Privacy Policy

Last updated: 30 September 2026

Controller and contact details

The data controller for this website is Harry & Sons Haulage Ltd, registered in England and Wales under Company No. 12291533, with registered office at 14 Bold Street, Liverpool, L1 4DS. You can contact us by email at hello@mobilityflex.world or by phone on +44 151 771 4412.

Scope of this policy

This Privacy Policy explains how we collect, use, store and share personal data when you visit mobilityflex.world, place an order request for Onda Path, use our contact form, or otherwise interact with us. It applies to all users of this website and is governed by UK GDPR and the Data Protection Act 2018.

Categories of data and sources

We collect personal data you provide directly to us, including your name, phone number, email address and any message content submitted through our order or contact forms. We also collect technical data automatically through server logs, including your IP address, browser type, pages visited, referring URL and timestamps. We do not collect special category data and we do not collect payment card information - orders are paid in cash on delivery.

Purposes and legal bases (Art. 6 GDPR)

We process your name and phone number to fulfil your order request and confirm delivery under Art. 6(1)(b) UK GDPR (performance of a contract or pre-contractual steps). We process contact form submissions to respond to your enquiry under Art. 6(1)(f) (legitimate interests). We process server log data to maintain security and diagnose technical issues under Art. 6(1)(f). Where we rely on legitimate interests, those interests are the proper operation and security of the website and our customer communications.

Contact form and newsletter

When you submit our contact form, we collect your name, email address and message. This data is used solely to respond to your enquiry and is not shared with third parties for marketing purposes. We do not operate a newsletter and do not collect email addresses for marketing without your explicit consent. The contact form requires your consent to processing, which you indicate by checking the consent checkbox before submitting.

Hosting and server logs

This website is hosted by a European hosting provider. Server access logs are retained for up to 30 days for security and diagnostics purposes. Log data includes IP addresses, request timestamps, HTTP status codes and user agent strings. This data is not combined with other identifying information unless required in connection with a security incident.

Cookies (reference to cookie policy)

This website uses cookies and similar technologies. Strictly necessary cookies are used without consent to maintain basic site functionality and manage your consent preferences. Analytics and marketing cookies are only placed with your explicit consent, given through the cookie consent banner displayed on your first visit. For full details of the cookies used, their purposes and storage durations, please read our Cookie Policy.

Web fonts and external resources

This website uses Google Fonts to display the Archivo and Rubik typefaces. When your browser loads the site, it makes a request to Google's servers to download the font files, which may involve Google processing your IP address. This constitutes a transfer of personal data to Google. We load Google Fonts via a CSS import, which means the request occurs on page load. If you wish to prevent this, you may disable font loading in your browser settings. We also load icon fonts from jsDelivr CDN, which involves a similar technical connection.

Recipients and processors

We do not sell your personal data to third parties. We may share data with service providers who process data on our behalf, including our hosting provider and the telephone confirmation service used for order management. All processors are bound by data processing agreements requiring them to process data only on our instructions and in compliance with UK GDPR.

Transfers outside the EU/EEA

The transfer of your IP address to Google when loading Google Fonts constitutes a transfer to a third country (United States). Google LLC participates in the EU-US Data Privacy Framework and provides adequate safeguards for data transfers. No other transfers of your personal data outside the UK or EEA are made in connection with this website's normal operation.

Retention periods

Order request data (name and phone number) is retained for up to 12 months following the conclusion of the transaction, after which it is securely deleted. Contact form enquiries are retained for up to 6 months. Server log data is retained for 30 days. Cookie consent records are retained for 12 months or until consent is withdrawn, whichever is earlier.

Security measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encrypted connections (HTTPS), access controls, and regular review of our data handling practices. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

Your rights (access, rectification, erasure, restriction, portability, objection)

Under UK GDPR, you have the right to access your personal data, request rectification of inaccurate data, request erasure where there is no compelling reason for its continued processing, request restriction of processing in certain circumstances, receive your data in a portable format, and object to processing based on legitimate interests. To exercise any of these rights, please contact us at hello@mobilityflex.world. We will respond within one calendar month.

Withdrawal of consent

Where we process your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can withdraw cookie consent at any time by clicking "Manage preferences" in the cookie banner or adjusting your browser settings.

Right to lodge a complaint with the supervisory authority

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the supervisory authority for data protection in the United Kingdom. The ICO can be contacted at ico.org.uk, by telephone on 0303 123 1113, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Minors

This website and the Onda Path product are intended for adults only. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, please contact us immediately so that we can arrange for it to be deleted.

No automated decision-making

We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you. All order confirmations involve a direct human telephone call from our team.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the website after changes are published constitutes acceptance of the revised policy.