Privacy Notice

Last updated: April 2026

MR 4X4 is a trading name of Triple Two Engineering Limited. This privacy notice explains how we collect, use, and protect your personal information when you use our services, visit our website, or contact us.

  1. Who We Are

Data Controller: Triple Two Engineering Limited

Trading as: MR 4X4

Contact Address: 13 Ferrier Street, London, SW18 1SN

Email: info@mr4x4.co.uk

Phone: 020 7870 9990 / 07538 947 991

ICO Registration Number: ZB616521

We are registered with the Information Commissioner’s Office (ICO) as a data controller. If you have any questions about this privacy notice or how we handle your data, please contact us using the details above.

  1. What Personal Data We Collect

We may collect the following types of personal data:

Category

Examples

 

Identity Data

Name, title, date of birth (where relevant for vehicle licensing)

Contact Data

Billing address, delivery address, email address, phone numbers

Vehicle Data

Registration number, VIN (chassis number), vehicle specifications, service history

Transaction Data

Details of services performed, parts supplied, payment history

Technical Data

IP address, browser type, operating system, cookie data (when you visit our website)

Communication Data

Records of emails, phone calls, or messages exchanged with us

  1. How We Collect Your Data

We collect data in the following ways:

  • Direct interactions: When you book a service, request a quote, complete a job card, or contact us by phone, email, or in person.
  • Vehicle diagnostics: When we connect diagnostic equipment to your vehicle (which may read VIN, mileage, and fault codes).
  • Website: When you use our contact form, submit an enquiry, or accept cookies on our website.
  • Third parties: We may receive your data from recovery services, insurance companies, or previous repairers at your request.
  1. How We Use Your Data and Our Legal Basis

Under UK GDPR, we must have a lawful basis for processing your data. Below explains how we use your data and which legal basis applies.

Purpose

Data Used

Legal Basis

 

To provide repair, maintenance, and 4×4 specialist services

Identity, Contact, Vehicle, Transaction

Contract performance – necessary to carry out agreed work

To process payments and issue invoices

Identity, Contact, Transaction

Contract performance and legal obligation

To communicate with you about your booking or service

Identity, Contact

Contract performance and legitimate interests

To maintain service records for warranty or future reference

Vehicle, Transaction

Legitimate interests (maintaining accurate vehicle history)

To comply with legal obligations (e.g., VAT, consumer law)

Identity, Transaction, Vehicle

Legal obligation

To send marketing communications (only with your consent)

Identity, Contact

Consent – you can withdraw at any time

To improve our website and services

Technical, Cookie data

Legitimate interests (website optimisation)

Legitimate interests explained: Where we rely on legitimate interests, we have balanced our business need against your privacy rights. These interests include: keeping accurate vehicle service records, responding to customer enquiries, and improving our services.

  1. Marketing Communications

We will only send you marketing emails or SMS about our services, offers, or news if you have given us your explicit consent (e.g., by ticking an opt-in box).

You can withdraw your consent at any time by:

  • Clicking the “unsubscribe” link in any marketing email, or
  • Contacting us directly at [Insert email address]

We never sell your personal data to third parties for marketing purposes.

  1. Cookies and Tracking Technologies

Our website uses cookies. From 5 February 2026, under the Data (Use and Access) Act 2025, we no longer need your consent for certain low-risk cookies, including:

  • Strictly necessary cookies – required for the website to function
  • Analytics cookies – used solely by us to count visitors and see how the site is used
  • Functional cookies – to remember your preferences (e.g., accessibility settings)

For cookies used for advertising or sharing data with third parties, we will still ask for your consent via our cookie banner.

You can manage your cookie preferences through your browser settings or our cookie consent tool.

  1. Who We Share Your Data With

We may share your personal data with the following third parties, only when necessary:

Recipient

Purpose

Safeguards

Parts suppliers

Ordering genuine or aftermarket parts for your vehicle

Data Processing Agreement in place

MOT testing centres (if applicable)

Submitting vehicle for statutory MOT test

Legal obligation

Payment processors (e.g., Stripe, Square, or bank)

Processing card payments

PCI-compliant processors

IT and cloud service providers

Hosting booking systems, storing service records

Data Processing Agreement in place

Recovery or insurance companies

At your request, to arrange or process claims

Your authorisation required

We do not share your data with vehicle manufacturers or any other third parties for their own marketing purposes.

  1. International Data Transfers

We do not routinely transfer your personal data outside the United Kingdom. Where we use cloud-based systems whose servers may be located outside the UK (e.g., in the EU), we ensure that appropriate safeguards are in place, such as:

  • UK adequacy regulations (for EU transfers), or
  • Standard Contractual Clauses (SCCs) approved by the ICO.

 

  1. Data Retention – How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes set out above. Our retention periods are:

Type of Data

Retention Period

 

Customer and vehicle service records

7 years from last service (for warranty, tax, and legal claims purposes)

Transaction and invoice data

7 years (to comply with HMRC and tax obligations)

Marketing consent records

Until you withdraw consent, plus 2 years

CCTV footage (if applicable)

30 days, unless required for an incident investigation

Website analytics data

26 months (anonymised where possible)

After the retention period expires, we securely delete or anonymise your data.

  1. Your Legal Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right to be informed – You have the right to clear, transparent information about how we use your data (which is what this privacy notice provides).
  • Right of access – You can request a copy of all personal data we hold about you (a “Subject Access Request”). We must respond within one calendar month, free of charge.
  • Right to rectification – You can correct inaccurate or incomplete data we hold about you.
  • Right to erasure – You can ask us to delete your data where there is no compelling reason for us to keep it (the “right to be forgotten”).
  • Right to restrict processing – You can ask us to pause the processing of your data in certain circumstances.
  • Right to data portability – You can request a copy of your data in a commonly used, machine-readable format.
  • Right to object – You can object to processing based on legitimate interests or direct marketing.
  • Rights relating to automated decision-making – We do not use automated decision-making or profiling that significantly affects you.

To exercise any of these rights, please contact us at [Insert email address] or [Insert phone number]. We may need to verify your identity before processing your request.

  1. Making a Complaint

If you are not satisfied with how we handle your personal data or respond to your request, you have the right to complain to the Information Commissioner’s Office (ICO).

ICO Contact Details:

Website: https://ico.org.uk

Phone: 0303 123 1113

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to resolve any concerns first, so please contact us before escalating to the ICO.

  1. Changes to This Privacy Notice

We may update this privacy notice from time to time to reflect changes in the law or our practices. The latest version will always be available on our website at info@mr4x4.co.uk where changes are significant, we will notify you directly (e.g., by email or a notice on our homepage).

MR 4X4 – A trading name of Triple Two Engineering Limited