top of page



Midas Structural Ltd and Midas Forecourts Services Ltd (The company) collects and processes personal data relating to its existing and potential customers / suppliers and their existing or potential contractors and/or sub-contractors (collectively defined in this policy as contacts) to manage the supply of information, products and services. Midas is committed to being transparent about how it collects and uses that data and to meet its data protection obligations. This policy sets out the basis on which any personal data we collect regarding you, or that you provide to us, will be processed by the company.


This privacy policy is for Midas Structural Ltd (07758195) and Midas Forecourt Services Ltd (11151647), PO Box 827, Ditchingham, Bungay, NR35 9AT and website and is served by Midas Structural Ltd and governs the privacy of its users who choose to use it. It explains how we comply with the GDPR (General Data Protection Regulation), the DPA (Data Protection Act) and the PECR (Privacy and Electronic Communications Regulations).

This policy will explain areas that may affect your privacy and personal details, how we process, collect, manage and store those details and how your rights under the GDPR, DPA & PECR are adhered to. Additionally, it will explain the use of our website cookies or software, advertising or commercial sponsorship from third parties and the download of any documents, files or software made available to you (if any) on this website.


The company collects and processes a range of information about you or your organisation. This includes:

  • Your Name

  • Your Company Name

  • Your Company Address

  • Your Company Contact Details, including business email address and business phone number/s

  • Your Correspondence with us, through letter form or email

  • Details of any products and services required for the fulfilment of concepts or orders for you

  • Banking Details


All the specific data above is provided to us, or collected by us, during the pre-sales, sales, and after-sales stages of purchase of products and/or services offered by us; from correspondence with you, your company, your company’s contractors subcontractors or representatives; or through meetings, whether general or sales or other such visits to your organisation premises.

Other than the aforementioned ways of obtaining data we may obtain data about you from third party sources, such as public databases, data service companies. We take steps to ensure that such providers are legally permitted or required to disclose such information.

In some cases, we may collect personal data from third parties, such as information from background and staff vetting providers, information from credit reference agencies and criminal record checks permitted by law. The company will seek this information only with your given consent.

This Privacy Policy is effective with respect to any data that we have collected, or collect, about and/or from you.


Data is stored in a range of various places, including IT email servers, our SAGE accounting system, email and paper documentation. By submitting your personal data, you agree to our data management in terms of transfer, processing and recording.


The company needs to process data to supply information, estimates, quotations, and to enter into a sales or service contract with you, to meet its obligations under the business relationship and contract. For example, it needs to process your data to provide you with information, products and services, to request / make payment in accordance with the sales terms and to administer credit reference checks (where applicable).

In addition, the company processes data based on legitimate interest (i.e. when we believe there is a benefit or relevance to you, for example to supply information on products or services relevant to your business or project) before, during and after the end of the sales relationship.

Processing customer data allows the company to better serve its customers and end-users. When utilising personal data, the company relies on legitimate interests as a reason for processing and it has considered whether those interests are overridden by the rights and freedoms of customers.

The data held is used to improve user experience and fulfil projects. This includes:

  • To ensure the information on our website and materials is presented in the most effective manner possible for all users

  • To provide clear responses to any enquires about our specifications, products and services that you requested from us

  • To carry out our obligations arising from agreements between you and us

  • To notify you about changes to our service

  • For sales and marketing activities such as calls, emails and other types of communications


We do not disclose information about identifiable individuals to our suppliers or business partners, but we may provide aggregate information about users (i.e. the popularity of a specific product or service).


Your data will be shared internally, including with members of the sales, project management and accounts department. If necessary, the IT staff will have access to the data if it is necessary for the performance of their roles.

The company may need to share your data with third parties for financial, sales or marketing purposes. The companies may also share your data with third parties in context of a sale of some or all its business. The company will share data only with your given consent.


The company have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or unnecessarily disclosed. It is not accessible internally except by employees in the performance of their duties. All data on the company’s systems is subject to a standard deletion policy. Records are kept of customers and contacts so that we can supply information, products, and services.

Where the company engages third parties to process personal data on its behalf, they do so based on written instructions, and are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.


The company will hold your data for the duration of the business and service relationships, as defined by the Midas Structural Ltd & Midas Forecourt Services Ltd data retention policy and schedule. Your data can be deleted on request.


The company uses data to help better serve customers, but it still belongs to you. As a data subject, you can:

  • Access and obtain a copy of your data on request

  • Require the company to change incorrect or incomplete data

  • Require the company to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing

  • Object to the processing of your data where the company is relying on its legitimate interests as the legal ground for processing

  • Ask the company to stop processing data for a period if data is inaccurate or there is a dispute about whether your interests override the company’s legitimate grounds for processing data.


If you would like to exercise any of these rights, please contact us on 01986 894436 or email


We may update this Privacy Policy at any time and it will supersede this version of our policy. The most recent version of the Privacy Policy is reflected by the version date at the bottom of the policy. Notice of changes to the company privacy policy will be carried on the Midas Structural Ltd website at


Web Cookies and Tracking

The company website uses cookies to better the users’ experience while visiting the website. As required by legislation, where applicable this website uses a cookie control system, allowing the user to give explicit permission or to deny the use of/saving of cookies on their computer/device.

Cookies are small files saved to the user’s computer’s browser and hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored and faster experience within this website.

Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors or use the cookie control system if available upon their first visit.

Media Files and Downloads

Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available users are advised to verify their authenticity using third-party antivirus software or similar applications.


  • Overview of the GDPR – General Data Protection Regulation

  • Data Protection Act 1998

  • Privacy and Electronic Communications Regulations 2003

  • The Guide to the PECR 2003

  • Facebook Privacy Policy

  • Twitter Privacy Policy

  • Google Privacy Policy


DATE: 24.05.2018

bottom of page