MRI - PRIVACY AND DATA PROTECTION POLICY
Document title - Privacy & Data Protection Policy
Company - Mechanical Removals & Installations Ltd ("MRI Ltd")
Document owner - Managing Director
Version - 1.0
Policy Number - POL-009
Approved by - Mark Collier Snr, Managing Director
Approval date - 21/01/2026
Effective date - 21/01/2026
Next review date - 21/06/2026
PRIVACY AND DATA PROTECTION POLICY
Mechanical Removals & Installations Ltd ("MRI Ltd")
1. Purpose
This policy defines MRI Ltd’s commitment to protecting personal data and ensuring that all information is handled securely, fairly and in accordance with applicable data protection legislation.
As a business operating across enquiries, project delivery, client relationships and digital platforms, MRI Ltd recognises the importance of maintaining the confidentiality, integrity and lawful processing of personal data.
This policy is aligned with:
-
UK General Data Protection Regulation (UK GDPR)
-
Data Protection Act 2018
-
Information Commissioner’s Office (ICO) guidance and best practice
2. Scope
This policy applies to all personal data processed by MRI Ltd in connection with its operations, including:
-
Client and customer information
-
Supplier and subcontractor data
-
Employee and contractor data
-
Website enquiries, contact forms and communications
-
Project-related documentation and correspondence
It applies to all employees, management personnel and any third parties handling data on behalf of MRI Ltd.
3. Responsibilities
Responsibility for data protection is defined as follows:
-
Managing Director
Overall accountability for data protection compliance and implementation -
Management Team
Responsible for ensuring appropriate controls and procedures are in place -
Employees and Operatives
Responsible for handling personal data securely and in accordance with this policy -
Third Parties & Service Providers
Required to process personal data in line with legal requirements and MRI Ltd standards
4. Commitments
MRI Ltd is committed to the following:
4.1 Lawful, Fair & Transparent Processing
-
Processing personal data in a lawful, fair and transparent manner
-
Collecting data only for legitimate business purposes
-
Ensuring individuals are aware of how their data is used
4.2 Data Minimisation & Accuracy
-
Collecting only data that is necessary for defined purposes
-
Maintaining accurate and up-to-date records
-
Correcting inaccuracies where identified
4.3 Data Security
-
Protecting personal data against unauthorised access, loss or misuse
-
Implementing appropriate technical and organisational security measures
-
Restricting access to authorised personnel only
4.4 Data Retention
-
Retaining personal data only for as long as necessary
-
Disposing of data securely when no longer required
4.5 Controlled Data Sharing
-
Not sharing personal data with third parties unless:
-
Required by law
-
Necessary for service delivery
-
Supported by appropriate safeguards
-
4.6 Individual Rights
MRI Ltd respects the rights of individuals under UK GDPR, including:
-
The right to access personal data
-
The right to rectify inaccurate data
-
The right to request erasure where applicable
-
The right to restrict or object to processing
Requests can be made directly to MRI Ltd using the contact details provided below.
4.7 Compliance
MRI Ltd will:
-
Comply with all relevant data protection legislation
-
Follow guidance issued by the Information Commissioner’s Office (ICO)
-
Maintain appropriate procedures and records relating to data processing
-
Ensure data protection is integrated into business processes
5. Operational Approach
MRI Ltd maintains a structured approach to data protection through:
-
Secure storage systems and controlled access to data
-
Safe handling of email enquiries, contact forms and client information
-
Limiting data access to authorised personnel only
-
Maintaining awareness of data protection responsibilities across the organisation
-
Monitoring and reviewing data handling practices
-
Addressing any data breaches or concerns promptly and appropriately
6. Continuous Improvement
MRI Ltd is committed to continuous improvement by:
-
Reviewing data protection practices and procedures regularly
-
Monitoring compliance and identifying areas for improvement
-
Updating controls in line with legislative changes and best practice
-
Strengthening awareness and understanding of data protection across the organisation
7. Review
This policy will be:
-
Reviewed regularly and at least annually to ensure continued relevance and effectiveness
-
Updated in line with changes to legislation, business activities and industry best practice
Next Review Date: 21/06/2026
8. Approval
Approved by:
Mark Collier Snr
Managing Director
Mechanical Removals & Installations Ltd
9. Contact and reporting concerns
For further information or to report a concern:
Email: enquiries@mri-online.co.uk
Telephone: 01474 354500