Privacy Policy

Who We Are

Mummery and Mummery Ltd is the data controller responsible for the personal data collected through this website.

Email: info@mummeryandmummery.co.uk
Address: C/O Asml - College House, 17 King Edwards Road, Ruislip, England, HA4 7AE

Data Protection Officer (DPO): Shaun Mummery
Contact email: info@mummeryandmummery.co.uk

What Data We Collect

We collect the following types of personal data when you use our website to learn about our Roofing & Renewable services and to contact us:

Cookie consent preferences (record of your choices about cookies and similar technologies).
Device and connection information (such as IP address, browser type, and basic technical information needed for the website to function and to help keep it secure).
Enquiry and correspondence information (such as the details you provide when you contact us about our services, and the content of your messages).
Website usage data collected through analytics (information about how you use the website, collected using cookies or similar technologies where you have given consent).
Advertising and measurement data (information collected through advertising network technologies, such as pseudonymous identifiers and information about interactions with ads, where you have given consent).

Sources of data:

Directly from you when you contact us about our services and communicate with us.
Automatically from your device when you access the website (for example, IP address and technical information).
From cookies and similar technologies, where you choose to allow them.

Providing your enquiry and correspondence information is optional, but if you do not provide it, we may not be able to respond to your request. Cookie choices are optional, and non-essential cookies are blocked unless you choose to allow them.

How We Use Your Data

We use your personal data for the following purposes and legal bases:

To measure and understand how visitors use our website (analytics). Legal basis: your consent.
To deliver and measure advertising through advertising networks, including the use of cookies or similar technologies for advertising and measurement. Legal basis: your consent.
To protect our website and business against security threats, misuse, and fraud, and to maintain the security of our systems. Legal basis: our legitimate interests.

Who We Share Your Data With

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

We use Google Tag Manager to manage website tags and scripts. Where Google Tag Manager is used to load analytics or advertising technologies, any related data collection and access to information on your device (such as cookies or similar technologies and associated pseudonymous identifiers) will occur only where you have given consent for the relevant categories. Google processes personal data in accordance with its own privacy information.

International Data Transfers

Some of our service providers are located outside the EU/EEA, specifically in the United States. In particular, we use Google Tag Manager, which may involve transfers to the United States depending on how tags are configured and which services are loaded.

Where transfers to the United States occur in connection with Google services, Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

Customer information may be retained for up to 6 years following the end of a working relationship in order to comply with UK tax and legal obligations.

Enquiry form submissions and general correspondence may be retained for a shorter period where no business relationship is established.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.
Analytics data: until consent is withdrawn or according to the analytics tool retention settings.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.

Analytics data: until consent is withdrawn or according to the analytics tool retention settings.
Advertising/marketing tracking data: until consent is withdrawn.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Delete your personal data (the “right to be forgotten”).
Restrict how we use your personal data.
Receive the personal data you provided to us and transfer it to another organisation (data portability).
Object to our processing of your personal data.
Withdraw your consent at any time where we rely on consent (this will not affect the lawfulness of processing before you withdrew consent).
Not be subject to automated decision-making that produces legal effects or similarly significantly affects you.

To exercise your rights, contact us at info@mummeryandmummery.co.uk. We will respond within one month.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organisational measures designed to protect personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions to reduce risk.

Data Breach Notification

If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. Where required, we will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue, please contact us at info@mummeryandmummery.co.uk.

How to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority in your jurisdiction. As we are established in England, our lead supervisory authority is the UK Information Commissioner’s Office (ICO). We encourage you to contact us first so we can try to resolve your concerns.

Updates to This Policy

We review and update this policy periodically. The “Last updated” date at the top of this policy shows when it was last changed. If we make significant changes, we will provide a notice on our website or contact you by email where appropriate. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: info@mummeryandmummery.co.uk
Address: C/O Asml - College House, 17 King Edwards Road, Ruislip, England, HA4 7AE
Data Controller: Mummery and Mummery Ltd