- 34-38 Guildhall Rd, Northampton NN1 1EW
- info@mavistech.uk
- 01604 312731
Skip to the privacy policy
Privacy Policy
Mavis Technologies · Last updated: 3 August 2026 · Version 2.0
Privacy at a glance
This short summary highlights the key points. The full detail follows in the numbered sections below.
- Who we are: Mavis Technologies, the data controller for the personal data described here.
- What we collect: Mainly your name, email and anything you submit through our forms or when you buy from us.
- Why: To respond to enquiries, fulfil orders, manage our relationship with you and (with your consent) send marketing.
- Your control: You can access, correct or delete your data, object to processing, and withdraw consent at any time.
- Contact: privacy@mavistech.uk
Mavis Technologies (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, store and protect your personal information when you interact with us, including via our website, online forms and online shop.
1. Who we are and how to contact us
Mavis Technologies is the data controller responsible for your personal data. Our details are:
- Legal entity name
- Mavis Technologies Ltd
- Registered office
- 34–38 Guildhall Rd, Northampton NN1 1EW
- Company registration number
- 15107830
- ICO registration number
- 00010194170
- Privacy contact
- privacy@mavistech.uk
- Telephone
- 01604 312731
If you have any questions about this policy or how we use your data, please contact us using the details above.
2. When we act as controller and when we act as processor
In most of our dealings with you – for example when you contact us, subscribe to updates or buy a product – Mavis Technologies is the data controller, meaning we decide why and how your personal data is processed.
In limited circumstances an organisation may act as a data processor on behalf of another company. Mavis Technologies does not currently act as a processor for any third party — we are the controller for all personal data described in this policy.
3. What personal data we collect
We may collect and process the following personal data:
- Identity and contact data – name, email address, postal address and telephone number (where provided).
- Order and transaction data – products purchased, order value and delivery details (payment card details are handled by our payment provider and are not stored by us).
- Communications data – the content of enquiries, messages and correspondence you send us.
- Marketing and consent data – your preferences for receiving marketing and the record of any consent you give.
- Technical and usage data – IP address, device and browser information, and how you use our website, collected via cookies and similar technologies (see Section 11).
We do not intentionally collect special category (sensitive) personal data through our website forms. Please do not submit sensitive information (such as health data) through our general enquiry forms unless we specifically ask for it.
Is providing your data mandatory? Where we need personal data to enter into or perform a contract with you (for example to fulfil an order), providing that data is necessary – if you do not provide it we may be unable to supply the product or service. In all other cases, providing your data is voluntary and there is no obligation to do so.
4. How we use your personal data
We use your personal data for the following purposes:
- To respond to your enquiry or request.
- To provide information or an offer you have requested.
- To process and fulfil your orders and provide customer support.
- To manage our relationship with you and keep our records up to date.
- To send marketing communications, only where you have explicitly opted in.
- To operate, secure and improve our website and business.
- To comply with our legal and regulatory obligations.
5. Lawful basis for processing
Under the UK GDPR we must have a lawful basis for each purpose for which we process your personal data. The table below maps each purpose to its lawful basis, and explains the legitimate interests we rely on where relevant.
| Purpose | Lawful basis | Our legitimate interest (where relied on) |
|---|---|---|
| Responding to enquiries and requests | Legitimate interests | Responding to and assisting people who contact us |
| Processing and fulfilling orders | Performance of a contract | — |
| Customer support and managing our relationship | Performance of a contract / Legitimate interests | Providing effective support and maintaining accurate records |
| Sending marketing communications | Consent | — |
| Operating, securing and improving our website and business | Legitimate interests | Running, protecting and improving our business and website |
| Meeting legal and regulatory obligations | Legal obligation | — |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and concluded that our interests are not overridden. You can ask us for more information about this balancing exercise. You can withdraw consent at any time using the unsubscribe link in our emails or by contacting us directly.
6. Marketing communications
If you opt in, we may send you occasional emails about our services, offers or related updates. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at privacy@mavistech.uk. We will never sell your data or send marketing emails without your consent.
