Privacy Policy

Mr Car Mats Limited
Company Registration Number: 13905970
Registered office: 23 Woodland Hills, Madeley, Crewe, CW3 9HN
Website: www.mrcarmats.co.uk
Privacy enquiries: [email protected]

Last updated: 25 October 2026

At Mr Car Mats, we respect your privacy and take the protection of your personal information seriously.

This Privacy Policy explains what information we collect, how we use it, who we share it with and what rights you have.

This policy has three parts: a plain-English summary (Part A), the full privacy notice (Part B) and our cookie and tracking information (Part C). It applies to customers, prospective customers and other individuals who interact with our website or business.

Part A – Plain English | Part B – Full Privacy Notice | Part C – Cookies and Website Tracking

PART A – PRIVACY EXPLAINED IN PLAIN ENGLISH

1. What information do we collect?

When you shop with Mr Car Mats, we may collect:

• Your name.
• Email address and telephone number.
• Billing and delivery addresses.
• Vehicle registration number, make, model and year.
• Products you select or purchase.
• Carpet material, edging, fixing clips and personalisation choices.
• Order values, delivery charges and payment status.
• Customer service messages and correspondence.
• Website usage and technical information, including IP addresses and browser details.

We only need certain information to process your order. Other information helps us improve the website or assist you with enquiries.

2. Why do we need your information?

We primarily use your information to:

• Process and fulfil your orders.
• Manufacture the correct car mats.
• Take payment securely.
• Arrange delivery.
• Send order confirmations and tracking information.
• Answer customer questions.
• Handle returns, refunds and complaints.
• Maintain business and accounting records.
• Keep our website secure and working properly.

We may also use information to understand how customers use our website and improve our services, subject to applicable privacy and cookie requirements.

3. What happens when you enter your vehicle registration?

Our vehicle registration lookup helps identify your vehicle and suitable car mats.

When you enter your registration number, it may be sent to a specialist vehicle-information provider to obtain information about the make, model or vehicle variant.

Vehicle registration numbers can be personal data where they can be linked to an individual.

We use this information to help you identify the correct product.

4. What happens to your basket and checkout information?

Our website uses a persistent basket and checkout functionality designed to reduce the risk of losing your selections.

When you add products to your basket or begin checkout, we may save information including:

• Selected products and options.
• Vehicle details.
• Personalisation choices.
• Quantities and prices.
• Contact and delivery information entered during checkout.
• Checkout progress and technical errors.

This helps maintain your basket, recover checkout information and identify technical problems.

You do not need to complete a payment for some checkout information to be saved.

Saved checkout information does not itself create an order or authorise payment.

We restrict access to customer information to people who need it for legitimate business purposes.

We do not use incomplete checkout information to send marketing messages unless the requirements for doing so are satisfied.

5. Do you store my credit card details?

No. Mr Car Mats does not store your full payment card number or card security code.

Payments are handled through secure payment providers, including Stripe and PayPal.

We retain payment-related information needed to manage your order, such as payment status, transaction references, amounts paid and refund details.

Your payment provider may process additional information under its own privacy and security arrangements.

6. Who receives my information?

We share information only where there is a legitimate business purpose or legal requirement.

This may include:

Manufacturing suppliers

The supplier manufacturing your mats may need your order details, vehicle specifications, personalisation instructions and delivery information.

Delivery companies

Couriers need details such as your name, delivery address, contact details and parcel information.

Payment providers

Stripe and PayPal process payments and relevant transaction information.

Email and customer service providers

We use email and communication systems to send order confirmations, answer enquiries and manage customer service.

Website and IT service providers

Our hosting, security, technical support and website-service providers may process information necessary to operate the website.

We do not sell your personal information to third parties.

7. What about customer order emails?

We retain copies of relevant customer order emails and correspondence for business administration, customer service, record-keeping and dispute resolution.

These may be accessible through authorised business email accounts, including accounts used by the company's management.

Access is limited to legitimate business purposes.

8. Do you use AI to help answer customer emails?

We may use AI-assisted tools to help our customer service team prepare replies, summarise correspondence or identify relevant order information.

Where such tools are used, the information processed may include customer messages, contact details and relevant order information.

AI-generated suggestions are intended to assist customer service rather than replace our responsibility for handling customer enquiries correctly.

We do not use AI to make solely automated decisions about customers that have legal or similarly significant effects.

Where an external AI service processes personal data, we require appropriate data protection arrangements and safeguards.

9. Do you send marketing emails?

We may occasionally contact customers about our products, promotions or offers, but only where we have a lawful basis and the electronic marketing rules permit it.

