MMHM Structures

Privacy Policy

Last updated: 10 November 2026

1. Who we are

MMHM Structures Ltd (“we”, “us” or “our”) provides structural engineering services and operates mmhm-structures.co.uk.

We are the controller responsible for the personal information described in this policy.

If you have questions about this policy or wish to exercise your data protection rights, please contact us:

2. What personal information we collect

Depending on how you interact with us, we may collect:

  • Contact details, including your name, email address and telephone number.
  • Enquiry and project information, including your messages, property or site address, project requirements and documents you provide.
  • Client and service records, including correspondence, quotations, contracts and information needed to deliver our engineering services.
  • Technical information, including your IP address, browser type, device information, access times and website security logs.
  • Cookie and usage information, including information collected through Google Analytics and Google Ads technologies on our website, subject to your choices.

Please only provide personal information relevant to your enquiry. Avoid sending sensitive personal information, such as health information, unless we have explained why it is needed and how it will be handled.

3. How we use your information

We use personal information for the following purposes:

  • Responding to enquiries and preparing quotations requested by prospective individual clients. Our legal basis is taking steps at your request before entering into a contract.
  • Providing services under a contract with you. Our legal basis is performance of our contract.
  • Communicating with architects, contractors and other project contacts. Our legal basis is our legitimate interests in coordinating projects and providing our services.
  • Managing business relationships and maintaining relevant correspondence. Our legal basis is our legitimate interests in running our business.
  • Protecting our website, preventing misuse and investigating security incidents. Our legal basis is our legitimate interests in maintaining secure services.
  • Meeting applicable legal and regulatory requirements. Our legal basis is compliance with a legal obligation.
  • Using optional analytics and advertising cookies and associated personal information. Our legal basis is your consent.

Where we rely on legitimate interests, we consider the impact on your rights and freedoms.

4. Contact form

When you submit our contact form, we collect your name, telephone number, email address, message and your response to “How did you hear about us?”, where provided.

We use this information to respond to your enquiry, discuss your requirements, manage any resulting business relationship and understand how people find our services. We rely on our legitimate interests when using referral information to assess how people find our business.

Submitting an enquiry does not, by itself, mean you have agreed to receive marketing.

5. Cookies, analytics and third-party services

Our Cookie Policy explains how we use cookies and similar technologies and how you can manage your choices.

Google Analytics

We use Google Analytics to understand how visitors use our website. This helps us assess website performance and improve its content.

With your consent, Google Analytics may collect information such as pages visited, interactions, referral sources, device and browser information, and cookie identifiers.

Google Ads

We use Google Ads to promote our services and may run advertising campaigns from time to time. When advertising tracking is enabled, cookies and similar technologies may be used to measure interactions following an advertisement and assess campaign performance. Advertising cookies and associated tracking requiring consent are only used after you give that consent.

Google reCAPTCHA

We use Google reCAPTCHA to help protect our contact form against spam and automated misuse. When reCAPTCHA runs, Google may process technical information about your device, browser and interactions to assess whether activity is legitimate.

Our legal basis for processing personal information for this security purpose is our legitimate interest in protecting our website and communications. Where consent is required for associated cookies or technologies, we obtain it before their use.

Google’s Privacy Policy is available at: policies.google.com/privacy

Reviews and Houzz badges

We use Trustindex to display customer reviews and Houzz badges or links to show our presence on Houzz.

Where these features load content directly from an external provider, that provider may receive technical information such as your IP address and browser details. A locally hosted image with a standard link does not, by itself, send information to the linked provider until you follow the link.

Where these features use cookies or similar technologies requiring consent, we obtain consent before their use.

Further information is available at:

Other embedded content

Pages may include other third-party content, such as videos or maps. When loaded, these providers may receive technical information about your device and interaction with their content. If you are signed in to their services, they may associate this activity with your account.

6. Who we share your information with

We share relevant personal information with service providers supporting our website hosting, email communications and website maintenance. These providers may process website technical information, contact details and enquiry correspondence where necessary to deliver their services.

We also use Google services, including Google Analytics, Google Ads and reCAPTCHA, as described in this policy. Our website developer may access personal information where necessary to maintain, secure or troubleshoot the website.

Third-party review and badge providers may receive technical information when their content is loaded, as explained above.

7. International transfers

Our use of Google services may involve personal information being processed outside the United Kingdom, including in the United States.

Google states that it uses recognised safeguards for international transfers, including the UK Extension to the EU–US Data Privacy Framework and contractual safeguards where applicable.

Further information is available at: policies.google.com/privacy/frameworks

For questions about international transfers involving your personal information, contact info@mmhm-structures.co.uk.

8. How long we keep your information

We retain personal information for as long as necessary to provide our services, meet applicable legal obligations and maintain records needed for professional accountability and potential claims.

Our retention periods are:

  • Enquiries that do not become client projects: 1 year after the last contact.
  • Core client and project records, including drawings, calculations, reports and relevant correspondence: normally 15 years after completion of our services.
  • Financial and accounting records: 6 years from the end of the financial year to which they relate. Relevant financial documents forming part of a project file may be retained for the project retention period.
  • Website security and server logs: 1 year.
  • Analytics records: 1 year.
  • Backups containing personal information: 1 year.

We may retain relevant records for longer where necessary to meet an applicable legal obligation or establish, exercise or defend legal claims. We periodically review retained information and securely delete or anonymise it when it is no longer required.

Cookie lifetimes may differ from the retention periods for information collected using those cookies.

9. How we protect your information

We use technical and organisational measures appropriate to the information we handle and the risks involved.

If a personal data breach occurs, we assess its impact, take steps to contain it and notify the relevant regulator and affected individuals where legally required.

To report a suspected privacy or security incident, email info@mmhm-structures.co.uk.

10. Your rights

Depending on the circumstances, you may have the right to:

  • Request access to your personal information.
  • Ask us to correct inaccurate or incomplete information.
  • Request deletion of your information.
  • Request restrictions on how we use it.
  • Object to processing based on legitimate interests.
  • Receive certain information in a portable format.
  • Withdraw consent where we rely on it.

These rights are subject to applicable conditions and exemptions. Withdrawing consent does not affect processing carried out lawfully before withdrawal.

To make a request, email info@mmhm-structures.co.uk or write to: MMHM Structures Ltd, 124 City Road, London, United Kingdom, EC1V 2NX.

We may need to verify your identity. We normally respond within one month, subject to any extensions or other adjustments permitted by law.

You may also complain to the UK Information Commissioner’s Office at: ico.org.uk/make-a-complaint

11. Automated decisions

We do not use your personal information to make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.

12. Changes to this policy

We review this policy when our services, website or data practices change. The latest version will appear on this page with an updated revision date. Where required, we will bring significant changes to your attention.