Privacy Policy

Last Updated 30/05/2025

 

At MFI, we aim to take an honest, secure, and careful approach to your data. We understand the importance of your personal details and we know and care that your data is used in a secure, sensitive and fair manner.

 

This policy, alongside our Terms and Conditions, is designed to give you information about why we collect and process your personal details, how we use it, and what rights you have in relation to our use of your data.

 

This policy applies to all customers of MFI. It does not form part of our Terms and Conditions.

 

We may change our privacy policy from time to time. 

 

For the policy applying to our use of cookies, please see our Cookie Policy.

A. Who We Are

MFI Limited is the data controller of the personal data we process about you. MFI Limited is a company registered in England and Wales with registered number 12491614.

 

Our registered address is:

 

1 Sustainability Way
Farington Moss
Leyland
PR26 6TB

B. Types Of Data Collected

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

 

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

 

• Your Identity and Contact Details. You must provide your first name, surname, billing and delivery addresses, email address, and a contact number in order to purchase a product from us. You can optionally also provide an additional phone number and a business name. We may also use this information to deliver replacement products, provide you with updates and and for direct marketing.

 

• Your Financial Data. You must provide us with a cardholder name, card number, expiry date, and security number for your card to make a payment for a product, unless you use a finance provider, for example Klarna. No card number or security number is saved, and they are not visible to any member of staff. In addition to this, we will also process your bank details should we need to issue a refund.

 

• Your Purchase History. We also must process the details of your order, including a unique order number, and the contents of your order to arrange its delivery to you. In addition to this, we also process shipment tracking information. 

 

• Your Correspondence History. If you need to contact our Customer Service team, we may process correspondence with you involving personal data, including call recordings, live chat transcripts, email conversations, and any physical letters you send to us. As part of this we may also receive photographs from you to confirm the state of a product: these are not used for identification purposes.

 

• Your Feedback. Where you leave feedback we will process details of your expressed opinion, your name and an order number (if provided).

 

In some cases, we may also collect data about you from your use of our website, interaction with our marketing emails, and our use of cookies on our website. For more information about this, please see our Cookie Policy.

 

We do not provide services directly to children or proactively collect their personal information.

C. Who We Share Your Data With

MFI sometimes shares your personal data with trusted third parties. This is to allow us, for example, to deliver your order, to deliver you email notifications, or process card payments. When we do share your data with these trusted third parties, we only provide the information that they need to perform their services and they may only use your data for the purposes we have agreed with them.

 

These trusted third parties include:

 

• Internal third parties, being other companies in the same group of companies and acting as joint controllers or processors, who are based in England and provide IT, shared services, logistics and warehousing services, system administration services and to undertake leadership reporting.

 

• Card Payment Processors to securely process the payment for our products.

 

• Delivery And Logistics Companies to deliver purchases or replacement products to you, and who process your data as independent controllers.

 

• Manufacturers where we request shipment of purchases or replacement products directly from them.

 

• Email Service Providers to send you emails confirming the placement and dispatch of your order. They will also send you promotional offers, competitions, and other information if you choose to receive direct marketing emails from us.

 

• Customer Service Software Providers administering our customer service platform and live chat system.

 

• Finance Providers where you choose to use finance to pay for a product.

 

• Law Enforcement, Fraud Prevention, and Other Authorised Regulatory Agencies and Bodies to help prevent and detect fraud and other unlawful acts.

D. Transfers of Data Outside of The UK

We may transfer some of your personal data to countries that are not part of the UK. These are known as third countries and may not have data protection laws that are as strong as those in the UK. As such, we take additional steps to safeguard your personal data to ensure it is treated just as safely and securely as it would be within the UK.

 

These transfers occur when we share your data with international organisations, like PayPal, who are based around the world. We have in place standard contractual clauses with these organisations to ensure that your personal information is treated by those organisations in a way which is consistent with and which respects the domestic UK laws on data protection. 

 

In addition to these clauses, we also rely on Adequacy Decisions from the Information Commissioner’s Office, where they recognise a country outside of the UK as ensuring an adequate level of protection equivalent to the UK.

E. Our Lawful Basis For Processing

The law on data protection allows us to process your data for certain reasons only. We will only use your personal information when the law allows us to.