For example, marketing emails may be sent where you have consented or where the existing-customer soft opt-in rules lawfully apply.

You can unsubscribe from marketing at any time.

You do not have to agree to marketing to purchase from us.

Order confirmations, delivery updates and essential customer service communications are separate from promotional marketing.

Simply accepting or reading this Privacy Policy does not mean you have agreed to receive marketing.

10. Do you use cookies?

Yes.

Cookies and similar technologies help us:

• Keep the website working correctly.
• Maintain your basket and checkout session.
• Remember certain preferences.
• Protect against suspicious activity.
• Understand website performance.
• Measure advertising effectiveness where permitted.

We have a cookie consent banner that allows you to manage relevant preferences.

Strictly necessary technologies are used to operate the website.

Other technologies are used in accordance with applicable consent requirements and legal exceptions.

You can find more information in Part C.

11. How long do we keep your information?

We do not intend to keep personal information longer than reasonably necessary.

Different information is retained for different purposes.

For example:

• Orders and accounting records: Normally retained for six years, or longer where required by law or a legitimate unresolved claim.
• Saved checkout information: Retained for a limited period according to its purpose and the applicable system arrangements.
• Customer service correspondence: Retained for as long as reasonably needed to manage enquiries, complaints and relevant legal obligations.
• Website security information: Retained according to operational and security requirements.
• Marketing preferences: Retained while relevant, including limited records needed to respect unsubscribe requests.

Where information is no longer required, we take appropriate steps to delete, anonymise or securely retain it only where justified.

12. Can I ask you to delete my information?

Yes. You can request that we delete personal information we no longer need.

However, some records must be kept to comply with legal obligations, such as accounting requirements, or to establish or defend legal claims.

For example, if you have placed an order, we may need to retain the relevant transaction record even if you no longer wish to receive marketing.

You can contact us at [email protected].

13. Can I see what information you hold about me?

Yes.

You can request access to your personal information and ask us to correct inaccurate information.

You may also have rights to request deletion, restrict processing, object to certain uses or receive certain data in a portable format.

We explain these rights in Part B.

14. How do you keep my information safe?

We use technical and organisational measures intended to protect personal information.

These include appropriate access controls, secure payment processing, controlled administrative access and website security measures.

Only authorised individuals should access information needed for their work.

No internet-based system can guarantee absolute security, but we take reasonable steps to protect the information entrusted to us.

15. Who can I contact about privacy?

If you have any questions about how we use your information, please contact:

Mr Car Mats Limited
23 Woodland Hills, Madeley, Crewe, CW3 9HN
Email: [email protected]

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk.

PART B – FULL PRIVACY NOTICE

1. Data controller

1.1 Mr Car Mats Limited, company number 13905970, is the data controller for personal information processed in connection with purchases and customer relationships through www.mrcarmats.co.uk, except where another organisation acts as an independent controller.

1.2 For the purposes of this notice, "we", "us" and "our" refer to Mr Car Mats Limited.

1.3 Our privacy contact address is [email protected].

1.4 Registered office: 23 Woodland Hills, Madeley, Crewe, CW3 9HN.

1.5 This notice is provided in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable privacy and electronic communications legislation.

2. Categories of personal data

2.1 We may collect and process the following categories of personal information:

Identity and contact information

Names, postal addresses, email addresses, telephone numbers and relevant customer account identifiers.

Vehicle information

Vehicle registration numbers, manufacturers, models, variants, model years and other details relevant to product compatibility.

Order and transaction information

Products selected or ordered, specifications, quantities, prices, personalisation details, order references, payment status, refunds and delivery records.

Checkout and basket information

Basket contents, selected options, checkout progress, contact information entered during checkout, session identifiers and technical diagnostic information.

Communication information

Customer enquiries, emails, complaints, returns correspondence, support messages and related attachments.

Technical and website usage information

IP addresses, browser type, device information, cookie identifiers, access times, referring websites, website activity and technical logs.

Marketing and preference information

Recorded marketing preferences, consent or opt-out information, and relevant communications history.

2.2 We do not require customers to provide special-category personal information when making ordinary purchases.

2.3 Customers should avoid including unnecessary sensitive information in personalisation instructions or customer service communications.

3. Sources of personal information

3.1 We obtain information primarily from customers when they:

• Visit the website.
• Use vehicle identification or product-selection tools.
• Add goods to the basket.
• Begin or complete checkout.
• Contact customer service.
• Request a return or refund.
• Provide marketing preferences.

