Privacy Policy
How we collect, use and protect your personal data, and what rights you have over it.
Last updated: 21 October 2026
The short version
- We only collect what you give us to arrange and carry out work on your vehicle.
- We never sell your data or share it for anyone else's marketing.
- Marketing emails and non-essential cookies are strictly opt-in, and you can change your mind at any time.
- Booking requests are delivered to our workshop inbox using an email service based in the EU.
Who we are
This website is operated by Mumford Motors, trading as Mumford Air Conditioning ("we", "us", "our"), of Main Street, Summerhill, Co. Meath, A83 NW84, Ireland. We are the data controller for personal data collected through this website and in the course of providing our services. We are a small business and are not required to appoint a Data Protection Officer, but you can contact us about anything in this policy at [email protected] or 089 434 1499.
What personal data we collect
When you request a booking online
- Required: your name and phone number, and your agreement to be contacted about the booking.
- Optional: your email address, car registration, the service you're interested in, and any message you add.
- Marketing preference: whether you ticked the optional box to receive tips and service reminders by email.
- Technical data: the time you submitted the form. Like any website, our hosting provider also processes your IP address and browser details to deliver pages and protect against abuse.
When you contact us or bring your car in
- Anything you tell us by phone, email or in person when arranging or discussing a service.
- Vehicle details and a record of the work carried out, plus invoice and payment records.
We don't ask for, and you shouldn't send us, sensitive information such as health data. You don't have to give us any personal data, but we can't respond to a booking request without a name and phone number.
How we use your data and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your booking request or enquiry and arranging a time | Taking steps at your request before entering a contract (6(1)(b)) |
| Carrying out the work, keeping a service history and honouring any warranty | Performance of a contract (6(1)(b)) |
| Keeping invoices and accounting records | Legal obligation under Irish tax law (6(1)(c)) |
| Protecting the website and form from spam, fraud and abuse | Our legitimate interest in keeping our systems secure (6(1)(f)) |
| Sending occasional air con tips and service reminders by email | Your consent (6(1)(a)), which you can withdraw at any time |
| Measuring how the website is used with Google Analytics, only if you opt in | Your consent (6(1)(a)), see our Cookie Policy |
We don't use your data for automated decision-making or profiling.
How the booking form works
When you press "Request booking", your details are sent securely (HTTPS) from our website to our email delivery provider, which forwards them as an email to our workshop inbox. The website itself does not keep a database of submissions. To filter out spam, the form uses Google reCAPTCHA (the "I'm not a robot" checkbox), plus a hidden field and a simple timing check that store nothing about you.
Who we share it with
We don't sell your personal data, and we don't share it with anyone for their own marketing. We use a small number of service providers ("processors") who handle data on our behalf, under contract, and only on our instructions:
- Mailgun Technologies, Inc., which delivers booking-form submissions to our inbox. We use Mailgun's EU region, so messages are processed and stored in the EU.
- Cloudflare, Inc., which hosts this website and runs the code that sends the booking form. It processes technical data such as IP addresses to serve pages and block malicious traffic.
- Google Ireland Limited (reCAPTCHA), to protect the booking form from spam and abuse. When the form is shown, reCAPTCHA collects information such as your IP address, browser and device details and how you interact with the page, and may set a cookie. It's used only for security, under our legitimate interest in preventing abuse, and is subject to Google's Privacy Policy and Terms.
- Google Ireland Limited (Google Analytics), only if you accept analytics cookies. It receives details of the pages you view, your device and browser, approximate location derived from your IP address, and a random cookie ID.
- Our email provider, which stores the emails you send us or that the form delivers.
- Our accountant, where needed for invoicing and statutory accounts.
We may also disclose data where we're legally required to, for example to Revenue or in response to a valid request from An Garda Síochána.
International transfers
Mailgun, Cloudflare and Google are US-headquartered companies. Where personal data is accessed from or transferred outside the European Economic Area, it is protected by the EU–US Data Privacy Framework, to which all three are certified, and/or the European Commission's Standard Contractual Clauses in their data processing agreements.
How long we keep it
- Booking requests that don't go ahead: deleted within 12 months.
- Customer, vehicle and service records: kept for up to 6 years after your last visit, in line with Irish tax record-keeping requirements and so we can honour warranties.
- Marketing consent: until you unsubscribe or ask us to stop, after which we keep only a note that you opted out so we don't contact you again.
- Google Analytics data: kept for no more than 14 months, then deleted automatically by Google.
- Email delivery logs held by Mailgun are kept for a short period set by their service (typically days, not months) and then deleted automatically.
How we keep it safe
The website is served only over HTTPS, the form's sending credentials are held securely on the server and never exposed to visitors' browsers, and access to our inbox and records is limited to the people who need it and protected by strong passwords.
Cookies
We use a necessary browser-storage entry to remember your cookie choice, and Google Analytics cookies only if you switch analytics on. Nothing optional runs until you do. This site's fonts are hosted with the website itself rather than loaded from Google Fonts, so visiting it doesn't send your IP address to a font provider. Full details, and how to change your choice at any time, are in our Cookie Policy.
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access the personal data we hold about you and get a copy of it.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: ask us to delete your data where we have no legal reason to keep it.
- Restriction of processing, or objection to processing based on our legitimate interests.
- Portability: receive data you gave us in a commonly used, machine-readable format.
- Withdraw consent at any time for marketing emails or non-essential cookies, without affecting anything done before.
To use any of these rights, email [email protected]. We'll respond within one month, and there's no charge. We may need to confirm your identity first. To stop marketing emails you can also use the unsubscribe link in any email we send.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to Ireland's supervisory authority, the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
Children
This website and our services are aimed at adults arranging work on their vehicles. We don't knowingly collect personal data from anyone under 18.
Changes to this policy
We'll update this policy if the way we handle personal data changes, for example if we add a new form, analytics tool or service provider. The "last updated" date at the top always shows the current version.