 

Most commonly, we will use your personal information under the following legal bases:

 

• Where it is necessary for the contract we have, or will enter into, with you.

 

• Where it is necessary to comply with the law.

 

• Where it is necessary for our legitimate interests (or a third party’s) that your interests and fundamental rights do not override.

 

• Where you have consented to the processing for a specific purpose.

 

We may also use your personal data in the following, rare situations:

 

• To protect your (or someone else’s) vital interests.

 

• Where it is in the public interest or official purposes.

F. Failure to Provide Data

Your failure to provide us with data may mean that we are unable to fulfil an order of goods or be unable to comply with the law. As such, we may not be able to sell you a product should you fail to provide certain data to us.

G. Informing Us of Changes

It is important that the personal information we hold about you is accurate and correct. Please keep us informed if your personal information changes during your relationship with us.

 

This can be done by contacting our Customer Service team through the methods listed here, or by contacting dataprotection@mfi.co.uk

H. Your Rights

Under data protection law, you have the following rights, which we will work to uphold:

 

• The right to be informed about the data we hold about you and what we do with it.

 

• The right of access to the data we hold about you, including receiving a copy of the data.

 

• The right to correct inaccuracies in the data we hold about you, this is also known as ‘rectification’.

 

• The right to be forgotten in certain circumstances, allowing you to ask us to delete or remove data where there is no good reason for us to continue processing it, this is also known as ‘erasure’.

 

• The right to restrict (i.e., prevent) the processing of the data if you want us to establish its accuracy or the reason for processing it.

 

• The right to transfer the data we hold about you to another party where we use it with consent or for the performance of a contract. This is also known as ‘portability’.

 

• The right to object to the processing of data where we rely on a legitimate interest and there is something in your particular situation which makes you want to object to the processing. You also have this right if we process data for direct marketing purposes.

 

• Rights relating to any automated decision-making and profiling of your personal data.

I. Withdrawing Consent

You should be aware that it is not a condition of your contract with us that you agree to any request for consent from us. In addition to the rights listed above, you also have the right to withdraw consent at any time should you change your mind. 

 

Should you do this, we will stop processing data under this basis and, where there is no other basis for continuing to process the data, we will delete any data reliant on that consent.

 

You can withdraw consent by clicking the “unsubscribe” link at the bottom of any of our emails, by contacting our Customer Service team, or by sending an email to dataprotection@mfi.co.uk.

J. Retention Periods

We only keep your data for as long as we need it for, which, when you purchase goods from us, will be at least for the duration of your order with us. In most cases we will keep your data for a period after your order has completed. Some data retention periods are set by the law, for example the need to retain tax details for seven years.

 

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of it, the potential risk of harm from unauthorised use or disclosure, the purposes for which we collected it for, and the applicable legal requirements.

 

When your data reaches the end of its defined retention period or criteria, we will delete any electronic data from our IT systems, and any physical copies will be securely destroyed.

K. Automated Decision Making

Automated decision-making means making decisions about you using no human involvement e.g. using computerised equipment. No decision about you, which has a significant impact on you, will be made solely based on automated decision-making unless we have your explicit consent.

 

Your use of our website, and interaction with our marketing emails, may involve profiling of your behaviour, again subject to your consent. For more information on how this occurs, please see our Cookie Policy here.

L. Data Protection Officer's Contact Details

Our Data Protection Officer (DPO) can be contacted via dataprotection@mfi.co.uk. Alternatively, you can contact them by post at the above registered address, marking the envelope FAO: Data Protection Officer. 

 

If you have any questions about this privacy policy, how we handle our personal data, or to request a copy of the safeguards we rely upon for transfer of data outside of the UK, please contact the DPO.

M. Making a Complaint

We strive to achieve a high standard in all our data processing. However, if you think your data rights have not been complied with, you are able to raise a complaint with the Information Commissioner’s Office (ICO), who are the UK supervisory authority for data protection.

 

You can contact the ICO at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; by telephone on 0303 123 1113 (local rate) or 01625 545 745; or submit a complaint online here: https://ico.org.uk/make-a-complaint/.

 

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.