Privacy Policy

Effective Date: 28 August 2026 • Last Updated: 28 August 2026

MGS Components ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you how we look after your personal data when you visit our website, purchase our products, or interact with us, and tells you about your privacy rights and how UK law protects you.

MGS Components is the data controller responsible for your personal data.

Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

Identity Data: Includes first name, last name, username or similar identifier, title, and job role.
Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
Financial Data: Includes payment card details and bank account information (processed securely via PCI-DSS compliant payment gateways).
Transaction Data: Includes details about payments to and from you, and details of products or components you have purchased from us.
Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
Profile Data: Includes your username, orders placed, technical enquiries, feedback, and survey responses.
Usage Data: Includes information about how you use our website, products, and services.
Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

How We Collect Your Data

We use different methods to collect data from and about you, including:

Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms on our site, registering an account, requesting technical specs, or contacting us by phone or email.
Automated Technologies: As you interact with our website, we automatically collect Technical Data about your equipment and browsing patterns via cookies and server logs.
Third Parties: We may receive personal data about you from analytics providers (such as Google Analytics), search information providers, and technical or payment delivery service providers.

How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Performance of Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., fulfilling an order for components).
Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., business management, improving site functionality).
Legal Obligation: Where we need to comply with a legal or regulatory obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications or setting non-essential cookies. You have the right to withdraw consent to marketing at any time by contacting us.

Disclosures of Your Personal Data

We may share your personal data with internal staff and external third parties for the purposes set out above, including:

Service providers acting as processors who provide IT, system administration, logistics, and delivery services.
Professional advisers including lawyers, bankers, auditors, and insurers.
HM Revenue & Customs, regulators, and other authorities based in the UK.
Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Data Security & International Transfers

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the legal safeguards (such as standard contractual clauses approved for use in the UK) is implemented.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for UK tax purposes.

Your Legal Rights

Under UK data protection laws (including the UK GDPR and Data Protection Act 2018), you have rights in relation to your personal data:

Request access to your personal data (commonly known as a "data subject access request").
Request correction of the personal data that we hold about you.
Request erasure of your personal data where there is no good reason for us continuing to process it.
Object to processing of your personal data where we are relying on a legitimate interest.
Request restriction of processing of your personal data.
Request the transfer of your personal data to you or to a third party.
Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of these rights, please contact our privacy team. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk).

For any questions about this Privacy Policy or our data protection practices, please contact us at:

Email: enquiries@mgscomponents.co.uk

‍