Effective from 1 September 2026 | Version 0.1
This policy explains how Maikoot Limited uses personal information and how maikoot.com uses cookies and similar technologies.
Maikoot Limited is the controller responsible for the personal information described in this policy.
Maikoot Limited is registered in England and Wales under company number 15089008. Our VAT number is GB448652954.
Registered Office: 7 Bell Yard, London, WC2A 2JR.
Office & Manufacturing: Unit 51A, BSS House, Cheney Manor Industrial Estate, Swindon, SN2 2PJ. Visits are by appointment only.
Email: enquiries@maikoot.com | Telephone: 01793 200830
This policy applies to maikoot.com, enquiries and quotations, appointments, Maikoot Solutions service work, design and manufacturing projects, and related communications with Maikoot Limited. Blue Box Goblin retail activity may have additional privacy information on blueboxgoblin.com.
Identity and contact information: Name, company or organisation, job title where relevant, postal address, email address and telephone number.
Enquiry and project information: The service requested, project description, quantity, material preference, intended use, deadline, budget information, appointment details and other requirements supplied to us.
Files and technical information: Drawings, CAD files, photographs, scans, PDFs, specifications, sample-part records, file metadata, approvals and revision notes. These files may contain personal information such as names, signatures or contact details.
Transaction and account information: Quotation, order, invoice, purchase order, VAT, payment, delivery, collection, refund and credit information. We do not normally store full payment-card details ourselves.
Communications: Emails, messages, telephone notes, meeting notes, instructions, approvals, complaints and records of decisions.
Website and technical information: IP address, browser and device information, pages viewed, security logs, consent choices and information produced by cookies or similar technologies.
Marketing preferences: Whether a person has asked to receive or stop receiving service updates or other marketing.
Information from third parties: Information supplied by a customer contact, colleague, marketplace, referral partner, payment provider, courier, manufacturing partner or publicly available business source where appropriate.
We do not intentionally request special-category personal information, such as medical, biometric, religious or political information. Please do not upload this type of information unless it is genuinely necessary and has been agreed with us in advance.
| Purpose | Information used | Main lawful basis |
|---|---|---|
| Responding to enquiries and preparing quotations | Identity, contact and project information | Taking steps at a person’s request before entering a contract; legitimate interests in responding to business enquiries. |
| Providing design, scanning, prototyping, printing, manufacturing and related services | Contact, project, file, approval and transaction information | Performance of a contract; legitimate interests where the contact is acting for a business customer. |
| Managing appointments, collections, deliveries and customer property | Contact, appointment, address and project records | Performance of a contract; legitimate interests in safe and efficient project management. |
| Payments, invoicing, accounting and tax | Transaction, company and contact information | Performance of a contract and compliance with legal obligations. |
| Customer service, complaints, insurance and legal claims | Communications, approvals, files, transaction and incident records | Contract, legal obligations and legitimate interests in resolving disputes and protecting legal rights. |
| Website operation, security, fraud prevention and backups | Technical, device, log and account information | Legitimate interests in maintaining secure and reliable systems; legal obligations where applicable. |
| Improving services and understanding website use | Feedback and technical usage information | Legitimate interests for non-intrusive operational analysis; consent where optional cookies or similar technologies require it. |
| Marketing and business development | Business contact and marketing-preference information | Consent where required; legitimate interests and PECR rules where business marketing is permitted. |
| Project publicity and case studies | Project images, business names, testimonials and contact information | Separate permission or another clearly agreed basis before publication. |
Where we rely on legitimate interests, those interests include operating and improving our business, communicating with customers and suppliers, protecting systems and property, maintaining project records, preventing fraud and establishing or defending legal claims. We consider the impact on the people concerned before relying on this basis.
We do not sell personal information. We may share it with the following categories where reasonably necessary:
Some recipients act as processors following our instructions. Others, such as banks, couriers, professional advisers or manufacturing partners in certain arrangements, may act as separate controllers under their own legal responsibilities.
Some cloud, email, software, payment or manufacturing providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use an applicable UK adequacy regulation, approved contractual safeguards or another lawful transfer mechanism. Further information about relevant safeguards can be requested from us.
