This notice explains how Mamo Building Services Limited (“Mamo”, “we”, “us”) uses personal data collected through this website and by email or phone. It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who is responsible for your data

Mamo Building Services Limited, registered in Northern Ireland (company number NI633833), 18 Ballyards Road, Milford, Armagh, Northern Ireland, BT60 3NS, is the data controller.

2. What we collect, why, and for how long

Situation	Data	Why we use it and our lawful basis	How long we keep it
You send an enquiry through the contact form, by email or by phone	Name, email address, phone number (optional), enquiry type, the contents of your message	To reply to you and, where relevant, prepare a quote or take steps you ask for before entering a contract (Article 6(1)(b)), and to run our business efficiently (legitimate interests, Article 6(1)(f)).	12 months after our last contact with you. If you become a customer, we keep records for the periods needed for the contract and for legal, tax and insurance purposes.
You apply for a job or send a speculative application	Name, contact details, CV, cover letter and any other information you choose to send	To assess your suitability and contact you about opportunities (legitimate interests, Article 6(1)(f), and steps prior to a contract, Article 6(1)(b)). Please do not send special category data (for example health or ethnicity) unless it is needed. If you do, we use it only as the law allows.	Unsuccessful applications: 6 months after the decision, or longer only if you ask us to keep your details. Successful applicants: held in the employment record under our internal policies.
You visit the website	Technical data such as IP address, browser type and the pages requested, recorded in server logs by our hosting provider	To deliver the site, keep it secure and prevent abuse (legitimate interests, Article 6(1)(f)).	Held by our hosting provider in line with its standard log retention. We do not use these logs to identify individual visitors.

You are not required to give us your data, but we cannot respond to an enquiry or application without the details needed to contact you. We do not carry out automated decision-making or profiling.

3. Cookies and tracking

This website does not use cookies, analytics, advertising or social media tracking. See our cookie notice.

4. Who we share your data with

We do not sell your data. We share it only with service providers who process it on our instructions, under contracts that require them to protect it:

our website hosting provider (Vercel Inc.), which serves this website and serves its pages;
our form delivery provider (FormSubmit, formsubmit.co), which receives your contact form message directly from your browser and emails it to us;
our email and IT service providers, which host our mailboxes and systems.

We may also disclose data where the law requires it, for example to the police, regulators or the courts, or to our professional advisers and insurers where necessary.

5. Transfers outside the UK

Some of these providers are based in, or use infrastructure in, the United States or elsewhere outside the UK. Where this happens we rely on a lawful transfer mechanism, such as the UK Extension to the EU-US Data Privacy Framework (where the provider is certified), the UK International Data Transfer Addendum or standard contractual clauses, together with the provider’s security measures. You can ask us for details using the contact information above.

6. Security

The website is served over HTTPS. Access to enquiries and applications is limited to staff who need them. See our Data Protection Policy and Data Protection and Information Security Policy.

7. Your rights

Under UK data protection law you have the right to:

be told how your data is used (this notice);
access a copy of your data;
have inaccurate data corrected;
have your data erased in certain circumstances;
restrict how we use your data in certain circumstances;
object to processing based on legitimate interests;
receive data you gave us in a portable format where processing is based on a contract and carried out by automated means.

To use any of these rights, contact us using the details above. We will respond within one month. We may need to confirm your identity first. There is no fee unless a request is clearly unfounded or excessive.

8. Complaints

If you are unhappy with how we have used your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

9. Children

This website is not aimed at children and we do not knowingly collect their data.

10. Changes to this notice

We will update this notice when our practices change. The date at the top shows when it was last updated.

Privacy notice