MAH Steel Privacy Policy
How MAH Steel Ltd uses personal information on this website, and the choices you have.
This policy explains what personal information MAH Steel Ltd collects through mahsteel.com, why, who we share it with, how long we keep it and what choices you have. It replaces the previous version. Last updated: 18 October 2026.
Who we are
MAH Steel Ltd (“MAH Steel”, “we”, “us”) is the controller of the personal information described here. We are a structural steel fabricator based at G1 & G2 Imperial Business Park, West Mill, Gravesend, Kent, DA11 0DL, United Kingdom. You can contact us about privacy at info@mahsteel.com, by phone on 01322 276948 or by post at the address above.
What we collect, and why
Enquiries and quotation requests
When you use our Contact form or our quotation form (including the quotation panel that opens on most pages) we collect what you type or upload: your name, company, email address, telephone number, a description of your project and any drawings, schedules or other files you attach. We use it to reply to you, prepare a quote and carry out the work you ask about. Our lawful basis is taking steps at your request before a contract, and our legitimate interest in running our business and answering enquiries. Please do not upload anything unrelated to your project.
The website stores each enquiry, including any files you upload, in its database and uploads folder, and emails us a notification. With each form submission the website also records your IP address and your browser’s user agent (the name and version of your browser). We use these to spot spam and abuse and to keep the website secure; our lawful basis is our legitimate interest in keeping the website secure.
Newsletter
If you join our newsletter we use your email address to send it. You can unsubscribe at any time using the link in every email, or by contacting us. Our lawful basis is your consent.
Job applications
If you apply for a job through the website we use what you send, including any CV, only to consider your application. Our lawful basis is taking steps at your request, and our legitimate interest in recruiting.
Calls and emails
If you phone or email us we use the details you give us to reply and to keep a record of the conversation.
Technical information
Our web hosting records basic technical information when you visit, such as your IP address, browser and the pages requested, in server logs. We use it to keep the website secure and working. Our lawful basis is our legitimate interest in keeping the site secure.
Cookies, analytics and your choice
Analytics (only if you accept)
We do not run advertising on this website and we do not use advertising or social-media tracking tags. We use Google Analytics 4 only if you choose “Accept analytics” in the bar that appears when you first visit. Until you accept, Google Analytics is not loaded, no analytics cookies are set and no analytics information is sent to Google. If you choose “Reject”, it stays off. Your choice is remembered in your browser’s local storage on this device (not on our servers). You can change your mind at any time using Cookie settings in the footer of any page: choosing Reject there stops collection straight away and removes the Google Analytics cookies. If your browser sends a Global Privacy Control signal and you have not chosen, we treat that as a refusal; you can still choose “Accept analytics” in Cookie settings.
Google Analytics is used to count visits, see which pages help people, and count enquiries, so we can improve the website. We configure it with Google signals and advertising personalisation switched off. We do not send Google your name, email address, telephone number, anything you type into a form, or the files you upload. Analytics data is kept for 14 months. Google processes it on our behalf under its own terms: policies.google.com/privacy. Our lawful basis is your consent.
Cookies and similar storage on this website
| Name | Set by | What it does | Type | How long | Needs your OK? |
|---|---|---|---|---|---|
| mah_consent_v1 (local storage in your browser) | MAH Steel | Remembers whether you accepted or rejected analytics | Necessary (stores your choice) | Until you clear your browser data or change your choice | No |
| _ga | Google Analytics (Google) | Tells visitors apart so we can count visits and enquiries | Analytics | Up to 2 years (some browsers shorten this to 400 days) | Yes: only set if you accept |
| _ga_ followed by our measurement ID | Google Analytics (Google) | Keeps track of a single visit | Analytics | Up to 2 years (some browsers shorten this to 400 days) | Yes: only set if you accept |
Our enquiry forms do not set cookies of their own. You can block cookies in your browser settings, which may stop parts of the site working.
Content from other companies
Some pages load content from other companies. When it loads, the company receives your IP address and browser details, and may set its own cookies. We do not control what they do; their own policies explain it. They do not need your permission to be used to show you the page, but you can block them in your browser settings.
| Company | What it provides | Where |
|---|---|---|
| Google (Maps and Google Fonts) | The embedded map showing our address | Contact page |
| Google (reviews) | Reviewers’ profile pictures shown with our Google reviews | Pages that show reviews |
| Automattic (WordPress.com and Jetpack) | Delivers our images and some website script files faster | Most pages |
| Adobe (Adobe Fonts) | The fonts used on the website | All pages |
| Cloudflare (cdnjs) and jsDelivr | Animation and slider code libraries | Most pages; the slider on some service pages |
Who we share information with
We do not sell your information. We share it only with companies that help us run the website and our business, under their terms: our website host (Pressable, part of Automattic), Google (analytics if you accept, maps and reviews, as above), the email service we use to receive and send enquiry emails, and professional advisers where needed. We may also disclose information where the law requires it.
Google, Automattic, Adobe and Cloudflare are based in the United States, so information may be processed there and in other countries outside the UK. Their own terms and privacy policies describe the safeguards they use for transfers from the UK.
How long we keep it
- Google Analytics data: 14 months.
- Enquiries, quotations and any files you upload: only as long as we need them to deal with your enquiry, carry out the work and keep the business, tax and legal records we need. We are reviewing how long we keep older enquiries and will set and publish fixed periods; until then some older enquiries are still held. You can ask us to delete yours at any time.
- Job applications: only as long as needed to consider your application and for recruitment records.
- Newsletter: until you unsubscribe.
- Your analytics choice: kept in your browser until you clear it or change it.
- Server logs: kept by our website host for a limited period set by the host.
Security
The website uses HTTPS. We limit access to enquiry details to the people who need them, and we use reputable hosting and email services. No system is completely secure, so please avoid sending sensitive personal information that your project does not need.
Your rights
Under UK data protection law you can ask us for a copy of your personal information, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it, ask for it in a portable form, and withdraw consent at any time (for example by unsubscribing, or by changing Cookie settings). To use any of these rights contact us as above. We will reply within one month.
If you are unhappy with how we use your information you can complain to the Information Commissioner’s Office, the UK’s data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113. We would appreciate the chance to put things right first.
Children
Our website is for businesses and homeowners and is not aimed at children. If you believe a child under 16 has sent us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy, for example if we add new features. The date at the top shows when it last changed. If a change affects your choices, we will make that clear on the website.
Record of changes
- 18 October 2026: Listed every cookie and the other companies whose content loads on our pages, with how long each lasts. Said that we record the IP address and browser details with each form submission. Removed the form-plugin cookie and the website-statistics services (WordPress.com statistics and our host’s site statistics) so that, apart from Google Analytics when you accept, no analytics run. Explained how Global Privacy Control and Cookie settings work.
- 18 October 2026: New policy: Google Analytics only with your permission, the Cookie settings choice, enquiry data and uploaded drawings, how long we keep information and your rights.
Contact
MAH Steel Ltd, G1 & G2 Imperial Business Park, West Mill, Gravesend, Kent, DA11 0DL, United Kingdom. info@mahsteel.com, 01322 276948.