Where an overseas manufacturing partner needs project information, we aim to share only what is necessary for quotation, tooling, sampling, production, inspection or delivery.
| Record type | Typical retention |
|---|---|
| General enquiries and quotations that do not become projects | Normally up to 24 months after the last meaningful contact. |
| Uploaded project files where no project proceeds | Normally up to 12 months, unless a longer period is needed for an active discussion, dispute, legal obligation or agreed future project. |
| Customer, project, approval and contract records | Normally 6 years after the project ends or the last transaction, unless a longer period is needed for legal claims, warranties, ongoing production or another lawful reason. |
| Accounting, VAT and transaction records | At least 6 years, or longer where required by law or an HMRC enquiry. |
| Complaints, incidents and legal claims | Normally 6 years after closure, and longer where a claim or proceeding remains possible or active. |
| Marketing records | Until the person opts out, or until the information is reviewed and no longer needed. Inactive marketing records are normally reviewed after 24 months. |
| Website and security logs | Normally up to 12 months, unless needed for investigation, security or legal purposes. |
| Cookie and consent records | For the period shown in the live cookie declaration or while needed to demonstrate the visitor’s choice. |
| Maikoot-created design and manufacturing files | May be retained longer where Maikoot Limited owns the files or where they are needed for repeat manufacture, licensing, continuity, evidence of development or intellectual-property protection. Personal information within those files will be minimised where practicable. |
Retention periods are guides rather than guarantees. We may delete information earlier where it is no longer needed, or keep it longer where required by law, contract, insurance, a dispute, a customer request or another legitimate reason.
We use proportionate technical and organisational measures designed to protect personal information, including controlled access, passwords, multi-factor authentication where available, security software, backups and staff or contractor access restrictions. No internet or storage system can be guaranteed completely secure, and people should avoid sending highly sensitive information through ordinary email unless an agreed secure method is available.
If we become aware of a personal-data breach, we will assess it, keep an internal record and notify the ICO and affected people where the law requires this.
We may send relevant service information or business updates where the law permits. Electronic marketing to individuals, sole traders and some partnerships normally requires consent or the applicable soft opt-in. Business-to-business marketing to corporate contacts may be based on legitimate interests, subject to the right to object.
Marketing consent is optional and must be separate from accepting Terms or requesting a quotation. Every marketing message will provide a clear way to opt out. A person can object to direct marketing at any time by contacting enquiries@maikoot.com.
Depending on the circumstances and lawful basis, a person may have the right to:
Rights are not absolute and may not apply in every case. We may need to verify identity before responding. We normally respond within the time required by law and do not charge unless a request is manifestly unfounded or excessive and the law permits a fee.
We do not currently make decisions with legal or similarly significant effects using solely automated processing. If this changes, this policy will be updated and appropriate information and safeguards will be provided.
The website and technical services are not directed at children. We do not knowingly collect personal information from a child without appropriate involvement from a parent, guardian, school, employer or other responsible organisation.
A person who is concerned about how we use personal information should contact:
Email: enquiries@maikoot.com
Postal address: Maikoot Limited, 7 Bell Yard, London, WC2A 2JR.
Please use the subject line “Data protection complaint” and explain the concern, relevant dates and the outcome requested. We will acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate it without undue delay, keep the complainant informed where necessary and communicate the outcome.
A person also has the right to complain to the Information Commissioner’s Office. Information is available at ico.org.uk
We would appreciate the opportunity to address the concern first, but this does not remove the right to contact the ICO.
We may update this policy to reflect changes in the website, services, providers, legal requirements or business practices. The current version and effective date will be published on this page. Material changes may also be highlighted on the website or communicated directly where appropriate.
Cookies are small text files stored on a computer, phone or other device. Similar technologies include local storage, pixels, scripts, tags and device identifiers that store information on a device or access information already stored there.
