Privacy Policy
Last updated: 19 October 2026
MFH Utility ("we", "us", or "our") is committed to protecting your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store and protect your data when you use our website.
1. Who We Are
MFH Utility is a utility services company based in the United Kingdom. Our website is mfhutility.co.uk. For any privacy-related queries, contact us at: info@mfhutility.co.uk.
2. What Data We Collect
When you submit our contact form, we collect:
- Full name
- Email address
- Phone number (optional)
- Message content
- IP address (via Cloudflare Turnstile for spam prevention)
We do not collect payment details, health data, or any special category personal data.
3. How We Use Your Data
We use the data you provide solely to:
- Respond to your enquiry
- Provide information about our utility services
- Comply with legal obligations
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
We process your data under Article 6(1)(b) of the UK GDPR — processing is necessary to take steps at your request prior to entering a contract, and under Article 6(1)(f) — our legitimate interest in responding to customer enquiries.
5. Data Retention
Contact form enquiries are retained for a maximum of 12 months unless an ongoing business relationship is established, in which case data is retained for the duration of that relationship plus 6 years (in line with UK statutory requirements).
6. Third Parties
We use the following third-party services:
- Cloudflare Turnstile — CAPTCHA service for spam prevention. Cloudflare processes your IP address. See Cloudflare's Privacy Policy.
- Hosting Provider — Your data is stored on UK/EEA servers.
We do not sell, rent or share your personal data with any third parties for marketing purposes.
7. Cookies
Our website uses a session cookie (MFHSESS) strictly for security
purposes (CSRF protection and rate limiting). This cookie is not used for
tracking or marketing. No third-party advertising or tracking cookies are set.
8. Your Rights (UK GDPR)
Under UK data protection law, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing of your data
- Object to processing
- Data portability
To exercise any of these rights, contact us at info@mfhutility.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Security
We implement appropriate technical measures to protect your data, including HTTPS encryption, session security, input sanitisation and rate limiting on all form submissions.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "last updated" date.
11. Contact Us
For any questions about this Privacy Policy or your personal data: info@mfhutility.co.uk | 0330 1333 716