Legal & Compliance

Privacy Policy

This policy explains how MCR Car Key Solutions collects, uses, and protects your personal data. We are committed to handling your information responsibly and in full compliance with UK GDPR and the Data Protection Act 2018.

Effective: 1 January 2025
Last updated: 27 May 2026
Applies to: mcrcarkeysolutions.co.uk
Section 01
Who We Are

MCR Car Key Solutions is a mobile auto locksmith business operated by Lee Mccran, providing car key replacement, programming, lost key solutions, vehicle lockout, and related services across Greater Manchester.

Data Controller

Business name: MCR Car Key Solutions

Owner / Operator: Lee Mccran

Address: Pendlebury, Manchester, M27 8XF

Email: mcrcarkeys@outlook.com

Phone: 07506074590

Website: mcrcarkeysolutions.co.uk

As the data controller, Lee Mccran is responsible for deciding how and why your personal data is processed. If you have any questions about this policy or how your data is handled, please contact us using the details above.

Section 02
What Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

Identity & Contact Data
  • Your name (first and last)
  • Mobile or home telephone number
  • Email address
  • Home or business address (for on-site service attendance)
Vehicle Data
  • Vehicle make, model, year, and registration number
  • Vehicle identification number (VIN) where required for key programming
  • Key type and immobiliser system information
Communication & Enquiry Data
  • Messages sent through the website contact form
  • WhatsApp messages and call records
  • Email correspondence
Technical & Usage Data
  • IP address and browser type
  • Pages visited and time spent on our website
  • Referring website or search query
  • Device type and operating system

We do not collect: payment card details (all payments are handled in person or via third-party processors), sensitive personal data such as health or biometric information, or data from children under the age of 16.

Section 03
How We Collect Your Data

We collect data through the following methods:

Directly from you
  • Phone calls — when you call to request a quote or book a job
  • Contact form — when you submit an enquiry through our website
  • WhatsApp or email — when you message us directly
  • On-site — when Lee attends your location and collects vehicle or ownership details
Automatically
  • Website analytics — via Google Analytics or similar tools that record page visits, device type, and traffic sources
  • Cookies — small files stored on your device when you visit our website (see Section 09)
From third parties
  • Google Business Profile — if you contact us or leave a review via Google Maps
  • Referral sources — if someone provides your details when requesting a job on your behalf
Section 04
How & Why We Use Your Data

We use your personal data only for the purposes listed below. We do not use your data for automated decision-making or profiling.

PurposeData UsedLegal Basis
Providing the service
Attending your location, completing the job
Name, address, phone, vehicle detailsContract performance
Quoting & booking
Responding to enquiries and confirming jobs
Name, phone, email, vehicle detailsContract / Legitimate interests
Invoicing & records
Keeping records of work completed
Name, address, vehicle details, job notesLegal obligation / Contract
Customer communications
Confirming appointments, follow-up
Name, phone, emailContract / Legitimate interests
Safety & security
Verifying vehicle ownership before key work
Name, address, vehicle reg, VINLegal obligation / Legitimate interests
Website improvement
Understanding how visitors use the site
IP address, pages visited, device typeLegitimate interests
Legal compliance
Complying with laws and regulations
Any data as requiredLegal obligation
Section 05
Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

  • Contract performance — processing is necessary to carry out the service you have requested or are about to request
  • Legal obligation — we are required to verify vehicle ownership and keep certain business records by law
  • Legitimate interests — we have a legitimate interest in responding to enquiries, operating our business, and improving our website, provided this does not override your rights
  • Consent — where we ask for your explicit consent (for example, for marketing emails), we will only process your data if you have freely given that consent, and you may withdraw it at any time

Important: We do not send unsolicited marketing emails or SMS messages. We do not sell or rent your personal data to any third party for marketing purposes.

Section 06
Who We Share Your Data With

We do not sell, trade, or transfer your personal information to outside parties except in the following limited circumstances:

Service Providers
  • Email providers — Microsoft Outlook (for email correspondence storage)
  • Website hosting — Hostinger (website and form data hosting)
  • Analytics — Google Analytics (anonymised usage data)
  • Review platforms — Google Business Profile and Trustindex (for review display)
  • SERMI portal — manufacturer security data access required by law for post-2019 vehicle key programming
Legal Requirements
  • We may disclose your data to law enforcement or regulatory authorities if required by law
  • Vehicle ownership verification data may be shared with the DVLA or police in the event of a suspected theft or fraud

We do not share your data with any advertising networks, data brokers, or third-party marketing platforms. All service providers we use are contractually required to protect your data and use it only for the specified purpose.

