Privacy Policy

1. Data Controller

Mark My System is the data controller responsible for your personal data. If you have any questions, please contact us through the methods provided on our website.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity data: name, job title, company name.
• Contact data: email address, telephone number, and business address.
• Project data: technical requirements, system access credentials, files, and communications shared during an engagement.
• Technical data: IP address, browser type, device information, and usage data collected through analytics cookies (with your consent).
• Enquiry data: information you provide through our contact forms.

3. How We Use Your Data

We use your personal data for the following lawful bases:

• Performance of a contract: delivering our services, managing projects, and communicating with you.
• Consent: sending marketing communications (you can withdraw consent at any time).
• Legitimate interests: improving our services, maintaining security, and managing our business operations.
• Legal obligation: complying with applicable laws and regulations.

4. Data Sharing

We will not sell your personal data. We may share data with trusted service providers (e.g., hosting, payment processing) who are contractually obliged to process it only on our instructions and in compliance with UK GDPR. We may disclose data if required by law.

5. International Transfers

Where we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses approved by the Information Commissioner's Office (ICO).

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Project data is retained for the duration of the engagement plus a reasonable period thereafter.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right to access, rectify, or erase your personal data.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the ICO (www.ico.org.uk).

To exercise these rights, please contact us. We will respond within one month.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, and secure hosting.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via our website or email. Please check this page periodically for updates.