Privacy Policy

1. Introduction

MAYONEZ LTD ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at mayonez.co.uk or engage with our services.

We are incorporated and registered in England and Wales and operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller:
MAYONEZ LTD (Company No. 16663203)
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: [email protected]

2. Information We Collect

We may collect and process the following categories of personal data:

• Identity Data: first name, last name, job title, and company name.
• Contact Data: email address, telephone number, and postal address.
• Technical Data: IP address, browser type and version, time zone, and operating system — collected automatically when you visit our website.
• Usage Data: information about how you use and interact with our website and services.
• Communication Data: any content you send us via our contact form or by email.

3. How We Use Your Information

We use personal data for the following purposes:

• To respond to enquiries and provide information about our services.
• To enter into and perform contracts for the supply of IT services.
• To comply with legal and regulatory obligations.
• To operate, maintain, and improve our website.
• To send relevant business communications where you have given consent or where we have a legitimate interest to do so.

4. Legal Basis for Processing

We process personal data under the following legal bases as defined by UK GDPR:

• Contractual necessity: where processing is required to perform or prepare a contract with you.
• Legitimate interests: where processing is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests.
• Legal obligation: where processing is necessary to comply with a legal requirement.
• Consent: where you have given explicit, informed consent to the processing of your data.

5. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your data with:

• Service providers and sub-processors who assist in the delivery of our services, subject to appropriate data processing agreements and confidentiality obligations.
• Professional advisers including lawyers, accountants, and auditors, on a need-to-know basis.
• Regulatory or law enforcement authorities where required or permitted by applicable law.

6. International Transfers

Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), adequacy decisions, or other lawful mechanisms under UK GDPR.

7. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for legal, accounting, or regulatory reporting requirements. Enquiry and contact data is generally retained for up to three (3) years unless an ongoing contractual relationship is established, in which case data is retained for the duration of that relationship and for a reasonable period thereafter.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to obtain a copy of the personal data we hold about you.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure ("right to be forgotten"): to request deletion of your personal data in certain circumstances.
• Right to restriction of processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used, and machine-readable format.
• Right to object: to object to processing based on legitimate interests or direct marketing purposes.
• Rights related to automated decision-making and profiling.

To exercise any of these rights, please contact us at [email protected]. We will respond within one (1) calendar month of receiving your request.

9. Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and to analyse site usage. You may manage and control cookie settings through your browser preferences. By continuing to use our website without adjusting your browser settings, you consent to our use of cookies.

10. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures are reviewed and updated regularly. However, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to read their privacy policies before providing any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the opportunity to address your concerns directly — please contact us first at [email protected].