Privacy Policy
Privacy Notice
Last updated: 27 September 2026
Mortistic Engineering Ltd ("we", "us" or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store and share personal information when you visit our website, contact us, request a quotation, book work or use our services.
We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Mortistic Engineering Ltd is the data controller responsible for the personal information described in this Privacy Notice.
Company: Mortistic Engineering Ltd
Company number: 17285429
Website: www.mortisticengineering.com
Email: info@mortisticengineering.com
For questions about this Privacy Notice or how we use your personal information, please contact us using the email address above.
2. Personal Information We Collect
The information we collect depends on how you interact with us and may include:
Contact and customer information
Your name
Telephone number
Email address
Billing or correspondence address where required
Information you provide when making an enquiry or booking
Vehicle and job information
Vehicle registration number
Vehicle make and model
Vehicle identification number (VIN), where required
Vehicle mileage
Vehicle condition
Fault descriptions and diagnostic information
Diagnostic trouble codes and test results
Service and repair information
Parts fitted or recommended
Records of work carried out
Quotations, invoices and payment records
Where vehicle information can be associated with an identifiable customer, we treat that information as personal information where applicable.
Communications
We may keep records of communications between you and Mortistic Engineering Ltd, including communications made through:
Telephone and SMS
WhatsApp Business
Email
Facebook and Facebook Messenger
Instagram
Our website contact forms
Photographs and videos
We may take photographs or videos of vehicles, components, faults, damage or work being carried out.
These may be used to document vehicle condition, explain faults or repairs to customers, maintain job records, support warranty or dispute resolution, or demonstrate our work.
Where photographs or videos are used publicly, for example on our website or social media pages, we take reasonable steps to remove or obscure identifying information such as vehicle registration plates and house numbers.
Website information
When you visit our website, certain technical information may be collected automatically, including:
IP address
Browser and device information
Pages visited
Referring website or page
Website interactions
Date and time of visits
We currently use Squarespace's website analytics tools to understand how visitors use our website.
3. How We Collect Your Information
We primarily collect personal information directly from you when you:
Contact us
Request a quotation
Make a booking
Ask us to diagnose, service or repair a vehicle
Complete a website contact form
Communicate with us through WhatsApp, email, telephone or social media
Make a payment
Provide information during or following work on your vehicle
We may also receive limited information through service providers we use to operate our business, such as Squarespace, QuickBooks and SumUp.
4. How and Why We Use Your Information
We only use personal information where we have a lawful reason to do so.
Providing quotations and responding to enquiries
We use your contact and vehicle information to respond to enquiries, assess requested work and provide quotations.
Lawful basis: Taking steps at your request before entering into a contract and, where appropriate, our legitimate interests in responding to customer enquiries and operating our business.
Providing our services
We use customer and vehicle information to arrange appointments, diagnose faults, obtain appropriate parts, service or repair vehicles, communicate about work and provide associated services.
Lawful basis: Performance of a contract with you or taking steps at your request before entering into a contract.
Customer communication
We use your contact information to communicate with you regarding enquiries, appointments, quotations, repairs, diagnostic findings, parts, payments, invoices, warranty matters and other matters relating to services you have requested or received.
Lawful basis: Performance of a contract or steps before entering into a contract and, where appropriate, our legitimate interests in providing customer service and managing our business.
We currently do not use customer contact information to send unsolicited promotional or marketing messages.
Invoicing, payments and accounting
We process information necessary to issue invoices, receive and record payments, maintain accounting records and meet our financial and tax obligations.
Lawful basis: Performance of a contract and compliance with our legal obligations.
Maintaining service and repair records
We retain appropriate records of previous work, including invoices and vehicle repair or service history. This allows us to maintain accurate business records, respond to future enquiries about previous work, deal with warranty issues and establish what work was previously carried out.
Lawful basis: Legitimate interests in maintaining accurate business and service records, providing effective customer service, protecting our business and customers, and dealing with warranty or legal matters.
Photographs and videos
We may use photographs and videos to document vehicle condition, faults, components and completed work.
Lawful basis: Performance of a contract where the material is necessary to provide or document our service, and/or our legitimate interests in maintaining appropriate records and protecting against disputes.
Where images are used to showcase our work publicly, we take reasonable steps to remove identifying information such as registration plates and house numbers.
Website operation and security
We process limited technical information to operate, maintain and secure our website and understand how it is being used.
Lawful basis: Our legitimate interests in operating and protecting our website and business. Where consent is legally required for non-essential cookies or similar technologies, we rely on consent.
5. Our Legitimate Interests
Where we rely on legitimate interests, these may include:
Operating and managing our business
Responding to customers and providing effective customer service
Maintaining accurate records of work previously undertaken
Protecting our business and customers from fraud or misuse
Establishing, exercising or defending legal claims
Handling complaints, disputes and warranty matters
Improving our services
Maintaining the security and functionality of our website
When relying on legitimate interests, we consider whether our interests are necessary and balanced against your rights and interests.
