Privacy Notice

1. Who We Are

MDC Internet Solutions Ltd provides business software development, automation, systems integration and IT consultancy services. We are committed to protecting your personal information and handling it responsibly, transparently and in accordance with applicable UK data protection legislation. MDC Internet Solutions Ltd is the data controller responsible for the personal information described in this notice.

Company: MDC Internet Solutions Ltd
Company number: 11137807
Registered in: England and Wales
Registered office: 6 Willow Close, Littlethorpe, Leicestershire, LE19 2JE
Website: https://mdcinternetsolutions.co.uk
Privacy contact: privacy@mdcinternetsolutions.co.uk

2. Personal Information We Collect

When you contact us through our website, we collect your name, email address, message or enquiry, and any additional information you voluntarily include in your message. Providing this information is voluntary. However, we require sufficient contact information to respond to your enquiry.

Our website hosting infrastructure also collects certain technical information when you visit the website, which may include your IP address, browser information, requested pages, access times, connection details and server errors. This technical information is processed for website operation, troubleshooting and security purposes. We do not use website analytics or advertising tracking services.

3. How We Use Your Information

We use information submitted through our contact form to respond to questions and enquiries, discuss services or potential projects you have requested, prepare quotations and proposals, and follow up on enquiries relating to requested services.

We use technical server information to maintain website availability, identify errors, investigate security incidents and protect our systems against unauthorised activity. We do not use your contact form information for unsolicited marketing emails. We do not sell your personal information.

4. Lawful Bases for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases where appropriate.

Legitimate interests: We process certain personal information where necessary for our legitimate business interests, including responding to general enquiries, managing requested communications, maintaining website functionality and protecting our systems. We balance these interests against your rights and freedoms.

Steps before entering into a contract: Where you contact us in your individual capacity to request a quotation, discuss a service or take steps towards entering into a contract, we may process information necessary to respond to that request. Where a request is made on behalf of an organisation rather than by an individual entering into a contract personally, legitimate interests may be the more appropriate lawful basis.

5. Our Contact Form and TinyTools

Our website uses TinyTools to provide its contact form functionality. TinyTools is an internal tool operated by MDC Internet Solutions Ltd. It is not an independent third-party business or external marketing platform.

When you submit an enquiry, the information is delivered to MDC by email. The contact form does not maintain a separate database of submitted enquiries. Your information is used for the purposes described in this notice and is accessible only to authorised personnel who require it for legitimate business purposes.

6. Hosting and Third-Party Service Providers

Our website is hosted in the United Kingdom using infrastructure provided by 20i. 20i may process limited personal and technical information as necessary to deliver, operate and secure its hosting services. 20i may also use authorised subprocessors in accordance with its contractual data protection arrangements.

Our website uses certain externally hosted technical resources, including frontend libraries delivered through content delivery networks. Requests for these resources may disclose technical information, such as an IP address and browser request details, to the relevant service provider.

We do not share website enquiry information with third parties for their own marketing purposes. We may disclose personal information where required by law or where necessary to establish, exercise or defend legal claims.

7. How Long We Keep Your Information

Website enquiries — 12 months: Information submitted through our website contact form is retained for up to 12 months from the last relevant communication relating to the enquiry. If an enquiry results in a contractual or ongoing business relationship, relevant records may be retained separately where necessary to meet contractual, accounting or legal obligations.

Server and security logs — 24 months: Technical server and security records maintained under MDC’s retention arrangements are retained for up to 24 months for operational troubleshooting, security monitoring and investigation purposes, unless a longer period is necessary for a specific legal or security investigation. Hosting-provider records outside MDC’s direct retention controls may be subject to the provider’s own documented retention arrangements.

Deletion: When information is no longer required, we take appropriate steps to delete it securely or render it no longer identifiable, subject to applicable backup retention arrangements and legal requirements.

8. Cookies and Tracking Technologies

Our public website does not intentionally set cookies or use browser storage for visitor analytics, advertising or behavioural tracking. Our internally operated TinyTools contact form does not use cookies.

We do not operate Google Analytics, advertising pixels or similar visitor-tracking technologies on the public website. Some supporting services or infrastructure may use technologies strictly necessary for security or service delivery. If we introduce non-essential cookies, analytics or other tracking technologies, we will update this notice and implement any legally required consent controls before using them.

9. International Data Transfers

Our public website is hosted in the United Kingdom, and MDC ordinarily handles website enquiries within the UK. Some infrastructure providers, including 20i and its authorised subprocessors, may process or access limited personal information outside the United Kingdom where necessary to provide their services.

Where international transfers take place, appropriate safeguards must be in place in accordance with applicable UK data protection legislation. These may include UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as appropriate. You may contact us at privacy@mdcinternetsolutions.co.uk to request further information about applicable international transfer safeguards.

10. Information Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration or disclosure. These measures include access controls, secure website communications, appropriate hosting security and limiting access to information to those who require it.

No electronic storage or transmission system can be guaranteed completely secure. We regularly consider the measures appropriate to the nature of the information we process.

11. Your Data Protection Rights

Under UK data protection legislation, you may have the right to access personal information we hold about you; request correction of inaccurate information; request deletion in certain circumstances; request restriction of processing; object to certain processing activities; and request data portability where legally applicable. These rights are subject to applicable conditions and exemptions.

Your right to object: Where we rely on legitimate interests to process your personal information, you have the right to object to that processing. We will consider your objection and stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or processing is necessary for legal claims.

To exercise any of your rights, please contact privacy@mdcinternetsolutions.co.uk. We will normally respond within one month of receiving a valid request, subject to applicable legal provisions.

12. Complaints

If you have concerns about how we handle your personal information, please contact us using the details above. You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

ICO website: https://ico.org.uk (opens in a new tab)
Telephone: 0303 123 1113

13. Changes to This Privacy Notice

We may update this notice when our services, technology, data-processing activities or legal obligations change. The latest version will be made available on our website, together with the date of its most recent update.

For questions about this notice or how we handle personal information, contact privacy@mdcinternetsolutions.co.uk.