Privacy Policy

Last updated: 17 August 2026

Midlands Compliance Services Limited (“MCS”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This privacy policy explains what information we collect, why we collect it, how we use it and the rights you have in relation to your personal information.

1. Who we are

Midlands Compliance Services Limited provides health & safety, compliance and operational support to businesses.

For data protection purposes, Midlands Compliance Services Limited is the controller of personal information covered by this policy.

You can contact us using the details provided on our Contact Us page.

2. Information we may collect

Depending on how you interact with us, we may collect:

  • your name;

  • business name and job title;

  • email address;

  • telephone number;

  • information you provide through our website contact form;

  • correspondence between you and MCS;

  • information provided when requesting a quotation or using our services;

  • information required to administer client work, contracts and invoices;

  • your email address and marketing preferences if you join our mailing list;

  • limited technical information about your use of our website, such as pages visited, traffic source, browser or device information and similar analytics data; and

  • business contact information obtained from publicly available sources where we reasonably believe our services may be relevant to your organisation.

Our free resources can be downloaded without providing your name or email address.

3. How we use your information

We may use personal information to:

  • respond to enquiries;

  • provide quotations and proposals;

  • deliver services to clients;

  • administer contracts, invoices and business records;

  • communicate with clients about work in progress;

  • send new resources and occasional MCS updates where you have chosen to receive them;

  • contact relevant business representatives about MCS services where permitted by law;

  • improve our website, resources and services;

  • understand how visitors find and use our website;

  • maintain appropriate business and accounting records; and

  • establish, exercise or defend legal claims where necessary.

4. Our lawful bases

Under UK data protection law, we must have a lawful basis for using personal information.

Depending on the circumstances, we rely on:

Contract – where processing is necessary to provide services you have requested or to take steps before entering into a contract.

Legitimate interests – where it is reasonably necessary for operating and developing MCS, responding to business enquiries, managing client relationships, improving our services or carrying out proportionate business-to-business marketing, provided those interests are not overridden by your rights and interests.

Consent – where you have actively chosen to join our mailing list or where consent is otherwise required, including for relevant non-essential website technologies.

Legal obligation – where we must retain or use information to meet legal, tax, accounting or regulatory requirements.

You may object at any time to the use of your personal information for direct marketing. If you do, we will stop using your information for that purpose.

5. Marketing and business contact

If you choose to join the MCS mailing list, we may email you about new practical resources and occasional relevant MCS updates.

You can unsubscribe at any time using the unsubscribe link in an email or by contacting us.

We may also contact representatives of businesses where their professional contact details are publicly available and we reasonably believe MCS services are relevant to their organisation. Where personal information is involved, we use it only where we have an appropriate lawful basis and in accordance with applicable electronic marketing rules.

We do not sell personal information or mailing lists.

If you tell us that you do not want to receive marketing from us, we may retain limited information on a suppression list so that we can respect that request in future.

6. Free resources

MCS provides free checklists, templates and other practical resources through this website.

You do not need to provide personal information or join our mailing list to download these resources.

Joining the mailing list is separate and entirely optional.

7. Website analytics and cookies

Our website may use cookies and similar technologies to operate correctly and to help us understand how visitors use the site.

We may use analytics services such as Google Analytics to understand matters such as:

  • which pages are visited;

  • how visitors reach the website;

  • downloads and other website interactions; and

  • general website performance.

Where consent is legally required for non-essential cookies or similar technologies, they will only be used after the appropriate consent has been obtained.

You can manage your cookie preferences through the cookie controls provided on the website.

8. Who we share information with

We only share personal information where there is a legitimate business or legal reason to do so.

This may include service providers supporting our business, such as:

  • Squarespace, which hosts and supports our website;

  • Google, including services used for business email and website analytics;

  • MailerLite, which provides our mailing-list and email-marketing functionality;

  • accounting and professional advisers;

  • IT and technology providers; and

  • regulators, courts, law-enforcement bodies or other authorities where disclosure is legally required.

These organisations may act as data processors or, in some circumstances, as independent controllers of information.

We do not sell your personal information to third parties.

9. International transfers

Some of the technology providers we use may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards recognised under UK data protection law are in place.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Typical retention periods may include:

  • enquiries and general correspondence – normally up to two years where no ongoing business relationship develops;

  • client and project records – for as long as necessary to manage the relationship and any relevant legal or professional obligations;

  • financial and accounting records – normally six years where required for tax or accounting purposes;

  • mailing-list information – until you unsubscribe or we otherwise stop using the list; and

  • marketing suppression information – for as long as necessary to ensure that we continue to respect an opt-out request.

We may retain information for longer where reasonably necessary in connection with a legal dispute, regulatory requirement or other legal obligation.

11. Your rights

Depending on the circumstances, you may have the right to:

  • request access to personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • request deletion of your information;

  • ask us to restrict how your information is used;

  • object to certain uses of your information, including direct marketing;

  • receive certain information in a portable format;

  • withdraw consent where processing is based on consent; and

  • complain about how your information has been handled.

Not every right applies in every situation.

To exercise your rights, contact us using the details on our Contact Us page.

12. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we have an opportunity to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

13. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet-based system can be guaranteed to be completely secure.

14. Changes to this policy

We may update this privacy policy from time to time to reflect changes to our services, technology or legal obligations.

The latest version will always be published on this website with the date of the most recent update shown at the top.