Privacy notice

Who we are

MD QMS LTD (“MD QMS”, “we”) is the controller of personal data collected through this website. We are a company registered in England and Wales (company number 14499573), with our registered office at 9 Upland Road, St Helens, England, WA10 3SQ. You can contact us about privacy at alex.adamovici@mdqms.co.uk.

What we collect and why

• Enquiries. When you send us a message or book a call, we collect your name, work email, company and what you tell us about your enquiry. We use this to respond and, if you ask us to, to prepare a proposal. Lawful basis: our legitimate interest in responding to business enquiries, or steps taken at your request before entering into a contract.
• Newsletter. If you subscribe, we collect your email address to send our newsletter. Lawful basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
• Clients. If you become a client, we process business contact details needed to deliver our services and meet our legal and accounting obligations.
• Website operation. Our hosting provider processes technical data such as IP addresses in server logs to deliver and secure the website.

Who we share it with

We use trusted service providers who process data on our behalf: our CRM (HubSpot, EU data centre), which receives the details you send through our booking and message forms; Microsoft 365, which holds our calendars and sends meeting invitations; Cloudflare Turnstile, which checks that form submissions come from a person and processes your IP address and browser information for that purpose; our newsletter provider (beehiiv); our website and booking-service host (Vercel); Google Fonts (which receives your IP address when fonts load); and, only with your consent, Google Analytics. We don’t sell personal data. Where a provider transfers data outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Addendum.

Cookies and analytics

If you click Accept in the cookie banner, we use Google Analytics (Google Ireland Limited) to see which pages are visited and which lead to a booking or message. It sets first-party cookies (_ga and _ga_…) that last up to two years. We also note in your browser tab (session storage, cleared when the tab closes) how you reached the site: campaign tags, the referring site and your first page. That is sent to us only if you book a call or send a message, so we know which channels work. Lawful basis: your consent.

If you decline, or don’t choose, no analytics script loads and none of this is stored. You can change your choice at any time with “Cookie settings” at the bottom of every page. We don’t use advertising cookies. Embedded forms from our newsletter and forms providers may set cookies that are necessary for those forms to work.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for. Enquiries that don’t lead to an engagement are reviewed and deleted periodically. Client records are kept for as long as required by law, for example for accounting purposes.

Your rights

Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email alex.adamovici@mdqms.co.uk.

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk). We’d appreciate the chance to put things right first.

Changes

We may update this notice. The date at the top shows when it last changed.