Privacy notice

This notice explains what personal data MPA Business Services Limited (we, us) collects from visitors to mpa-search.com (our site), why, and what your rights are. We are the data controller for that data. We are registered in England and Wales under company number 10338502 at Elstree Studios, Shenley Road, Borehamwood WD6 1JG.

The MPA Search application at app.mpa-search.com, where subscribers log in, has its own privacy information shown within the application. This notice covers the public website only.

What we collect, and why

The contact form

When you use the contact form we collect your name, your work email address, your company if you give it, your message, and whether you asked for a demonstration. We use this to reply to you, to arrange and hold a demonstration if you asked for one, and to follow up your enquiry. The lawful basis is our legitimate interest in responding to enquiries about our services, and, where you ask us to set up a subscription, taking steps at your request before entering into a contract.

The message is delivered to us by email through our email service provider, Resend, and then held in our business email and, if you become a client, in our client records. We do not add you to any marketing list on the strength of an enquiry.

Demonstration bookings

If you book a time through the "Choose a slot" link, you leave our site for a booking page operated by Calendly. Calendly collects the details you enter there (name, email address and any notes) under its own privacy policy and passes the booking to us. We use those details to hold the meeting you booked.

Visiting the site

Our site is a static website served through Cloudflare. It sets no cookies and uses no advertising trackers. We use Cloudflare Web Analytics to count visits: it records the pages viewed, the referring site, the country, browser and device type in aggregate, without cookies, fingerprinting or any identifier that follows you between visits. Cloudflare also processes connection data such as your IP address, browser type and the pages requested in order to serve the site and protect it from abuse, and may keep short-term logs for that purpose.

If you are a client

We hold the business contact details of the people at client organisations who use MPA Search or deal with us, and we use them to provide the service, to manage the subscription and to tell you about changes to the service. Use of the application itself is covered by the notice within the application.

Who we share data with

We do not sell personal data and we do not share it with advertisers. We share it only with the suppliers who process it on our behalf to run the site and our business (our email provider, Resend; our booking provider, Calendly; our hosting provider, Cloudflare; and our business email and document storage providers, Google and Zoho), with professional advisers where necessary, and where we are required to by law. If we sell or buy any business or assets, personal data may be disclosed to the prospective buyer or seller. Some of these suppliers process data in the United States under the UK's international data transfer rules.

How long we keep it

We keep enquiry messages for as long as needed to deal with the enquiry and any follow-up. If you become a client, your details are kept for the life of the relationship and for the period required for our business records afterwards; otherwise the correspondence is retained only as part of our normal business email records. Booking data is kept by Calendly under its own retention policy.

Your rights

Under the UK General Data Protection Regulation and the Data Protection Act 2018 you have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict our processing of it, and to data portability where it applies. There is no charge for these requests in normal circumstances. To exercise any of them, use the contact form. If you are not satisfied with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Our site is served over HTTPS and the contact form is submitted over an encrypted connection. The transmission of information over the internet is never completely secure, and any transmission is at your own risk; once we have received your information we use appropriate procedures and security features to protect it.

Changes to this notice

We may update this notice from time to time by amending this page. The date at the top shows when it was last changed.