GDPR Information

Last updated: September 2026

moor-craft is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we handle your personal data and your rights under data protection law.

Data Controller

moor-craft is the data controller for personal data collected through this website and our services. This means we are responsible for deciding how we hold and use personal information about you.

Contact details:

Email: [email protected]

Address: Unit 7, Blackwater Industrial Estate, Moorfield Road, Cambridge CB4 2QT, United Kingdom

Personal Data We Process

We may process the following categories of personal data:

• Identity Data: Name and title
• Contact Data: Email address and postal address
• Vehicle Data: Vehicle registration, make, model, and service history
• Technical Data: IP address, browser type, and device information
• Usage Data: Information about how you use our website
• Communication Data: Records of correspondence and enquiries

Lawful Basis for Processing

We will only process your personal data when we have a lawful basis to do so. The lawful bases we rely on include:

• Contract: Where processing is necessary to perform a contract with you or to take steps prior to entering into a contract
• Legitimate Interests: Where processing is necessary for our legitimate interests and does not unduly affect your rights
• Consent: Where you have given specific consent to the processing
• Legal Obligation: Where processing is necessary to comply with legal requirements

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a "subject access request."

Right to Rectification

You have the right to request that we correct any personal data that is inaccurate or incomplete.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to extend this period by up to two months, in which case we will inform you.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights.

Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Secure storage of physical and electronic records
• Access controls limiting who can view personal data
• Regular review of data protection practices
• Staff training on data protection requirements

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods are determined based on:

• The nature of the data and the purposes for processing
• Legal and regulatory requirements
• Legitimate business needs

Service records are typically retained for a period required to support warranty claims and comply with industry regulations.

International Transfers

We do not routinely transfer personal data outside the United Kingdom. If any transfer is necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.