Legal

Privacy Policy.

Last updated: February 2026  ·  MM Sprayworks, London

00 — Overview

Who We Are

MM Sprayworks ("we", "us", "our") provides bespoke spray finishing and colour matching services from our studio at Unit 15, 19 Bernard Rd, South Tottenham, London, N15 4NE.

We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact for data matters: Michael at MM Sprayworks — mmsprayworks@icloud.com or 020 3633 9007.

01 — Data We Collect

What Information We Collect

We only collect information that is necessary to provide our services and respond to enquiries. This may include:

  • Identity data: your full name
  • Contact data: phone number and email address
  • Project data: descriptions of your project and any photos you upload
  • Communication data: records of messages or correspondence with us (email, WhatsApp, phone)
  • Technical data: basic website usage data collected via cookies (see Section 07)

We do not collect payment card details directly — any payments are handled via secure third-party processors.

02 — How We Use It

How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your quote request and discuss your project requirements
  • To provide our spray finishing services and fulfil our contract with you
  • To communicate updates about your project or booking
  • To comply with legal obligations (e.g. invoicing, accounting records)
  • To improve our services based on feedback

We will never use your data for unsolicited marketing without your explicit consent.

03 — Legal Basis

Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

  • Contract: processing is necessary to fulfil a service or take steps prior to entering one
  • Legitimate interests: to respond to enquiries and manage our business operations
  • Legal obligation: to comply with tax and accounting laws
  • Consent: where you have explicitly agreed, such as receiving marketing communications

04 — Sharing Your Data

Who We Share Data With

We do not sell or rent your personal data. We may share it with trusted third parties only where necessary:

  • IT and communications providers (e.g. email hosting, cloud storage) under data processing agreements
  • Accounting and invoicing software used to manage our finances
  • Authorities or regulators where required by law

All third parties are required to handle your data securely and in accordance with applicable law.

05 — Data Retention

How Long We Keep Your Data

We retain personal data only for as long as necessary:

  • Quote enquiries that do not proceed to a job: up to 12 months
  • Customer records for completed jobs: up to 6 years (to comply with HMRC requirements)
  • Marketing consent records: until you withdraw consent

After the relevant period, data is securely deleted or anonymised.

06 — Your Rights

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you
  • Rectification: ask us to correct inaccurate or incomplete data
  • Erasure: request deletion of your data where we no longer have a lawful basis to hold it
  • Restriction: ask us to pause processing of your data in certain circumstances
  • Portability: receive your data in a structured, machine-readable format
  • Object: object to processing based on legitimate interests
  • Withdraw consent: where we rely on consent, you may withdraw it at any time

To exercise any of these rights, contact us at mmsprayworks@icloud.com. We will respond within 30 days. If you are unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

07 — Cookies

Cookies & Website Tracking

Our website may use cookies — small text files stored on your device — to help the site function and to understand how visitors use it.

  • Essential cookies: required for the site to work correctly (no consent needed)
  • Analytics cookies: help us understand visitor behaviour (e.g. Google Analytics) — only set with your consent

You can control and delete cookies through your browser settings at any time. Disabling cookies may affect some functionality of the site.

08 — Security

How We Protect Your Data

We take the security of your personal data seriously and have measures in place to prevent unauthorised access, disclosure, or loss. These include secure email handling, restricted access to customer records, and use of reputable third-party platforms with their own security certifications.

While we take all reasonable precautions, no data transmission over the internet can be guaranteed to be completely secure. If you have concerns, please contact us directly.

09 — Changes

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will always reflect the most recent version. We encourage you to review it periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

Questions or concerns? Contact us at mmsprayworks@icloud.com or call 020 3633 9007.