Privacy Policy
This policy explains how MCR Car Key Solutions collects, uses, and protects your personal data. We are committed to handling your information responsibly and in full compliance with UK GDPR and the Data Protection Act 2018.
- 01Who We Are
- 02What Data We Collect
- 03How We Collect Your Data
- 04How & Why We Use Your Data
- 05Legal Basis for Processing
- 06Who We Share Your Data With
- 07How Long We Keep Your Data
- 08Your Data Protection Rights
- 09Cookies
- 10Third-Party Links
- 11Children’s Privacy
- 12Changes to This Policy
- 13Contact Us & Complaints
MCR Car Key Solutions is a mobile auto locksmith business operated by Lee Mccran, providing car key replacement, programming, lost key solutions, vehicle lockout, and related services across Greater Manchester.
Business name: MCR Car Key Solutions
Owner / Operator: Lee Mccran
Address: Pendlebury, Manchester, M27 8XF
Email: mcrcarkeys@outlook.com
Phone: 07506074590
Website: mcrcarkeysolutions.co.uk
As the data controller, Lee Mccran is responsible for deciding how and why your personal data is processed. If you have any questions about this policy or how your data is handled, please contact us using the details above.
Depending on how you interact with us, we may collect and process the following categories of personal data:
Identity & Contact Data- Your name (first and last)
- Mobile or home telephone number
- Email address
- Home or business address (for on-site service attendance)
- Vehicle make, model, year, and registration number
- Vehicle identification number (VIN) where required for key programming
- Key type and immobiliser system information
- Messages sent through the website contact form
- WhatsApp messages and call records
- Email correspondence
- IP address and browser type
- Pages visited and time spent on our website
- Referring website or search query
- Device type and operating system
We do not collect: payment card details (all payments are handled in person or via third-party processors), sensitive personal data such as health or biometric information, or data from children under the age of 16.
We collect data through the following methods:
Directly from you- Phone calls — when you call to request a quote or book a job
- Contact form — when you submit an enquiry through our website
- WhatsApp or email — when you message us directly
- On-site — when Lee attends your location and collects vehicle or ownership details
- Website analytics — via Google Analytics or similar tools that record page visits, device type, and traffic sources
- Cookies — small files stored on your device when you visit our website (see Section 09)
- Google Business Profile — if you contact us or leave a review via Google Maps
- Referral sources — if someone provides your details when requesting a job on your behalf
We use your personal data only for the purposes listed below. We do not use your data for automated decision-making or profiling.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing the service Attending your location, completing the job | Name, address, phone, vehicle details | Contract performance |
| Quoting & booking Responding to enquiries and confirming jobs | Name, phone, email, vehicle details | Contract / Legitimate interests |
| Invoicing & records Keeping records of work completed | Name, address, vehicle details, job notes | Legal obligation / Contract |
| Customer communications Confirming appointments, follow-up | Name, phone, email | Contract / Legitimate interests |
| Safety & security Verifying vehicle ownership before key work | Name, address, vehicle reg, VIN | Legal obligation / Legitimate interests |
| Website improvement Understanding how visitors use the site | IP address, pages visited, device type | Legitimate interests |
| Legal compliance Complying with laws and regulations | Any data as required | Legal obligation |
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
- Contract performance — processing is necessary to carry out the service you have requested or are about to request
- Legal obligation — we are required to verify vehicle ownership and keep certain business records by law
- Legitimate interests — we have a legitimate interest in responding to enquiries, operating our business, and improving our website, provided this does not override your rights
- Consent — where we ask for your explicit consent (for example, for marketing emails), we will only process your data if you have freely given that consent, and you may withdraw it at any time
Important: We do not send unsolicited marketing emails or SMS messages. We do not sell or rent your personal data to any third party for marketing purposes.
We do not sell, trade, or transfer your personal information to outside parties except in the following limited circumstances:
Service Providers- Email providers — Microsoft Outlook (for email correspondence storage)
- Website hosting — Hostinger (website and form data hosting)
- Analytics — Google Analytics (anonymised usage data)
- Review platforms — Google Business Profile and Trustindex (for review display)
- SERMI portal — manufacturer security data access required by law for post-2019 vehicle key programming
- We may disclose your data to law enforcement or regulatory authorities if required by law
- Vehicle ownership verification data may be shared with the DVLA or police in the event of a suspected theft or fraud
We do not share your data with any advertising networks, data brokers, or third-party marketing platforms. All service providers we use are contractually required to protect your data and use it only for the specified purpose.
We retain personal data only for as long as is necessary for the purpose it was collected. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Job records Name, address, vehicle, work completed | 6 years | Legal & accounting obligation (HMRC) |
| Enquiry & quote data Contact details, messages | 12 months | Legitimate interests — follow-up |
| Website analytics IP address, pages visited | 26 months | Standard Google Analytics retention |
| Email correspondence | 3 years | Business records / dispute resolution |
| Vehicle ownership verification VIN, V5 reference | 6 years | SERMI / legal compliance |
After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion of your data in accordance with your rights in Section 08.
Under UK GDPR, you have the following rights in relation to your personal data. All requests are free of charge and will be responded to within 30 days.
To exercise any of these rights, contact us at mcrcarkeys@outlook.com or call 07506074590. We may need to verify your identity before processing a request.
We will always aim to resolve your request within 30 days. In complex cases we may extend this by a further 60 days, in which case we will inform you.
Our website uses cookies — small text files placed on your device when you visit. Cookies help us operate the site, understand how it is used, and improve your experience.
| Cookie Type | Purpose | Examples | Consent Required |
|---|---|---|---|
| Essential | Required for the website to function | Session cookies, CSRF tokens | No — necessary |
| Analytics | Understanding how visitors use the site | Google Analytics (_ga, _gid) | Yes |
| Functionality | Remembering preferences | Language, form data | Yes |
| Marketing | Measuring ad performance | Google Ads conversion | Yes |
When you first visit our website, a cookie consent banner will appear. You can choose to accept or decline non-essential cookies at that time. You can also manage or delete cookies through your browser settings at any time.
Please note that disabling certain cookies may affect the functionality of the website.
Our website may contain links to third-party websites including Google Maps, Google Reviews, TrustIndex, Facebook, and other platforms. This privacy policy applies only to mcrcarkeysolutions.co.uk.
We have no control over the content or privacy practices of third-party websites. We recommend reading the privacy policy of any external site you visit.
Embedding third-party content (such as a Google Maps iframe or review widget) on our pages does not mean we share your data with those providers — however, those providers may set their own cookies when you interact with embedded content. Please refer to their respective privacy policies for details.
Our services are directed at adults and we do not knowingly collect personal data from children under the age of 16.
If you are under 16, please do not submit any personal information through our website or contact forms. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at mcrcarkeys@outlook.com and we will delete that information promptly.
We may update this privacy policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. Any changes will be posted on this page with an updated “last updated” date at the top.
We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to notify you — for example, by adding a notice to our homepage or emailing existing customers where appropriate.
Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms.
If you have any questions about this privacy policy, wish to exercise your data rights, or have a concern about how your data has been handled, please contact us:
If you are not satisfied with how we have handled your data or responded to your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) — the UK’s independent data protection authority.
Website: ico.org.uk
Phone: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, SK9 5AF
We would, however, appreciate the opportunity to address your concern directly before you contact the ICO. Please reach out to us first.
© 2025 MCR Car Key Solutions. All rights reserved.