MCSS is committed to protecting your personal information under UK GDPR and the Data Protection Act 2018. Our Privacy Policy explains what data we collect, why we collect it, how we safeguard it, and the rights you have as an SME or website visitor. We prioritise transparency and security to ensure your information is always handled responsibly and securely. 

Privacy Policy

Last updated: 22nd Nov, 2025

MCSS — Midlands Cyber Security Specialists (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use and protect your personal data when you use our website mcss.ltd, our contact forms, or any of our services.

1. Who We Are

MCSS – Midlands Cyber Security Specialists
Based in Cannock, Staffordshire, UK
Email: info@mcss.ltd

ICO REGISTRATION NUMBER: [add here]

We operate as a data controller under UK GDPR and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect the following personal data:

Information you provide directly:

• Name
  
  

• Email address
  
  

• Phone number
  
  

• Business name
  
  

• Details submitted via contact forms
  
  

• Information provided during assessments or consultancy
  
  

Information collected automatically:

• IP address
  
  

• Browser type
  
  

• Device information
  
  

• Pages viewed (via Google Analytics)
  
  

3. How We Use Your Data

We process your data to:

• Respond to enquiries
  
  

• Provide requested services
  
  

• Maintain internal records
  
  

• Improve our website
  
  

• Send service-related updates
  
  

• Ensure security and fraud prevention
  
  

• Comply with legal obligations
  
  

4. Legal Basis for Processing

We process your data under the following UK GDPR lawful bases:

• Contract – to deliver services you request
  
  

• Legitimate Interest – to operate and improve our business
  
  

• Consent – where you explicitly provide it (e.g., newsletter)
  
  

• Legal Obligation – compliance with UK law
  
  

5. Sharing Your Data

We do not sell or rent your data.
We may share data with:

• Trusted service providers (e.g., Google Workspace)
  
  

• Regulatory bodies where legally required
  
  

• Insurance providers (only if relevant to an incident)
  
  

All processors operate under GDPR-compliant agreements.

6. Data Retention

We keep personal data only as long as necessary:

• Enquiry data: up to 12 months
  
  

• Client project data: up to 6 years (legal requirement)
  
  

• Financial records: 6 years (HMRC requirement)
  
  

7. Your Rights

Under UK GDPR, you can request:

• Access to your data
  
  

• Correction of inaccurate data
  
  

• Deletion of your data
  
  

• Restriction of processing
  
  

• Data portability
  
  

• Withdrawal of consent
  
  

• Objection to processing
  
  

Contact: info@mcss.ltd

8. Cookies

Our website uses cookies for:

• Traffic analytics
  
  

• Security
  
  

• Website functionality
  
  

See our Cookie Policy for more details.

9. International Transfers (e.g., Google Workspace & Analytics) 

Some services (e.g., Google Workspace, Google Analytics) may store data outside the UK/EU.
All transfers are protected by GDPR-approved safeguards.

10. Analytics Cookies 

Google Analytics

We use Google Analytics to collect standard internet log information and details of visitor behaviour patterns.
Google Analytics processes data such as:

• IP address (anonymised)
  
  

• Device information
  
  

• Browser type
  
  

• Pages visited
  
  

• Time spent on pages
  
  

• Interaction and navigation patterns
  
  

This information is processed to help us understand how visitors use our website and to improve our services.
Google may store data on servers located outside the UK/EU. All transfers are protected by GDPR-approved safeguards.

You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-On.

11. Contact Us

For questions about this Privacy Policy:
Email: info@mcss.ltd