Privacy Policy &
Data Protection Notice
This policy explains how Mask Control Systems Limited collects, uses, protects, and handles personal and project information across our industrial automation, control panel, and engineering operations.
1. Who We Are (Data Controller)
In this Privacy Policy, “we”, “us”, “our”, or “MASK” refers to Mask Control Systems Limited, a private company incorporated in England and Wales. We operate as the official Data Controller responsible for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Unit 11, Simmonds Place, Kingsmill Industrial Estate, Saunders Way, Cullompton, EX15 1BS, UK
Telephone: +44 7412 999343
Email: sales@maskcontrols.com
2. Information We Collect
Depending on your interactions with MASK, we may collect and process the following categories of information:
A. Contact & Commercial Identification
Full name, business job title, corporate email address, business telephone number, and employer/company name provided when requesting a quotation or contacting our team.
B. Industrial Engineering & Project Specifications
CAD schematics, machine mechanical specifications, PLC hardware requirements, plant delivery addresses, and operational briefs shared during project scoping and design.
C. Technical & Website Usage Data
Internet Protocol (IP) addresses, browser type, device identifiers, operating system, and navigation telemetry collected via strictly necessary session cookies to maintain site security and performance.
3. Lawful Basis for Processing Your Data
Under Article 6 of the UK GDPR, we only process your personal data where a clear lawful basis exists:
Processing is required to prepare engineering quotes, manufacture custom control panels, program PLCs, or execute on-site commissioning agreements.
To communicate with industrial clients, protect our IT infrastructure against cyber threats, and improve the reliability of our engineering systems.
To comply with statutory accounting, HMRC corporate tax obligations, British health and safety legislation, and ISO 9001/17025 audit verification.
Where you explicitly opt in to receive non-transactional technical newsletters or case studies (which can be withdrawn at any time).
4. Data Security & Confidentiality
We apply rigorous physical, electronic, and managerial safeguards to protect your confidential machinery designs and personal data from unauthorized access, accidental alteration, disclosure, or destruction:
- Full TLS 1.3 encryption across all web traffic
- Strict role-based access controls for engineering staff
- Secure UK & EEA data storage facilities
- Rigorous NDAs for defence and proprietary client IP
5. How Long We Retain Your Data
We retain personal and project data only for as long as necessary to fulfill the operational purposes for which it was collected:
6. Your Legal Rights Under UK GDPR
As a UK data subject, you hold statutory rights under Chapter III of the UK GDPR regarding how your personal information is stored and handled:
Right of Access
You have the right to request a complete copy of the personal data we hold about you (Subject Access Request).
Right to Rectification
You can request immediate correction of any inaccurate or incomplete personal or corporate contact information.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer legally necessary for contractual or statutory compliance.
Right to Restrict Processing
You may ask us to suspend processing your personal data while an accuracy contest or legal dispute is verified.
Right to Data Portability
You can request to receive your structured personal data in a readable digital format to transfer to another controller.
Right to Object
You have the right to object at any time to processing based on legitimate business interests or direct commercial communications.
To exercise any of these rights, please contact our Data Protection Team at sales@maskcontrols.com. We will respond without undue delay and at the latest within one calendar month.
7. Third-Party Sharing & Non-Sale Pledge
We do not sell, rent, trade, or monetize your personal or industrial data under any circumstances.
We only share relevant information with vetted operational partners where essential for project fulfillment — such as specialist freight carriers delivering control cabinets, secure cloud infrastructure providers (Cloudflare), or independent UK quality registrars auditing our ISO 9001/17025 accreditations under binding non-disclosure agreements.
8. Cookies & Tracking Technologies
Our website uses strictly necessary technical cookies to enable secure page routing, navigation state, and form submissions. We do not deploy intrusive third-party cross-site advertising or tracking cookies. You may configure your web browser to reject cookies, though certain technical functions of the site may be impaired.
9. Right to Lodge a Regulatory Complaint
If you have concerns about our data handling, we encourage you to contact us first so we can promptly address the issue. However, you also have the statutory right to lodge a formal complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, UK
Website: https://ico.org.uk • Helpline: 0303 123 1113
10. Contacting Our Data Protection Team
For any questions regarding this Privacy Policy, your rights, or to submit a data request, please contact our engineering headquarters: