Effective Date: 1 March 2026
1. Introduction
This Privacy Policy explains how MJ Kloss Painters & Decorators Ltd (‘we’, ‘us’, ‘our’) collects, uses, stores, and protects personal data. We act as Data Controller under UK GDPR.
2. Definitions
‘Personal Data’ means information identifying an individual. ‘Processing’ means any operation performed on such data. ‘Data Controller’ means the person determining the purposes and means of processing.
3. Categories of Personal Data
We may process identification details, contact details, preferences, call recordings, website usage data, and information provided through enquiries.
4. Lawful Bases for Processing
We rely on legal bases including: Contract, Legitimate Interests, Consent, and Legal Obligation. Each processing purpose is linked to its appropriate lawful basis.
5. Purposes of Processing
We process data to deliver services, provide quotations, manage accounts, send marketing (with consent), improve website performance, and fulfil legal requirements.
6. Marketing Communications
Marketing communications are sent only with consent or soft opt-in for existing clients or those individual with whom we have provided quotes or other information concerning our services from time to time. Individuals may withdraw consent at any time.
7. Sharing of Personal Data
We may share data with subcontractors, service providers, IT partners, and regulatory authorities, limited strictly to what is necessary.
8. International Transfers
Where data is processed outside the UK, we implement Standard Contractual Clauses and UK Addendum protections.
9. Cookies and Similar Technologies
Essential cookies operate automatically. Analytics and tracking cookies require user consent under PECR.
10. Data Retention
Personal data is retained only as long as necessary. Service records up to 10 years, marketing suppression lists retained indefinitely, call recordings up to 12 months.
11. Security Measures
We implement access controls, encryption, staff obligations, secure storage, and incident response procedures as required under Article 32 UK GDPR.
12. Data Subject Rights
Individuals have rights of access, rectification, erasure, restriction, portability, objection, and rights relating to automated decision-making.
13. How to Exercise Your Rights
Requests must include identity verification and clear details of the request. We respond within one month unless extensions apply.
14. Complaints
Concerns may be raised with us directly or with the Information Commissioner’s Office at ico.org.uk.
15. Amendments to This Policy
We may update this Policy periodically. The most current version will always be available on our website.
16. Contact Details
Email: admin@mjkloss.co.uk | Tel: 020 3695 2092 | Address: 8a Seaforth Avenue, New Malden, KT3 6JP