Privacy Policy
PRIVACY POLICY
Last updated: 24 September 2026
1. ABOUT THIS PRIVACY POLICY
This Privacy Policy explains how MDL Powerup Ltd (“MDL Powerup”, “we”, “us” or “our”) collects, uses, stores and shares personal information when you visit our website, purchase products or services from us, contact us, create an account, subscribe to marketing communications or otherwise interact with us.
For the purposes of UK data protection law, MDL Powerup Ltd is the data controller of personal information for which we determine the purposes and means of processing.
Our online store is powered by Shopify. Shopify and other service providers may also process personal information in connection with providing services to us and, in some circumstances, may act as separate controllers for particular processing activities.
Nothing in this Privacy Policy affects any rights you have under applicable data protection law.
2. OUR DETAILS
MDL Powerup Ltd
1B Barras Lane
Carlisle
Cumbria
CA5 7NY
United Kingdom
Telephone: 01228 712121
Email: info@mdlpowerup.com
Company Registration Number: 07135552
VAT Registration Number: GB 991 859 847
3. PERSONAL INFORMATION WE COLLECT
The personal information we collect depends upon how you interact with us.
It may include:
- your name;
- billing and delivery address;
- email address;
- telephone number;
- account details;
- order and transaction information;
- products viewed, placed in your basket or purchased;
- returns, refunds and warranty information;
- correspondence and enquiries;
- information submitted through contact or enquiry forms;
- delivery and fulfilment information;
- payment and transaction information;
- IP address;
- browser and device information;
- website usage information;
- cookie and consent preferences;
- marketing preferences;
- information relating to reviews or feedback;
- information required for fraud prevention and security; and
- information you voluntarily provide when asking us to determine whether machinery or equipment is suitable for your requirements.
Where you ask us for machinery compatibility or suitability advice, this may include information about your tractor, ATV, UTV, excavator, vehicle or other equipment.
Payment card transactions may be processed by Shopify and/or the relevant payment provider. MDL Powerup does not necessarily receive or retain complete payment-card details where these are processed directly by a payment provider.
4. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
Directly from you, for example when you:
- place an order;
- create an account;
- contact us;
- submit an enquiry;
- request compatibility advice;
- make a warranty claim;
- request a return or refund;
- subscribe to marketing;
- submit a review; or
- otherwise provide information to us.
Automatically, when you use our website, including through cookies and similar technologies.
From service providers and business partners, where necessary to operate our business and provide our services.
This may include ecommerce, payment, accounting, delivery, communications, website, analytics, advertising and other service providers.
5. HOW WE USE PERSONAL INFORMATION
We may process personal information for the following purposes.
Processing orders and performing contracts
We use information where necessary to:
- process and fulfil orders;
- process payments;
- arrange delivery;
- provide products and services;
- manage customer accounts;
- process returns and refunds;
- provide customer support;
- administer warranties; and
- communicate with you about your order or contract.
Our lawful basis for this processing will generally be that it is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legal and regulatory obligations
We may process information where necessary to comply with legal obligations, including:
- accounting;
- taxation;
- record keeping;
- responding to lawful requests;
- product safety;
- consumer protection; and
- other regulatory requirements.
Our lawful basis is compliance with a legal obligation.
Operating and protecting our business
We may process information for purposes including:
- fraud prevention;
- website and account security;
- preventing misuse of our services;
- managing our business;
- maintaining business records;
- improving our products and services;
- understanding how customers use our website;
- handling disputes and legal claims; and
- protecting our legal rights.
Where applicable, our lawful basis is our legitimate interests, including operating, securing, administering and improving our business and defending our legal rights, provided those interests are not overridden by your rights and interests.
Responding to enquiries and providing advice
Where you contact us about a product, compatibility, availability or another matter, we may use the information you provide to respond to your enquiry.
Depending upon the circumstances, our lawful basis may be taking steps at your request before entering into a contract or our legitimate interest in responding to enquiries and operating our business.
Marketing
We may use personal information to send marketing communications where permitted by law.
