MCSS is committed to protecting your personal information under UK GDPR and the Data Protection Act 2018. Our Privacy Policy explains what data we collect, why we collect it, how we safeguard it, and the rights you have as an SME or website visitor. We prioritise transparency and security to ensure your information is always handled responsibly and securely.
Last updated: 22nd Nov, 2025
MCSS — Midlands Cyber Security Specialists (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use and protect your personal data when you use our website mcss.ltd, our contact forms, or any of our services.
MCSS – Midlands Cyber Security Specialists
Based in Cannock, Staffordshire, UK
Email: info@mcss.ltd
ICO REGISTRATION NUMBER: [add here]
We operate as a data controller under UK GDPR and the Data Protection Act 2018.
We may collect the following personal data:
Name
Email address
Phone number
Business name
Details submitted via contact forms
Information provided during assessments or consultancy
IP address
Browser type
Device information
Pages viewed (via Google Analytics)
We process your data to:
Respond to enquiries
Provide requested services
Maintain internal records
Improve our website
Send service-related updates
Ensure security and fraud prevention
Comply with legal obligations
We process your data under the following UK GDPR lawful bases:
Contract – to deliver services you request
Legitimate Interest – to operate and improve our business
Consent – where you explicitly provide it (e.g., newsletter)
Legal Obligation – compliance with UK law
We do not sell or rent your data.
We may share data with:
Trusted service providers (e.g., Google Workspace)
Regulatory bodies where legally required
Insurance providers (only if relevant to an incident)
All processors operate under GDPR-compliant agreements.
We keep personal data only as long as necessary:
Enquiry data: up to 12 months
Client project data: up to 6 years (legal requirement)
Financial records: 6 years (HMRC requirement)
Under UK GDPR, you can request:
Access to your data
Correction of inaccurate data
Deletion of your data
Restriction of processing
Data portability
Withdrawal of consent
Objection to processing
Contact: info@mcss.ltd
Our website uses cookies for:
Traffic analytics
Security
Website functionality
See our Cookie Policy for more details.
Some services (e.g., Google Workspace, Google Analytics) may store data outside the UK/EU.
All transfers are protected by GDPR-approved safeguards.
We use Google Analytics to collect standard internet log information and details of visitor behaviour patterns.
Google Analytics processes data such as:
IP address (anonymised)
Device information
Browser type
Pages visited
Time spent on pages
Interaction and navigation patterns
This information is processed to help us understand how visitors use our website and to improve our services.
Google may store data on servers located outside the UK/EU. All transfers are protected by GDPR-approved safeguards.
You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On.
For questions about this Privacy Policy:
Email: info@mcss.ltd