These technologies can help the website operate securely, remember choices, process forms, understand website use and provide embedded or third-party features.
| Category | Purpose |
|---|---|
| Strictly necessary | Required for core website functions such as security, network management, form operation, consent preferences and basic session functions. These do not normally require consent where they are genuinely necessary. |
| Functional or preference | Remember optional choices or provide enhanced functionality. Consent or another applicable legal exception may be required depending on the purpose. |
| Analytics or statistical | Help us understand how people use the website and improve performance. We will use consent where required. If a limited statutory exception is used, the live declaration and controls will explain this and provide a simple way to object where required. |
| Marketing, tracking or embedded content | May be used by advertising, social-media, video, map or other third-party services. Non-essential technologies in this category are disabled until valid consent is given. |
The list below reflects the cookies and similar technologies present on this website. It identifies the technology actually in use rather than tools that are merely possible.
Last scanned: 27 August 2026 | Scope: all public pages of this website.
No cookies are set on the public pages of this website. A scan of the home page, service pages, Materials & Capabilities page and the Contact / Get a Quote page returned no cookies of any kind for ordinary visitors. No analytics, advertising, social-media, embedded-video, map or other tracking technologies are installed.
The following first-party cookies are set by WordPress only when a member of Maikoot Limited signs in to the website administration area. They are never set for ordinary visitors browsing the public website.
| Name | Provider | Category | Purpose | Duration | Type | Consent basis |
|---|---|---|---|---|---|---|
| wordpress_test_cookie | Maikoot Limited (WordPress) | Strictly necessary | Checks that the browser accepts cookies before an administrator signs in. Set on the sign-in page only. | Session | First party | Exception — strictly necessary |
| wordpress_logged_in_[hash] | Maikoot Limited (WordPress) | Strictly necessary | Keeps a signed-in administrator authenticated between pages of the administration area. | Session, or 14 days where “remember me” is selected | First party | Exception — strictly necessary |
| wordpress_sec_[hash] | Maikoot Limited (WordPress) | Strictly necessary | Secures the administration session over HTTPS. | Session, or 14 days where “remember me” is selected | First party | Exception — strictly necessary |
| wp-settings-[id] and wp-settings-time-[id] | Maikoot Limited (WordPress) | Strictly necessary / preference | Remembers administration-screen layout preferences for a signed-in administrator. | 1 year | First party | Exception — strictly necessary |
| Name | Provider | Technology | Category | Purpose | Duration | Type |
|---|---|---|---|---|---|---|
| wpEmojiSettingsSupports | Maikoot Limited (WordPress) | Session storage | Strictly necessary | Records whether the browser can display emoji characters, so the website does not repeat the check on every page. | Cleared when the browser tab is closed | First party |
The following third-party service is requested by this website. It does not set cookies on this website, but the visitor’s IP address and browser information are received by the provider in order to deliver the files.
| Service | Provider | Purpose | Cookies set | Type |
|---|---|---|---|---|
| Google Fonts | Google Ireland Limited | Delivers the typefaces used in the website design from fonts.googleapis.com and fonts.gstatic.com. | None | Third party |
Before publication. This declaration must be re-scanned and updated if analytics, anti-spam or CAPTCHA, embedded content, chat, mapping, advertising or a consent-management tool is added to the website, and whenever the hosting, form or security configuration changes materially. Where optional technologies are introduced, they must remain blocked until the visitor has made a valid choice.
Visitors can use the website consent banner or the Cookie settings link in the footer to accept, reject or change optional categories. Withdrawing consent does not affect processing that took place before the choice was changed.
Current position. Because no optional cookies or tracking technologies are currently in use on this website, there is nothing for a visitor to accept or reject, and no consent banner is displayed. If optional technologies are introduced, a consent banner and a permanent Cookie settings control will be provided here and in the website footer.
Most browsers also allow cookies and site data to be blocked or deleted. Browser controls may affect essential website functions, form operation, saved preferences or embedded content. Browser support pages provide current instructions.
Third-party services may set or access technologies when they are enabled, for example analytics, anti-spam, video, maps, social media or embedded content. Their own privacy information may also apply. We will not knowingly load non-essential third-party technologies before the required choice has been made.
The cookie list may change when the website, plugins or external services change. The live declaration and effective date will be updated after material changes.
Questions about cookies or privacy can be sent to enquiries@maikoot.com.
Questions about this policy, a data-protection request or a complaint can be sent to enquiries@maikoot.com, or posted to Maikoot Limited, 7 Bell Yard, London, WC2A 2JR.