3.2 We may also receive relevant information from payment providers, delivery companies, manufacturing suppliers and technical service providers.

3.3 Where we use a specialist vehicle-information service, we may receive vehicle details associated with a registration number entered by the customer.

4. Purposes and lawful bases

We process personal data for the following purposes and lawful bases under Article 6 of the UK GDPR.

4.1 Where we rely on legitimate interests, those interests include operating our business effectively, maintaining secure systems, improving customer service, preventing fraud, resolving disputes and providing a reliable online shopping experience.

4.2 We consider the necessity of the processing and the interests and rights of individuals before relying on legitimate interests.

4.3 Where consent is the lawful basis, individuals may withdraw that consent at any time without affecting processing already lawfully carried out.

5. Vehicle registration lookup

5.1 When a customer enters a vehicle registration number, we may transmit the registration number or related search information to specialist vehicle-information providers.

5.2 This processing is intended to identify vehicle specifications and compatible products.

5.3 We may retain vehicle information with the basket, checkout information or completed order where necessary.

5.4 Where vehicle information can identify an individual directly or indirectly, it is treated as personal data.

6. Basket and checkout information

6.1 Our website uses basket and checkout systems designed to maintain product selections and support the ordering process.

6.2 The systems may process customer details before an order has been completed, including information entered into checkout fields.

6.3 Information may be held in server-side systems, browser storage, cookies or relevant session records, depending on the function being used.

6.4 The purposes of this processing include maintaining checkout continuity, recovering information, identifying errors, assisting customers and improving checkout reliability.

6.5 We may record relevant technical events, timestamps and error information.

6.6 Checkout information is subject to access controls and applicable retention arrangements.

6.7 Information relating to incomplete checkouts is not automatically treated as consent to receive marketing.

6.8 Where incomplete checkout information is used for marketing purposes, we will comply with applicable UK GDPR and electronic marketing requirements.

7. Payment processing

7.1 Payments are processed using third-party payment providers, including Stripe and PayPal.

7.2 We do not store full payment card numbers or card security codes.

7.3 We may receive and retain transaction information such as:

• Payment status.
• Transaction reference.
• Payment amount and currency.
• Refund status.
• Payment-related order information.

7.4 Payment providers may act as independent controllers or processors for particular processing activities, according to their respective legal responsibilities and contractual arrangements.

7.5 Customers should consult the relevant payment provider's privacy notice for additional information about its processing activities.

8. Suppliers and delivery services

8.1 We may share relevant order and customer information with suppliers responsible for manufacturing or fulfilling orders.

8.2 This may include customer contact information, delivery information, product details, vehicle specifications and personalisation instructions.

8.3 We may also share relevant information with courier and parcel delivery services.

8.4 We limit such sharing to what is reasonably necessary for order fulfilment, delivery management, problem resolution and associated business administration.

8.5 Suppliers and couriers may have their own legal responsibilities as processors or independent controllers depending on their role.

9. Customer communications and email systems

9.1 We process customer correspondence to answer enquiries, process orders, resolve complaints and maintain business records.

9.2 We may retain copies of order confirmations and correspondence in authorised business mailboxes used by our customer service team or management.

9.3 Our communication systems may involve Microsoft 365, transactional email providers and other authorised technical service providers.

9.4 Customer information may be processed by those providers to deliver, route, store and secure relevant communications.

9.5 We take reasonable steps to restrict access to business information according to operational requirements.

10. AI-assisted customer service

10.1 We may use AI-assisted technology to support customer correspondence and service administration.

10.2 Such technology may assist with drafting replies, summarising customer requests, identifying order information or suggesting appropriate responses.

10.3 Personal information processed for these purposes may include names, contact information, correspondence and relevant order details.

10.4 Where third-party AI service providers process personal data on our behalf, we will use appropriate contractual and data protection safeguards.

10.5 We do not use AI-assisted customer service to make solely automated decisions that produce legal or similarly significant effects on customers.

10.6 We remain responsible for the appropriate handling of customer enquiries and for compliance with applicable data protection requirements.

11. Marketing communications

11.1 We may process customer contact details and marketing preferences to send relevant product information, offers or promotional communications where permitted by law.

11.2 For electronic marketing to individuals, we will rely on valid consent or the existing-customer soft opt-in where the applicable requirements are satisfied.

11.3 Where the soft opt-in is used, it will apply only where the legal conditions are met, including appropriate opportunities to opt out when details are collected and in each subsequent marketing communication.

