Privacy Notice

Data Controller: Gary Brooks, trading as MGB Insights

Email: [email protected]

Telephone: 07513 606283

Location: Nottinghamshire, United Kingdom

We may collect the following categories of personal information:

• Contact and identity information — your name, email address, telephone number and any other details you provide when you contact us or submit an enquiry form.
• Business information — the name of your organisation, your role and information about your business that you share with us in the course of an engagement.
• Correspondence — emails, messages and notes arising from communications between us.
• Website usage data — if you consent to analytics cookies, we may collect information about how you use this website, including pages visited and time spent on the site. See our Cookie Policy for details.

We do not collect sensitive personal data (such as health, financial or criminal records) unless this is strictly necessary for a specific engagement and you have given your explicit consent.

We collect and use personal information only where we have a lawful basis to do so under UK GDPR. The table below sets out our purposes and the corresponding lawful basis.

We use your personal information to:

• Respond to your enquiries and provide the services you have requested.
• Communicate with you about your engagement or project.
• Prepare reports, recommendations and other deliverables as part of our services.
• Maintain records of our business activities.
• Improve our website and services (where you have consented to analytics).
• Comply with any legal or regulatory requirements.

We will not use your personal information for automated decision-making or profiling. We will not use your information for direct marketing without your prior consent.

MGB Insights does not sell, rent or trade your personal information. We may share your information only in the following limited circumstances:

• Service providers — we use a small number of trusted third-party tools to operate this website and manage communications (for example, our website hosting provider and inbox messaging service). These providers act as data processors on our behalf and are contractually required to handle your data securely and only for the purposes we specify.
• Legal requirements — we may disclose your information if required to do so by law, court order or a regulatory authority.

We do not transfer your personal data outside the United Kingdom or the European Economic Area unless appropriate safeguards are in place.

We retain personal information only for as long as is necessary for the purposes described in this notice, or as required by law. Our general retention periods are:

• Enquiry and contact records — up to 12 months from the date of last contact, unless an engagement follows.
• Client engagement records — up to 6 years from the end of the engagement, in line with standard business record-keeping practice.
• Financial and contractual records — up to 6 years, as required for tax and accounting purposes.
• Website analytics data — as set out in our Cookie Policy. Cookie Policy.

When personal data is no longer required, it is securely deleted or anonymised.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you have the right to request a copy of the personal data we hold about you.
• Right to rectification — you have the right to ask us to correct inaccurate or incomplete personal data.
• Right to erasure — you have the right to ask us to delete your personal data in certain circumstances.
• Right to restrict processing — you have the right to ask us to limit how we use your personal data in certain circumstances.
• Right to data portability — where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a structured, commonly used format.
• Right to object — you have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

These rights are not absolute and may be subject to exemptions in certain circumstances.

To exercise any of your rights, or to ask a question about how we handle your personal data, please contact us:

• Email: [email protected]
• Telephone: 07513 606283

We will respond to your request within one calendar month. We may need to verify your identity before we can action your request.

If you are unhappy with how we have handled your personal data, please contact us in the first instance using the details above and we will do our best to resolve your concern.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection:

• Website: ico.org.uk
• Telephone: 0303 123 1113

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Where we use third-party service providers, we require them to maintain equivalent standards of security.

No method of transmission over the internet is completely secure. If you have concerns about the security of your data, please contact us.

This website uses cookies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

We may update this Privacy Notice from time to time. The date at the top of this page shows when it was last revised. We encourage you to review this notice periodically.