Privacy Policy

1. Who We Are Midland Engineering Services Ltd ("MES", "we", "us", or "our") is a distributor of THK linear motion products based in Scotland. We operate an online B2B shop through which customers can browse and purchase products. Company address: Midland Engineering Services Ltd, Scotland, United Kingdom. If you have any questions about this Privacy Policy or how we handle your data, please contact us at: info@midlandengineering.co.uk

2. What Information We Collect and Information You Provide to Us When you register for an account, place an order, or contact us, we may collect:

• Full name and job title

• Company name and registered address

• Billing and delivery addresses

• Email address and telephone number

• Payment information (processed securely — we do not store full card details)

• Order history and purchase preferences

• Communications you send to us

2.2 Information We Collect Automatically When you use our website, we may automatically collect:

• IP address and browser type

• Pages visited and time spent on the site

• Referring website or search terms

• Device type and operating system

1. How We Use Your Information We use the information we collect to:

• Process and fulfil your orders

• Manage your account and provide customer support

• Send order confirmations, invoices, and delivery updates

• Respond to your enquiries

• Improve our website and services

• Send relevant product updates or promotions (where you have opted in)

• Comply with our legal and regulatory obligations

1. Legal Basis for Processing We process your personal data on the following legal bases under UK GDPR:

• Contract performance — to process and fulfil your orders

• Legitimate interests — to improve our services and communicate with you as a business customer

• Legal obligation — to comply with applicable laws including tax and accounting requirements

• Consent — for marketing communications, where applicable

1. Sharing Your Information We do not sell your personal data. We may share your information with trusted third parties only where necessary, including:

• Delivery and logistics providers — to fulfil your orders

• Payment processors — to handle transactions securely

• Our accounting and ERP systems (Sage 50) — for invoicing and financial records

• Our B2B webshop platform provider (GOb2b Commerce) — to operate the online shop

• Legal or regulatory authorities — where required by law All third parties are required to handle your data securely and in accordance with UK GDPR.

1. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. As a general guide:

• Order and transaction records are retained for 7 years in line with HMRC requirements

• Account information is retained for the duration of your active account, plus a reasonable period thereafter

• Marketing preferences are retained until you withdraw consent

1. Your Rights Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you

• Right to rectification — to request correction of inaccurate data

• Right to erasure — to request deletion of your data in certain circumstances

• Right to restrict processing — to request we limit how we use your data

• Right to data portability — to receive your data in a structured, machine-readable format

• Right to object — to object to processing based on legitimate interests or for direct marketing To exercise any of these rights, please contact us at info@midlandengineering.co.uk. We will respond within 30 days.

1. Cookies Our website uses cookies to improve your browsing experience and to understand how visitors use our site. Cookies are small text files stored on your device. We use:

• Essential cookies — required for the website and shop to function

• Analytical cookies — to understand site usage and improve performance You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

1. Security We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, or disclosure. Our B2B webshop uses SSL encryption for all transactions. While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. Please contact us immediately if you believe your account has been compromised.

2. Links to Other Websites Our website may contain links to third-party websites. This Privacy Policy applies only to our website and online shop. We are not responsible for the privacy practices of any third-party sites and encourage you to review their policies before providing any personal data.

3. Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website. We encourage you to review this policy periodically.

4. Complaints If you have concerns about how we handle your personal data, please contact us in the first instance and we will do our best to resolve the matter.