MPAF Services

Last updated: February 2026

1. Introduction

MPAF Services ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us or use our fit out and building contractor services.

MPAF Services is registered at The Corner House, 2 High Street, Aylesford, Kent, England, ME20 7BG. Company Registration Number: 15042988. We are the data controller responsible for your personal data.

2. Information We Collect

We may collect and process the following personal data:

• Contact information: Name, email address, phone number and company name when you submit an enquiry through our contact form or email us directly.
• Project information: Details about your project requirements, property location and any other information you choose to provide in your enquiry.
• Website usage data: Information about how you use our website, including your IP address, browser type, pages visited and time spent on our site. This data is collected through cookies and similar technologies.
• Communication records: Records of correspondence between you and MPAF Services, including emails and phone call notes.

3. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide quotes for our fit out and building contractor services.
• To manage and deliver our services, including commercial fit-outs, office renovations and retail refurbishments.
• To communicate with you about your project and our services.
• To improve our website and the services we offer.
• To comply with legal obligations and protect our legitimate business interests.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: When you submit a contact form or enquiry, you consent to us processing your data to respond to your request.
• Contractual necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our services and marketing, provided these interests do not override your rights.
• Legal obligation: Where we need to process your data to comply with a legal obligation.

5. Cookies and Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and to analyse website traffic. We use Google Analytics to understand how visitors interact with our site.

Cookies are small text files stored on your device. You can control cookies through your browser settings and may choose to disable them. However, this may affect the functionality of our website.

For more information about how Google uses your data, please visit Google's Privacy Policy.

6. How We Share Your Information

We do not sell, trade or rent your personal information to third parties. We may share your data with:

• Service providers: Trusted third-party providers who assist us in operating our website and delivering our services (e.g. email hosting, analytics providers).
• Legal requirements: Where we are required to disclose your data by law, regulation, or legal process.
• Business transfers: In the event of a merger, acquisition or sale of assets, your data may be transferred as part of that transaction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Enquiry data is typically retained for up to 3 years after your last contact with us, unless a longer retention period is required by law.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our website uses SSL encryption to protect data transmitted between your browser and our servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete data.
• Right to erasure: You can ask us to delete your personal data in certain circumstances.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used format.
• Right to object: You can object to our processing of your data where we rely on legitimate interests.
• Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at hello@m-paf.co.uk.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policy of every website you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory or operational reasons. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully. You can contact the ICO at ico.org.uk.