6. Who We Share Information With
We do not sell customer personal information.
We only share personal information where necessary to operate our business, provide our services, comply with legal requirements or where you have asked us to do so.
Service providers we use include:
Squarespace
Our website is hosted by Squarespace. Squarespace may process technical information and information submitted through our website on our behalf.
Squarespace may also process certain information for its own purposes in accordance with its privacy policy.
QuickBooks
We use QuickBooks for invoicing and business accounting. Relevant customer, invoice and transaction information may therefore be processed through QuickBooks.
SumUp
We use SumUp to process card payments. When you pay by card, information necessary to process the transaction is handled by SumUp.
Mortistic Engineering Ltd does not need to retain your complete card details in order to process card payments through SumUp.
Banks and payment services
Where you pay by bank transfer, transaction information will be processed by the relevant banking institutions.
Professional and legal services
Where reasonably necessary, we may disclose information to accountants, insurers, legal advisers or other professional advisers.
Legal and regulatory authorities
We may disclose information where required by law, regulation, court order or a lawful request from a competent authority, or where reasonably necessary to establish, exercise or defend legal rights.
7. International Transfers
Some of our service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we expect the relevant service provider to use an appropriate transfer mechanism or safeguard recognised under applicable UK data protection law where required.
8. How Long We Keep Your Information
We only retain personal information for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, accounting, tax, warranty and record-keeping requirements.
In determining an appropriate retention period, we consider the nature of the information, why it is required, our legal obligations and whether it may reasonably be required to establish or defend a legal claim.
In particular:
Accounting, invoice and transaction records are normally retained for the period required by applicable tax and accounting laws.
Customer and vehicle work records may be retained for longer where reasonably necessary to maintain service and repair history, respond to warranty matters, establish what work was carried out, or deal with potential legal claims.
Enquiries that do not result in work will only be retained for as long as reasonably necessary for business administration and follow-up.
Photographs and videos forming part of a job record may be retained alongside the relevant service or repair record where necessary.
Information that is no longer required will be securely deleted, anonymised or otherwise disposed of where appropriate.
We periodically review the information we hold and our reasons for retaining it.
9. Security
We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
These measures include appropriate password protection, access controls, secure website connections and limiting access to personal information to those who reasonably need it for business purposes.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
10. Cookies and Website Analytics
Our website is hosted by Squarespace and uses cookies and similar technologies.
Some cookies are required for the website to operate securely and correctly. These are known as essential or necessary cookies.
We also use Squarespace Analytics to understand general website traffic and how visitors interact with our website. This may involve information such as:
Browser, network and device information
IP address
Pages visited
Referring pages
Clicks and other website interactions
Dates and times of visits
Where cookies or similar technologies are not strictly necessary and consent is required by law, they will only be used in accordance with your cookie preferences.
You can manage applicable cookie preferences through the cookie controls provided on our website.
11. Social Media and External Links
Our website may contain links to our social media pages or other third-party websites.
If you interact with us through Facebook, Instagram, WhatsApp or another third-party platform, that provider may separately process your information in accordance with its own privacy policy.
We are not responsible for the privacy practices of third-party websites or platforms and recommend reviewing their privacy information separately.
12. Children's Privacy
Our website and services are not directed at children, and we do not intentionally collect personal information from children.
If we become aware that personal information relating to a child has been collected unnecessarily, we will take appropriate steps to delete it.
13. Your Data Protection Rights
Depending on the circumstances and the lawful basis on which we process your information, UK data protection law gives you a number of rights.
These may include the right to:
Access personal information we hold about you.
Rectification of inaccurate or incomplete personal information.
Erasure of your personal information in certain circumstances.
Restriction of processing in certain circumstances.
Data portability where the relevant legal requirements apply.
Object to certain processing based on legitimate interests.
Withdraw consent at any time where we rely on consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.
These rights are not absolute and may not apply in every circumstance. For example, we may need to retain certain information to comply with a legal obligation or establish or defend legal claims.
Your right to object
Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing in certain circumstances.
To exercise any of your rights, contact us at:
We may need to verify your identity before responding to a request.
14. Complaints
If you have concerns about how we use your personal information, please contact us first so that we can investigate and try to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information about making a complaint is available from the ICO website at www.ico.org.uk.
15. Changes to This Privacy Notice
We may update this Privacy Notice from time to time, for example where our services, service providers or legal obligations change.
The latest version will be published on our website with the date it was last updated.
We recommend checking this page periodically for changes.
16. Contact Us
For questions about this Privacy Notice, your personal information or your data protection rights, please contact:
Mortistic Engineering Ltd
Email: info@mortisticengineering.com
Website: www.mortisticengineering.com