Effective date: 1st June 2026
GDPR - Data Privacy Notice
Matthews Commercial Services Ltd. are committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data collected from you, or provided by you, will be processed.
Please read this notice carefully to understand our views and practices regarding your personal data and how we will treat it. The rules on processing of personal data are set out in the General Data Protection Regulation, known as GDPR.
Data controller - a controller determines the purposes and means of processing personal data. Data processor - a processor is responsible for processing personal data on behalf of a controller. Data subject - a natural person. Personal data means information relating to an identifiable person, including names, addresses, identification numbers, online identifiers such as IP addresses and cookies. Special categories of personal data include genetic, biometric, health, racial or ethnic origin, sexual orientation, trade union membership, political opinions and religious or philosophical beliefs. Processing means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure or destruction. Third party means a person, authority, agency or body other than the data subject, controller, processor and authorised persons.
Matthews Commercial Services Ltd. is the data controller. This means we decide how your personal data is processed and for what purposes. Our contact details are 01792 897271 and enquiries@mcswales.com. For all data matters, contact the Data Processing Team on 01792 897271.
We use your personal data to register you as a new customer, process your order, provide a quotation, deliver our services, manage payments, fees and charges, collect and recover money owed to us, administer and protect our business and this website, including data analysis, system maintenance, reporting, hosting of data and troubleshooting, use data analytics to improve our products, services, website and marketing, and make suggestions and recommendations about products or services that may be of interest to you.
With reference to the categories of personal data described in the definitions section, we process personal data including name, identity, contact, photograph, vehicle registration, financial, transaction, marketing and communications, technical, usage and profile data. We do not process special categories of personal data.
Your personal data will be treated as strictly confidential and will be shared only with service providers who provide IT and system administration services, professional advisors including lawyers, bankers, auditors, accountants and insurers, HMRC, regulators and other authorities. On rare occasions, we may have to share your data with a third party for the purposes of transport. We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow third parties to use your data for their own purposes.
We keep your personal data for no longer than reasonably necessary and only retain your data for the purposes we originally collected it for. Please see our retention policy for all criteria and proposed destruction periods.
We require your personal data as it is necessary to enter into a contract. You are under no statutory or contractual requirement or obligation to provide us with your personal data, but failure to do so may mean we are unable to provide a full and accurate quotation, which may lead to difficulties entering into a contract between both parties.
Unless subject to an exemption under GDPR, you have the right to request a copy of the personal data we hold about you, request correction of inaccurate or out of date data, request erasure where it is no longer necessary to retain the data, withdraw consent where consent was the lawful basis for processing, request data portability where applicable, request restriction of processing where there is a dispute about accuracy or processing, and object to processing where applicable, including direct marketing and processing for scientific, historical research or statistical purposes.
We do not transfer personal data outside the EEA.
We do not use any form of automated decision making in our business.
If we wish to use your personal data for a new purpose not covered by this Data Privacy Notice, we will provide you with a new notice explaining this new use before commencing the processing and setting out the relevant purposes and processing conditions.
Any changes we may make to our privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to our privacy policy.
To exercise all relevant rights, queries or complaints, please in the first instance contact our Data Processing Team on 01792 897271. If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioner's Office on 0303 123 1113, via https://ico.org.uk/global/contact-us/email/, or at the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.
Keep your company legally compliant and aligned with data protection regulations.