GPDR & Privacy

MAV Systems Ltd

Last updated: 26 August 2026

MAV Systems Ltd (“MAV Systems”, “MAV”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Notice explains how we collect, use, store and protect personal information when you interact with MAV Systems, including when you visit our website, contact us, request information, purchase or enquire about our products and services, attend an event or exhibition, or communicate with us as a customer, supplier, business partner or prospective customer.

We aim to process personal information lawfully, fairly and transparently and to provide clear information about how and why we use it.

This Privacy Notice should be read alongside our Cookie Policy.

Who we are

MAV Systems Ltd is a UK-based manufacturer and supplier of Automatic Number Plate Recognition (ANPR) and vehicle recognition technology.

For the personal information covered by this Privacy Notice, MAV Systems Ltd will generally act as the data controller.

MAV Systems Ltd

Registered office: White Lion House Gloucester Road, Staverton, Cheltenham, England, GL51 0TF

Company registration number: 06429075

ICO registration number: ZA672478

Data Protection Contact: Chris Shepherd

Email: gdpr@mav-systems.com

If you have any questions about this Privacy Notice or the way we process personal information, please contact us using the details above.

 

The legislation we follow

MAV Systems processes personal information in accordance with applicable UK data protection and privacy legislation.

This includes, where applicable:

• the UK General Data Protection Regulation (UK GDPR);
• the Data Protection Act 2018 (DPA 2018);
• the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended; and
• the Data (Use and Access) Act 2025 (DUAA).

The DUAA has amended aspects of the UK’s data protection and electronic privacy framework. The relevant data protection provisions are now in force.

We keep this Privacy Notice under review as legislation, regulatory guidance and our processing activities develop.

 

What is personal information?

Personal information, also referred to as personal data, is information relating to an identified or identifiable individual.

Depending on how you interact with MAV Systems, this may include:

• your name;
• job title;
• employer or organisation;
• business email address;
• telephone number;
• business address;
• correspondence and communications;
• enquiry information;
• quotation and order information;
• customer account information;
• event and exhibition information;
• marketing preferences;
• records of consent and objections;
• website and technical information;
• IP address;
• information relating to your use of our website; and
• other information you choose to provide to us.

We only collect information that is relevant and reasonably necessary for the purposes for which it is processed.

 

How we collect personal information

We may collect personal information:

• directly from you;
• when you contact us by email, telephone or other means;
• when you complete a form on our website;
• when you request information about our products or services;
• when you request a quotation;
• when you purchase our products or services;
• when you communicate with our employees;
• when you attend an event, exhibition or meeting;
• when you subscribe to marketing communications;
• from your organisation where you are acting as a business contact;
• from distributors, representatives or business partners;
• from publicly available business information;
• from professional or commercial sources where lawful; and
• automatically through our website, cookies and similar technologies.

Where we obtain personal information from a source other than the individual concerned, we will provide appropriate privacy information in accordance with applicable law.

The ICO confirms that where personal information is obtained from another source, privacy information should generally be provided within a reasonable period and no later than one month, subject to applicable exceptions.

 

How we use personal information

We may use personal information for the following purposes.

Responding to enquiries

We use contact information to:

• respond to enquiries;
• answer questions;
• provide product information;
• provide technical information;
• arrange demonstrations;
• provide quotations; and
• communicate with prospective customers.

Providing products and services

We may use information to:

• process orders;
• provide products and services;
• manage customer accounts;
• arrange delivery;
• provide technical support;
• manage warranties;
• provide after-sales support; and
• administer contractual relationships.

Managing business relationships

We may process information relating to:

• customers;
• prospective customers;
• suppliers;
• distributors;
• partners;
• contractors; and
• other professional contacts.

This may include maintaining contact details, correspondence, contracts, quotations and account information.

Marketing

We may use business contact information to provide information about:

• MAV Systems products;
• new products and technologies;
• product updates;
• industry developments;
• events and exhibitions;
• company news; and
• other relevant business communications.

Marketing will be undertaken in accordance with applicable data protection and electronic marketing legislation.

