M. Brittain York (Ltd) GDPR commitment statement.  Information for customers and future customers.


The EU General Data Protection Regulation (GDPR) is a European legislation which will come into force in May 2018.

GDPR builds on existing data protection laws and creates a single universal data protection approach across the entire EU.

GDPR strengthens the rights that EU citizens have over their personal data.


M. Brittain York (Ltd), as a data controller is committed to comply with GDPR when it comes into force.


What is Personal Data?

Personal data is defined by the ICO as any information which relates to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.


As a guide, any information that can be used to identify an individual, either on its own or when combined with another piece of information, is classed as personal data.


What are we doing in order to comply with GDPR?

Our preparations for GDPR started in 2017, part of this process we are reviewing and updating (where necessary) all of our internal processes, procedures, systems and documentation.  We are also reviewing and updating (where necessary) company infrastructure and hardware.


What do we collect?

The personal data we collect includes some or all of the following.

  • Name
  • Address
  • Phone number
  • Email address


How we collect your Data?

The personal data we collect, store and use, is information that you have provided to us through the following methods.

  • Sales/ Purchasing Account creation
  • Product enquiries
  • Sales/ Purchasing interactions
  • Data entered through our online form.


Please obtain the person’s consent if you are providing personal data of someone other than yourself.


We do not use cookies to collect personal data from you.


How we use your Data?

M.Brittain will only use information that is necessary for the purpose for which it has been collected.  You will always have the option to opt out of marketing communications (you can do this at any time).

We will never send you unsolicited junk email or communications.


We will use your personal data to conduct sales or purchasing transactions as well as communicating account specific information with you.  We may send you product offers which are relevant to your account.


We do not pass on any personal data to 3rd parties. The exception to this is when the data is requested by a legislative authority (Police, HMRC, etc.) in the prevention or investigation of fraud and or other criminal or legal investigations.


Personal data that we store and use for any purpose or purposes will not be kept for longer than is necessary for the purpose it was intended for.

We will retain documented data (physical or electronic) possibly containing personal data, in order to protect our legal rights (in case of fraud and risk management).




This policy statement may be updated.  The new version will be published on our website.

Please check this page from time to time to ensure you are kept up to date with any changes to the policy.

In the event of a large policy change. We may notify you via email.

The Current Version was issued May 2018



Your Rights. What can you do?

Please let us know if the personal information (data) we hold about you requires updating.


You may at any time instruct us to not use your personal data for marketing purposes.


Subject Access Request.

We will respond to all subject access requests within the time frame specified by the GDPR.

All subject access requests must be supported by suitable evidence that supports your identity (certified passport with proof of address from a utilities provider)

We will provide you with information on the personal data we hold pertaining to you.


You can at any time opt out of M.Brittain using your personal data for marketing purposes.


Your right to be forgotten

If you would like your personal data removing from M. Brittain (York) Ltd please contact or send us a letter to:



                                                M. Brittain (York) Ltd

                                                29 Hospital Fields Road

                                                Hospital Fields Ind. Est.





Upon receipt of suitable supporting identification evidence, the process of data removal will begin.

All Personal data will be removed except in the instance that it is required to be kept in order to comply with legislations we must adhere to.


Our Details

M.Brittain (York) Ltd is registered in England and Wales under Registration number 1055662 and the registered office is located at


                                                M. Brittain (York) Ltd

                                                29 Hospital Fields Road

                                                Hospital Fields Ind. Est.





You can contact us: