1. Who we are
MCR Cars (“we”, “us”, “our”) operates the website at www.mcrcars.co.uk and sells used vehicles. We are the data controller responsible for your personal data.
Contact: mcrcarst@gmail.com
Address: 75A Manchester Road
Manchester
M34 2AF
2. What data we collect
We may collect and process the following personal data:
- Name, email address, telephone number, and postal address
- Enquiry content, including messages sent through our contact forms or WhatsApp
- Account information (if you register), such as your email and hashed password
- Vehicles you have viewed, favourited, or enquired about
- Technical data such as IP address, browser type, and pages visited
3. How we use your data
- To respond to your enquiries about vehicles
- To manage your account and saved searches (if you register)
- To send you marketing emails only if you have opted in
- To improve our website and services
- To comply with our legal obligations, including HMRC record-keeping and fraud prevention
4. Legal basis for processing
Under the UK GDPR, we rely on the following legal bases:
- Consent — for marketing emails and non-essential cookies
- Legitimate interests — to respond to your enquiry and operate our business
- Contract — when we sell you a vehicle or provide a service
- Legal obligation — to comply with tax and consumer law
5. Who we share your data with
We share personal data with the following service providers:
- Neon (database hosting — UK/EU region)
- Vercel (website hosting)
- Cloudinary (image storage)
- Resend (transactional email delivery)
We do not sell your personal data to third parties.
6. How long we keep your data
- Enquiries: up to 24 months from last contact
- Customer accounts: until you delete your account or become inactive for 36 months
- Sales records: 6 years, as required by HMRC
- Analytics and cookies: as described in our cookie banner
7. Cookies and tracking
We use cookies and similar technologies to operate the site and to understand how it is used. You can accept or reject non-essential cookies using the cookie banner shown on your first visit, or by clicking “Cookie settings” in the footer of any page.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to or restrict processing
- Withdraw consent at any time
- Request transfer of your data to another provider
To exercise any of these rights, contact us at mcrcarst@gmail.com.
9. Complaints
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it was last revised.