Website operation and improvement

We may use website and technical information to:

• operate our website;
• maintain website security;
• identify technical problems;
• understand website usage;
• improve website content;
• improve website functionality; and
• understand the effectiveness of our digital activities.

Where cookies or similar technologies require consent, we will obtain the appropriate consent before using them.

Business administration

We may process personal information for:

• accounting;
• financial administration;
• auditing;
• record keeping;
• contract administration;
• supplier management;
• insurance;
• legal matters;
• compliance; and
• general business administration.

Security and fraud prevention

We may process information to:

• protect our systems;
• prevent unauthorised access;
• investigate suspected misuse;
• detect fraud;
• protect our employees, customers and business; and
• maintain information security.

Legal and regulatory purposes

We may process information where necessary to:

• comply with legal obligations;
• respond to lawful requests from authorities;
• establish, exercise or defend legal claims; or
• protect our legal rights and interests.

Our lawful bases for processing

We will only process personal information where we have an appropriate lawful basis.

Depending on the circumstances, this may include:

Contract

Where processing is necessary to enter into or perform a contract with you.

Legal obligation

Where processing is necessary for MAV Systems to comply with a legal obligation.

Legitimate interests

We may process information where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• operating our business;
• managing customer and supplier relationships;
• responding to business enquiries;
• providing and improving our products and services;
• maintaining business records;
• maintaining information security;
• preventing fraud and misuse;
• developing our website;
• conducting appropriate business-to-business marketing; and
• protecting our commercial and legal interests.

Where we rely on legitimate interests, we consider the potential impact on individuals and whether additional safeguards are appropriate.

Consent

In certain circumstances we may rely on your consent.

Where consent is required, we will provide clear information about what you are consenting to and how your information will be used.

You may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Other lawful bases

The DUAA has amended the UK data protection framework, including the provisions concerning recognised legitimate interests and other lawful bases.

Where applicable, MAV Systems will rely on the lawful basis appropriate to the particular processing activity.

 

Direct marketing

MAV Systems undertakes business-to-business marketing concerning our products, services, technologies, events and activities.

We will comply with applicable requirements under UK data protection legislation and PECR.

Where consent is required, we will obtain appropriate consent before sending electronic marketing communications.

Where legislation permits marketing without consent, we will ensure that the applicable conditions are met.

Every electronic marketing communication will provide an appropriate method for opting out.

You can unsubscribe from our marketing communications at any time by using the unsubscribe mechanism provided or by contacting:

gdpr@mav-systems.com

If you opt out of marketing, we may retain limited information necessary to ensure that your preference is respected.

 

Cookies and similar technologies

Our website uses cookies and may use other technologies that store or access information on your device.

These technologies may include:

• cookies;
• pixels;
• tags;
• scripts;
• local storage; and
• similar storage or access technologies.

Our use of these technologies is explained in our Cookie Policy.

PECR contains specific rules concerning cookies and similar technologies. The DUAA has amended those rules and introduced additional exceptions for certain limited uses.

Where consent is required, we will ask for your consent before using the relevant technology.

 

Who we share information with

We may share personal information where necessary and lawful with:

• IT providers;
• website hosting providers;
• software providers;
• CRM providers;
• email and marketing platforms;
• analytics providers;
• professional advisers;
• accountants;
• auditors;
• insurers;
• legal advisers;
• payment providers;
• delivery and logistics providers;
• event and exhibition organisers;
• distributors and business partners; and
• regulators, government bodies or law enforcement agencies where legally required.

Where a third party processes information on our behalf, we will take appropriate steps to ensure suitable contractual, security and data protection arrangements are in place.

We do not sell personal information to third parties.

 

International transfers

Some of our service providers or business partners may process personal information outside the United Kingdom.

Where this occurs, MAV Systems will ensure that the transfer is lawful and that appropriate safeguards are in place.

Depending on the circumstances, safeguards may include:

• an applicable adequacy decision or regulation;
• a UK International Data Transfer Agreement;
• a UK Addendum to appropriate standard contractual clauses; or
• another lawful transfer mechanism.