11.4 We will not treat acceptance of this Privacy Policy, silence or an unticked checkbox as valid marketing consent.

11.5 Marketing communications will provide a practical method to unsubscribe.

11.6 Individuals may object to direct marketing at any time by contacting [email protected].

11.7 We may retain limited suppression information to ensure that individuals who unsubscribe are not inadvertently contacted again.

12. Reviews and customer feedback

12.1 We may invite customers to provide feedback or reviews following a purchase.

12.2 To facilitate review invitations, we may share limited customer and order information with relevant review service providers, where appropriate and lawful.

12.3 We may process feedback to improve products, customer service and website performance.

12.4 Where a communication constitutes direct marketing, we will comply with the applicable electronic marketing rules.

13. Cookies, analytics and advertising

13.1 We use cookies and similar technologies to support website functionality, security, basket operation, preferences, analytics and advertising.

13.2 Strictly necessary technologies may be used without consent where an applicable legal exception applies.

13.3 For technologies requiring consent, we will obtain that consent before using them.

13.4 We provide cookie preference controls through our website's consent mechanism.

13.5 Additional information is provided in Part C.

14. Security and fraud prevention

14.1 We process certain technical and account information to maintain website security, investigate suspicious activity and help prevent fraud.

14.2 Such information may include IP addresses, access records, order references, technical error information and other relevant system data.

14.3 We rely principally on our legitimate interests in operating a secure website, protecting customers and safeguarding business systems.

14.4 Appropriate safeguards are applied according to the nature and risks of the processing.

15. Sharing personal information

15.1 We may disclose relevant personal information to the following categories of recipients:

• Payment providers, including Stripe and PayPal.
• Manufacturing and fulfilment suppliers.
• Delivery and courier companies.
• Vehicle registration and address lookup providers.
• Website hosting and security providers, including Cloudflare where applicable.
• Email and customer communication providers.
• Authorised IT support and development providers.
• Analytics and advertising providers where the relevant processing is permitted.
• Review service providers.
• Professional advisers, accountants and legal representatives where necessary.
• Public authorities where disclosure is legally required.

15.2 We do not sell customer personal information to data brokers.

15.3 Where third parties process personal data on our behalf, we use appropriate contractual and organisational safeguards as required by law.

15.4 Some recipients act independently as data controllers and are responsible for their own compliance obligations.

16. International transfers

16.1 Some of our technology and service providers may process personal information outside the United Kingdom.

16.2 This may include providers operating internationally or using overseas infrastructure and support services.

16.3 Where personal information is transferred to a country not covered by applicable UK adequacy arrangements, we will use an appropriate lawful transfer mechanism, such as the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another valid mechanism where applicable.

16.4 We may also rely on applicable UK adequacy regulations, including approved arrangements for eligible organisations where appropriate.

16.5 Customers can contact us to request further information about relevant international transfers and safeguards.

17. Data retention

17.1 We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, accounting, security and dispute-resolution requirements.

17.2 The following retention periods and criteria generally apply:

Order and financial records

Normally retained for approximately six years, with extensions where legally required or reasonably necessary in relation to ongoing legal matters.

Checkout and basket information

Retained according to the relevant checkout, session or basket function and deleted or anonymised when no longer required, subject to the applicable technical retention arrangements.

Customer correspondence

Retained for a period reasonably necessary to manage customer service, contractual records, complaints and possible claims.

Technical and security logs

Retained according to operational security and diagnostic requirements, with periodic review and deletion or anonymisation where appropriate.

Marketing preferences

Retained while required to manage marketing communications and honour opt-out requests.

Personalisation and production information

Retained where necessary to manufacture orders, manage subsequent enquiries or resolve contractual disputes, and reviewed according to applicable retention requirements.

17.3 Retention periods may be extended where a legal obligation, investigation, dispute or other lawful requirement makes continued retention necessary.

17.4 Backup copies may be retained for a limited period under applicable backup and recovery arrangements.

17.5 When personal information is no longer required, we will take appropriate steps to delete or anonymise it.

18. Information security

18.1 We implement technical and organisational safeguards appropriate to the personal information we process.

18.2 These may include:

• Access restrictions and authentication.
• Secure payment processing arrangements.
• Protection of administrative systems.
• Security monitoring.
• Database and infrastructure controls.
• Backup and recovery arrangements.
• Appropriate controls over service providers.

18.3 Access to personal information is restricted to authorised individuals with legitimate business requirements.

18.4 We review relevant security arrangements as necessary to address operational and technological risks.

19. Your data protection rights

19.1 Depending on the circumstances and lawful basis of processing, individuals have the following rights:

Right of access – To request information about personal data we hold and obtain a copy.