7. Who we share your data with
We may share your personal data with the following categories of recipient:
- IT, hosting and website providers – Microsoft Azure and Hostinger.
- Email and CRM platforms – HubSpot.
- Payment providers – Stripe.
- Delivery and fulfilment partners – Royal Mail and DHL.
- Regulators and authorities – where we are required to do so by law.
These providers are only permitted to process your data on our instructions and must keep it secure and confidential. We do not share your data with third parties for their own marketing purposes.
8. International transfers
Some of our service providers may process your personal data outside the United Kingdom. Where this happens, we ensure an appropriate level of protection is in place. The following table sets out our transfers and the safeguards we rely on:
| Recipient / processor | Destination country | Safeguard relied on |
|---|---|---|
| Microsoft Azure | UK / EU data centres (with possible support access from other countries) | UK adequacy regulations (EU) and the UK Addendum / IDTA where applicable |
| Hostinger | EU (European Economic Area) | UK adequacy regulations |
| HubSpot | United States | UK Addendum to the EU Standard Contractual Clauses (IDTA) |
| Stripe | United States | UK Addendum to the EU Standard Contractual Clauses (IDTA) |
| DHL | Varies by delivery destination | UK Addendum / IDTA where personal data is transferred outside the UK |
Where transfers rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, you can request a copy of the relevant safeguards by contacting us at privacy@mavistech.uk.
9. How we store and protect your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure. These measures include SSL/TLS encryption of data in transit across our website, access controls so that only authorised staff can reach personal data, secure and reputable hosting and email/CRM providers, keeping our systems and software up to date, and confidentiality obligations on our staff and service providers.
Your data is only accessible to authorised personnel and trusted service providers who are required to keep it secure and confidential.
10. Data retention
We only keep your personal data for as long as necessary for the purposes for which it was collected. Our indicative retention periods are:
| Data category | Indicative retention period |
|---|---|
| Enquiry and offer-related data | Up to 6 months from last contact |
| Order and transaction records | 6 years to meet HMRC / tax obligations |
| Marketing and consent data | Until you unsubscribe or ask us to delete it |
| Website / technical (cookie) data | Up to 12 months (see cookie section) |
When personal data is no longer needed, we securely delete or anonymise it.
11. Cookies and website technologies
Our website uses cookies and similar technologies to make the site work, understand how it is used and (where you consent) support marketing. We use non-essential cookies only with your consent, which you give via our cookie banner.
- Lawful basis: strictly necessary cookies rely on our legitimate interests; all other cookies rely on your consent.
- Retention: cookie lifespans vary. Session cookies expire when you close your browser; our cookie-consent record is kept for up to 12 months; shopping-cart cookies last for the duration of your visit; and any analytics cookies last up to 24 months.
- Withdrawing consent: you can withdraw or change your cookie consent at any time via the cookie settings link on our website or through your browser settings.
12. Automated decision-making and profiling
We do not carry out automated decision-making that produces legal or similarly significant effects concerning you, and we do not use your personal data for profiling of that kind. If this changes, we will update this policy and, where required, obtain your consent.
13. Children’s data
Our website and shop are directed at adults and are not intended for children. We do not knowingly collect personal data from children under the age of 13 without appropriate consent. If you believe a child has provided us with personal data, please contact us at privacy@mavistech.uk and we will delete it.
14. Your rights
Under data protection law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data.
- Object to or restrict our processing of your data.
- Data portability – receive certain data in a portable format.
- Withdraw consent at any time.
- Lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise any of these rights, contact us at privacy@mavistech.uk. To protect your data we may need to verify your identity before responding. We will respond within one month of receiving a valid request; this may be extended by up to two further months for complex or numerous requests, in which case we will let you know. There is normally no charge, although a reasonable fee may apply where a request is manifestly unfounded or excessive. Some rights are subject to exemptions under the UK GDPR and Data Protection Act 2018, and we will explain if any apply to your request.
15. Complaints
We hope to resolve any concern you have about how we use your data. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at any time.
- Website: ico.org.uk
- Helpline: 0303 123 1113
16. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website, and we will indicate the date it was last updated at the top of this policy. If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@mavistech.uk.