Where required, we will provide further information about relevant international transfers.

 

How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Retention periods depend on factors including:

• the type of information;
• the purpose for processing;
• our contractual obligations;
• legal and regulatory requirements;
• accounting requirements;
• business requirements; and
• the need to establish, exercise or defend legal claims.

When information is no longer required, it will be securely deleted, destroyed or anonymised.

 

Information security

MAV Systems takes the security of personal information seriously.

We use appropriate technical and organisational measures designed to protect information against:

• unauthorised access;
• unauthorised disclosure;
• accidental loss;
• destruction;
• alteration;
• misuse; and
• unlawful processing.

Our measures may include:

• access controls;
• password and authentication controls;
• restricted access;
• encryption where appropriate;
• secure IT infrastructure;
• network security;
• backups;
• monitoring;
• employee awareness and training;
• physical security; and
• supplier security controls.

No electronic transmission or storage system can be guaranteed to be completely secure, but we take appropriate steps to protect the information we hold.

 

Your rights

Depending on the circumstances, you may have rights under UK data protection law to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction of processing;
• object to certain processing;
• object to direct marketing;
• request portability of certain information;
• withdraw consent;
• exercise rights relating to certain automated decision-making; and
• complain to the Information Commissioner’s Office.

These rights are subject to applicable legal conditions and exemptions.

 

Making a data protection request

To exercise your rights, please contact:

MAV Systems Ltd
Data Protection Contact: Chris Shepherd

Email: gdpr@mav-systems.com

Please provide sufficient information for us to understand your request.

We may need to verify your identity before providing personal information or acting on a request.

We will respond within the applicable statutory timeframe.

 

Subject Access Requests

You have the right to request access to personal information that MAV Systems holds about you, subject to applicable exemptions.

A Subject Access Request will normally be responded to without undue delay and within one month.

Where legally permitted, the response period may be extended for complex or multiple requests.

Requests will normally be dealt with free of charge, although applicable legislation permits reasonable charges or refusal in certain circumstances, including where requests are manifestly unfounded or excessive.

 

Automated decision-making and profiling

MAV Systems does not currently intend to use solely automated decision-making that produces, or is likely to produce, legal or similarly significant effects on individuals unless such processing is permitted under applicable law and the required safeguards are provided.

Where applicable, we will provide individuals with the information and safeguards required by UK data protection legislation.

The DUAA has amended the UK’s framework concerning automated decision-making and profiling, and MAV Systems will take account of those requirements where applicable.

 

Children’s information

Our website and services are primarily intended for businesses and professional users.

We do not knowingly seek to collect children’s personal information for marketing purposes.

If we become aware that we have inadvertently collected personal information from a child in circumstances where it should not have been collected, we will take appropriate steps to address the situation.

 

Third-party websites

Our website may contain links to websites operated by third parties.

Those websites have their own privacy and cookie policies.

MAV Systems is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy information of third-party websites before submitting personal information.

 

Data breaches

MAV Systems maintains procedures for identifying, assessing and responding to personal data breaches.

Where a breach occurs, we will assess the circumstances and take appropriate action.

Where legally required, we will notify the Information Commissioner’s Office and/or affected individuals.

 

Complaints

If you have concerns about the way we process your personal information, please contact us first:

gdpr@mav-systems.com

We will investigate your complaint and provide an appropriate response.

You also have the right to complain to the UK’s data protection regulator.

Information Commissioner’s Office

Website: https://ico.org.uk/

The ICO’s current guidance confirms that organisations should provide clear privacy information explaining their purposes, lawful bases, recipients, retention periods and individuals’ rights.

 

Changes to this Privacy Notice

We may update this Privacy Notice from time to time.

Updates may be required because of:

• changes in legislation;
• changes in regulatory guidance;
• changes to our business;
• changes to our products or services;
• changes to our website;
• changes to our suppliers or technology; or
• changes to how we process personal information.

The latest version will always be made available on our website.

Last updated: 26 August 2026