For electronic marketing to individuals, we will obtain consent where required or rely upon another lawful basis permitted by applicable electronic-marketing law, such as the existing-customer “soft opt-in” where its requirements are satisfied.
You can unsubscribe from electronic marketing at any time using the unsubscribe facility provided in the communication or by contacting us.
Withdrawing from marketing will not prevent us from sending necessary service communications concerning an order, account, warranty, safety matter or other existing relationship.
6. COOKIES, ANALYTICS & ADVERTISING
Our website uses cookies and similar technologies.
Some cookies are necessary for the website and online store to operate. Other technologies may be used for purposes including:
- analytics;
- measuring website performance;
- remembering preferences;
- personalisation;
- advertising; and
- measuring the effectiveness of advertising.
Where consent is required by law, non-essential cookies and similar technologies will only be used after the required consent has been obtained.
Our website provides cookie controls which allow users in applicable regions to accept, decline or manage non-essential cookie preferences.
You can change your preferences through the cookie controls available on our website.
Third-party services used in connection with our website may include Shopify services and integrations with platforms such as Google and Meta where those services are enabled.
Those organisations may process information in accordance with their own privacy notices.
7. SHOPIFY
Our online store is hosted by Shopify.
Shopify processes personal information to provide the ecommerce platform and associated services used to operate our store.
Information submitted through our online store may therefore be transmitted to and processed by Shopify and its service providers.
We may also use Shopify features which use information about interactions with our store to provide or improve services, personalisation, analytics, fraud prevention and advertising functionality.
Where Shopify processes personal information for its own purposes, Shopify may act as a separate data controller and is responsible for that processing.
You can obtain further information about Shopify's processing through Shopify's own privacy information.
8. SERVICE PROVIDERS & OTHER RECIPIENTS
We may share personal information where reasonably necessary with organisations that provide services to us.
Depending upon the transaction and services used, these may include providers of:
- ecommerce and website hosting;
- payment processing;
- accounting and bookkeeping;
- order fulfilment;
- delivery and freight;
- IT and cloud services;
- customer communications;
- contact forms;
- fraud prevention and security;
- analytics;
- advertising and marketing;
- customer reviews;
- finance introductions or finance services where requested by the customer; and
- professional services such as accountants, insurers, solicitors or other advisers.
Our current systems may include services provided by Shopify, Xero, Google and Meta, together with other providers necessary to process orders and operate our business.
We only disclose personal information where reasonably necessary for the relevant purpose or where otherwise permitted or required by law.
Where you choose to apply for finance or use a third-party finance service, information may be provided directly to or processed by the relevant finance provider or intermediary under its own privacy terms.
9. DELIVERY COMPANIES
Where you order goods requiring delivery, we may provide the information reasonably necessary to the relevant courier, freight company, pallet network or other delivery provider.
This will ordinarily include information such as your name, delivery address, telephone number, email address and information required to complete the delivery.
10. ACCOUNTING & BUSINESS RECORDS
We use accounting and other business systems to maintain financial and transactional records.
Information relating to customers, orders, invoices, payments and refunds may therefore be processed through our accounting systems, including Xero, where applicable.
We retain financial and accounting records for the periods required by applicable tax, accounting and other legal requirements.
11. SOCIAL MEDIA, GOOGLE & THIRD-PARTY PLATFORMS
We may use services and integrations provided by third-party platforms, including Google, Facebook and Instagram (Meta).
Where enabled and subject to applicable consent requirements, these services may process information relating to website activity for analytics, advertising, measurement or personalisation.
Your interaction with those platforms may also be governed by the privacy policies and settings of the relevant provider.
12. FINANCE
Where finance options are made available in connection with our products, finance services may be provided by or through third-party finance providers or intermediaries.
Where you choose to enquire about or apply for finance, the relevant provider may collect and process personal information under its own privacy policy and legal obligations.
MDL Powerup will only use or disclose information relating to finance applications to the extent necessary and permitted by law.
