Last updated: 27 October 2026
This policy explains how MK UK PROJECTS UK LIMITED (“Mike Falcon”, “we”, “us”) collects and uses personal information, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who we are
The data controller is MK UK PROJECTS UK LIMITED, a company registered in England and Wales (company number 15494144), trading as Mike Falcon, based in Southampton. For any question about your personal information, e-mail info@mikefalcon.com.
What we collect, why, and our lawful basis
- Contact form: your name, e-mail address, the type of enquiry and your message, plus your phone number and town or postcode if you choose to give them. We use this to reply to your enquiry and, if you ask, to prepare a quote. Lawful basis: steps taken at your request before entering into a contract (Article 6(1)(b) UK GDPR) and our legitimate interest in responding to enquiries (Article 6(1)(f)).
- Quote request form: the type of project, the work needed, when you would like it done, an approximate budget, the postcode of the property, whether you own it, your name, phone number, optional e-mail and message, and how and when you prefer to be contacted. If you arrived from an advert, we also receive the campaign details (for example utm_campaign, gclid or fbclid). We use this to assess your project, prioritise enquiries and contact you about it. Lawful basis: steps at your request before a contract (Article 6(1)(b)) and our legitimate interest in handling enquiries efficiently (Article 6(1)(f)).
- WhatsApp, phone and e-mail: if you contact us directly we receive the details you send, such as your name, phone number, messages and any photos of your property. We use them for the same purposes as above. WhatsApp is provided by WhatsApp Ireland Limited under its own privacy policy.
- Customers: if we carry out work for you, we keep the information needed to deliver the work, invoice and meet our legal, tax and accounting obligations. Lawful basis: contract (Article 6(1)(b)) and legal obligation (Article 6(1)(c)).
- Analytics (only with your consent): if you accept analytics cookies, Google Analytics collects information about how you use the website, such as pages viewed, approximate location and device type. Lawful basis: consent (Article 6(1)(a)).
- Advertising measurement (only with your consent): if you accept advertising cookies, Meta Platforms Ireland Ltd (Facebook / Instagram) and Google Ireland Ltd (Google Ads) receive information about your visit and whether you sent an enquiry, so we can measure our adverts. Lawful basis: consent (Article 6(1)(a)).
- Website security: our web server and security tools may log IP addresses and login attempts to protect the website against attacks. Lawful basis: our legitimate interest in keeping the website secure (Article 6(1)(f)).
You do not have to give us any information, but without contact details we cannot reply to your enquiry. We do not sell your information, we do not use it for marketing unless you ask us to, and we do not make decisions about you based solely on automated processing. The lead score used to prioritise quote requests only helps us decide whom to call first; every enquiry is reviewed by a person.
Who we share it with
We only share personal information with organisations that help us run the business, under contracts that require them to protect it:
- our website hosting provider;
- our e-mail service provider, which stores the messages sent through the website forms;
- Google (Analytics) and Meta and Google (advertising measurement), only if you accept those cookies;
- our accountants, and HMRC or other authorities where the law requires it;
- professional advisers (for example lawyers or insurers) where necessary.
International transfers
Some service providers, such as Google, Meta and WhatsApp, may process information outside the UK, including in the USA. Where this happens, the transfer is protected by safeguards recognised under UK data protection law, such as the UK–US Data Bridge, UK adequacy regulations or the International Data Transfer Addendum.
How long we keep it
- Enquiries that do not lead to work: up to 12 months after our last contact, then deleted.
- Customer records (quotes, invoices, correspondence about the work): 6 years after the end of the financial year in which the work finished, as required for tax and accounting purposes.
- Analytics data: as set in Google Analytics (no longer than 14 months).
- Website forms do not store messages in the website database – they are sent to us by e-mail.
How we protect it
The website uses an encrypted connection (HTTPS). Access to enquiries and customer information is limited to the people who need it, and we keep our systems and software up to date.
Your rights under UK GDPR
- Access – ask for a copy of the personal information we hold about you.
- Rectification – ask us to correct information that is wrong or incomplete.
- Erasure – ask us to delete your information where we no longer need it.
- Restriction – ask us to limit how we use your information.
- Objection – object to processing based on our legitimate interests.
- Portability – ask for information you gave us in a reusable format, where it applies.
- Withdraw consent – at any time, for analytics or advertising cookies, using the Cookie settings link at the bottom of every page.
To use any of these rights, e-mail info@mikefalcon.com. We will reply within one month, as required by law. There is normally no charge.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Cookies
For details of the cookies we use and how to change your choices, see our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