Section 07
How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purpose it was collected. The following retention periods apply:

Data TypeRetention PeriodReason
Job records
Name, address, vehicle, work completed
6 yearsLegal & accounting obligation (HMRC)
Enquiry & quote data
Contact details, messages
12 monthsLegitimate interests — follow-up
Website analytics
IP address, pages visited
26 monthsStandard Google Analytics retention
Email correspondence3 yearsBusiness records / dispute resolution
Vehicle ownership verification
VIN, V5 reference
6 yearsSERMI / legal compliance

After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion of your data in accordance with your rights in Section 08.

Section 08
Your Data Protection Rights

Under UK GDPR, you have the following rights in relation to your personal data. All requests are free of charge and will be responded to within 30 days.

🔍
Right to AccessRequest a copy of the personal data we hold about you
✏️
Right to RectificationRequest correction of inaccurate or incomplete data
🗑️
Right to ErasureRequest deletion of your data (“right to be forgotten”)
Right to RestrictRequest we limit how we use your data
📤
Right to PortabilityReceive your data in a structured, machine-readable format
🚫
Right to ObjectObject to processing based on legitimate interests

To exercise any of these rights, contact us at mcrcarkeys@outlook.com or call 07506074590. We may need to verify your identity before processing a request.

We will always aim to resolve your request within 30 days. In complex cases we may extend this by a further 60 days, in which case we will inform you.

Section 09
Cookies

Our website uses cookies — small text files placed on your device when you visit. Cookies help us operate the site, understand how it is used, and improve your experience.

Cookie TypePurposeExamplesConsent Required
EssentialRequired for the website to functionSession cookies, CSRF tokensNo — necessary
AnalyticsUnderstanding how visitors use the siteGoogle Analytics (_ga, _gid)Yes
FunctionalityRemembering preferencesLanguage, form dataYes
MarketingMeasuring ad performanceGoogle Ads conversionYes

When you first visit our website, a cookie consent banner will appear. You can choose to accept or decline non-essential cookies at that time. You can also manage or delete cookies through your browser settings at any time.

Please note that disabling certain cookies may affect the functionality of the website.

Section 10
Third-Party Links

Our website may contain links to third-party websites including Google Maps, Google Reviews, TrustIndex, Facebook, and other platforms. This privacy policy applies only to mcrcarkeysolutions.co.uk.

We have no control over the content or privacy practices of third-party websites. We recommend reading the privacy policy of any external site you visit.

Embedding third-party content (such as a Google Maps iframe or review widget) on our pages does not mean we share your data with those providers — however, those providers may set their own cookies when you interact with embedded content. Please refer to their respective privacy policies for details.

Section 11
Children’s Privacy

Our services are directed at adults and we do not knowingly collect personal data from children under the age of 16.

If you are under 16, please do not submit any personal information through our website or contact forms. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at mcrcarkeys@outlook.com and we will delete that information promptly.

Section 12
Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. Any changes will be posted on this page with an updated “last updated” date at the top.

We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to notify you — for example, by adding a notice to our homepage or emailing existing customers where appropriate.

Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms.

Section 13
Contact Us & Complaints

If you have any questions about this privacy policy, wish to exercise your data rights, or have a concern about how your data has been handled, please contact us:

Phone 07506074590
Address Pendlebury, Manchester, M27 8XF
Response Time Within 30 days
Right to Complain to the ICO

If you are not satisfied with how we have handled your data or responded to your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) — the UK’s independent data protection authority.

Information Commissioner’s Office

Website: ico.org.uk

Phone: 0303 123 1113

Post: Wycliffe House, Water Lane, Wilmslow, SK9 5AF

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO. Please reach out to us first.

© 2025 MCR Car Key Solutions. All rights reserved.

Privacy Policy Terms & Conditions Contact

Scroll to Top