13. LEGAL DISCLOSURES
We may disclose personal information where reasonably necessary:
- to comply with a legal obligation;
- in response to a valid request from a court, regulator, law-enforcement agency or other competent authority;
- to establish, exercise or defend legal claims;
- to investigate suspected fraud or unlawful activity;
- to protect the rights, property or safety of MDL Powerup, our customers or others; or
- in connection with a sale, restructuring or transfer of all or part of our business, subject to applicable data protection requirements.
14. INTERNATIONAL TRANSFERS
Some service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally and applicable law requires safeguards, we will rely upon an appropriate lawful transfer mechanism.
Depending upon the circumstances, this may include:
- a UK adequacy regulation;
- the UK International Data Transfer Agreement;
- the UK Addendum to the European Commission Standard Contractual Clauses; or
- another lawful transfer mechanism recognised under UK data protection law.
15. HOW LONG WE KEEP PERSONAL INFORMATION
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, warranty, insurance and regulatory requirements.
Different categories of information may therefore be retained for different periods.
When determining an appropriate retention period, we may consider:
- the nature of the information;
- the purpose for which it is held;
- our contractual obligations;
- applicable statutory limitation periods;
- warranty periods;
- accounting and tax requirements;
- product safety requirements;
- potential disputes or legal claims; and
- whether continued retention is necessary.
Information which is no longer required will be deleted, anonymised or otherwise dealt with appropriately where reasonably practicable and required by law.
16. DATA SECURITY
We take appropriate technical and organisational measures designed to protect personal information against unauthorised or unlawful processing and against accidental loss, destruction or damage.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Customers should not send sensitive payment information or passwords through unsecured communication channels.
17. YOUR DATA PROTECTION RIGHTS
Subject to applicable law and any relevant exemptions, you may have rights including:
- the right of access to personal information we hold about you;
- the right to rectification of inaccurate or incomplete information;
- the right to erasure in certain circumstances;
- the right to restrict processing in certain circumstances;
- the right to object to processing in certain circumstances;
- the right to data portability in certain circumstances;
- the right to withdraw consent where processing is based upon consent; and
- rights relating to certain forms of automated decision-making, where applicable.
These rights are not absolute and may be subject to exemptions and conditions under applicable law.
We may request information reasonably necessary to verify your identity before responding to a request.
To exercise a data protection right, contact:
18. DIRECT MARKETING
You can object to or opt out of direct marketing at any time.
Electronic marketing messages will contain an unsubscribe facility where required.
You can also contact:
to request that we stop sending marketing communications.
Opting out of marketing does not prevent us from contacting you about existing orders, contracts, warranties, product safety matters or other non-marketing communications where appropriate.
19. CHILDREN
Our products and Services are not directed at children and we do not knowingly seek to collect personal information from children through our online store.
If you believe a child has provided personal information to us inappropriately, please contact us.
20. THIRD-PARTY WEBSITES
Our website may contain links to websites operated by third parties.
Those organisations are responsible for their own privacy practices.
We are not responsible for the privacy practices, security or content of third-party websites which are outside our control.
You should review the relevant privacy information before providing personal information to a third party.
21. COMPLAINTS
If you have a concern about how we process your personal information, please contact us first so that we have an opportunity to investigate the matter.
You also have the right to make a complaint to the UK's independent data protection regulator, the Information Commissioner's Office (ICO).
Information Commissioner's Office
The ICO can also be contacted by telephone on 0303 123 1113.
Your right to complain to the ICO is not affected by first contacting MDL Powerup.
22. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers, legal requirements or processing activities.
The current version will be published on our website and the “Last updated” date will be amended where appropriate.
23. CONTACT US
For questions about this Privacy Policy, our use of personal information or to exercise your data protection rights, contact:
MDL Powerup Ltd
1B Barras Lane
Carlisle
Cumbria
CA5 7NY
United Kingdom
Telephone: 01228 712121
Email: info@mdlpowerup.com
For the purposes of applicable UK data protection law, MDL Powerup Ltd is the data controller in respect of personal information for which we determine the purposes and means of processing.