Right to rectification – To request correction of inaccurate or incomplete information.

Right to erasure – To request deletion of personal information in circumstances provided by law.

Right to restriction – To request that processing is restricted in certain circumstances.

Right to data portability – To receive certain personal data in a structured, commonly used, machine-readable format or request its transfer where applicable.

Right to object – To object to processing based on legitimate interests in certain circumstances.

Right to withdraw consent – Where processing relies on consent, to withdraw consent at any time.

Rights concerning automated decisions – To exercise applicable protections concerning decisions made solely through automated processing that have legal or similarly significant effects.

19.2 You have an absolute right to object to the processing of your personal information for direct marketing.

19.3 Requests should be directed to [email protected].

19.4 We may request reasonable verification of identity where necessary to protect personal information.

19.5 We will respond within applicable statutory deadlines. Ordinarily, this means within one month, subject to lawful extensions where permitted.

19.6 Rights are not absolute in every circumstance. We will explain where an applicable legal exemption prevents us from fulfilling a request in full.

20. Information customers must provide

20.1 Certain information is necessary to process an order, including appropriate contact, delivery, product and payment information.

20.2 Where essential information is not provided, we may be unable to complete the transaction or deliver the goods.

20.3 Providing information for marketing purposes is optional and is not a condition of purchasing from us.

20.4 Customers should ensure that information supplied is accurate and notify us where important details change.

21. Automated processing and profiling

21.1 We may use automated processes for routine website functions such as basket management, vehicle identification, payment status updates, fraud prevention and order administration.

21.2 Website analytics and advertising services may use online identifiers or create audience segments where permitted by law.

21.3 We do not use these systems to make solely automated decisions about customers that produce legal or similarly significant effects.

21.4 If we introduce such processing in future, we will provide any additional information required by applicable law.

22. Complaints and the Information Commissioner's Office

22.1 If you have concerns about how your personal information is used, please contact us in the first instance.

22.2 We will investigate complaints and seek to resolve them appropriately.

22.3 You also have the right to complain to the Information Commissioner's Office.

Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113

22.4 You may also seek an appropriate remedy through the courts where applicable.

23. Changes to this Privacy Policy

23.1 We may update this Privacy Policy to reflect changes in law, technology, suppliers or our business operations.

23.2 The latest version will be published on our website.

23.3 Where changes materially affect how personal data is used, we will provide additional notice where required by law.

PART C – COOKIES AND WEBSITE TRACKING

1. What are cookies?

Cookies are small files that websites can store on your device.

Websites may also use similar technologies, including browser storage, pixels and other identifiers.

These technologies can help a website function, remember preferences or collect information about usage.

2. Strictly necessary cookies and storage

We use essential technologies required for website operation.

These may include:

• Shopping basket and session management.
• Checkout functionality.
• Maintaining customer selections.
• Website security and fraud prevention.
• Remembering cookie consent preferences.
• Authentication and account functionality where applicable.

These technologies may be used without consent where an applicable legal exception permits their use.

3. Analytics and performance technologies

We may use services such as Google Analytics and other measurement technologies to understand how visitors use our website.

Information may include pages visited, device types, approximate locations, website events and technical performance data.

Where consent is required, these technologies will be used only in accordance with that consent.

4. Advertising technologies

We may use advertising measurement and attribution technologies associated with services such as Google Ads or Meta.

These technologies may help measure advertising performance and understand which advertising activity leads to website visits or purchases.

Advertising and other non-essential tracking technologies are subject to applicable consent requirements.

5. Customer service and third-party features

Our website may use third-party services for live chat, customer reviews, payment functionality and other customer-facing features.

These services may set cookies or process technical information.

Where legally required, consent will be obtained before non-essential cookies or similar technologies are used.

6. Cookie consent and preferences

When visiting our website, you can use our cookie consent controls to manage the relevant categories of technologies.

You may accept or reject non-essential technologies and change your preferences later.

Withdrawing consent will not affect processing that was lawful before withdrawal.

Strictly necessary technologies remain available where required for the operation of the website.

7. Browser controls

Most browsers allow you to delete or block cookies through their settings.

Disabling strictly necessary cookies may affect features such as the shopping basket, checkout or login functionality.

8. Further information

For information about cookies, tracking technologies or your preferences, contact:

[email protected]

MR CAR MATS LIMITED
Company Registration Number: 13905970
Website: www.mrcarmats.co.uk
Email: [email protected]

Nothing in this notice is intended to remove or restrict any rights available under applicable data protection legislation.