-to-date records

  • Correcting inaccuracies where identified

 

4.3 Data Security

  • Protecting personal data against unauthorised access, loss or misuse

  • Implementing appropriate technical and organisational security measures

  • Restricting access to authorised personnel only

 

4.4 Data Retention

  • Retaining personal data only for as long as necessary

  • Disposing of data securely when no longer required

 

4.5 Controlled Data Sharing

  • Not sharing personal data with third parties unless:

    • Required by law

    • Necessary for service delivery

    • Supported by appropriate safeguards

 

4.6 Individual Rights

MRI Ltd respects the rights of individuals under UK GDPR, including:

  • The right to access personal data

  • The right to rectify inaccurate data

  • The right to request erasure where applicable

  • The right to restrict or object to processing

Requests can be made directly to MRI Ltd using the contact details provided below.

 

4.7 Compliance

MRI Ltd will:

  • Comply with all relevant data protection legislation

  • Follow guidance issued by the Information Commissioner’s Office (ICO)

  • Maintain appropriate procedures and records relating to data processing

  • Ensure data protection is integrated into business processes

 

5. Operational Approach

MRI Ltd maintains a structured approach to data protection through:

  • Secure storage systems and controlled access to data

  • Safe handling of email enquiries, contact forms and client information

  • Limiting data access to authorised personnel only

  • Maintaining awareness of data protection responsibilities across the organisation

  • Monitoring and reviewing data handling practices

  • Addressing any data breaches or concerns promptly and appropriately

 

6. Continuous Improvement

MRI Ltd is committed to continuous improvement by:

  • Reviewing data protection practices and procedures regularly

  • Monitoring compliance and identifying areas for improvement

  • Updating controls in line with legislative changes and best practice

  • Strengthening awareness and understanding of data protection across the organisation

 

7. Review

This policy will be:

  • Reviewed regularly and at least annually to ensure continued relevance and effectiveness

  • Updated in line with changes to legislation, business activities and industry best practice

Next Review Date: 21/06/2026

 

8. Approval

Approved by:

 

Mark Collier Snr
Managing Director
Mechanical Removals & Installations Ltd

 

9. Contact and reporting concerns

For further information or to report a concern:

Email: enquiries@mri-online.co.uk
Telephone: 01474 354500

bottom of page