Privacy Policy

1. Who we are

For the purposes of UK data protection law, the data controller is: [Insert full legal entity name], trading as MTDClvr, registered in [England and Wales / Scotland / Northern Ireland] under company number [insert number], with registered office at [insert address].

Contact email: hello@mtdclvr.co.uk. If you have appointed a data protection lead or DPO, add their details here.

2. What personal data we may collect

Depending on how you interact with us, we may collect:

• Identity data, such as your name, title, and business name.
• Contact data, such as email address, telephone number, and correspondence details.
• Account data, such as login details, user profile information, and service preferences.
• Transaction and service data, including records you enter into the platform, filing workflow activity, and support requests.
• Technical and usage data, such as IP address, browser type, device information, pages viewed, and website interaction data.
• Marketing and communications preferences, including whether you want to hear from us.

3. How we collect personal data

We may collect personal data:

• Directly from you when you contact us, request a demo, sign up, subscribe, or use our services.
• Automatically through your use of our website or platform, including through cookies and similar technologies where permitted.
• From third parties acting on your instructions or as part of service delivery, such as payment providers, analytics providers, or connected integrations.

4. How we use personal data

We may use personal data to:

• provide, operate, maintain, and improve the website and MTDClvr services;
• set up and manage accounts;
• respond to enquiries, support requests, and demo bookings;
• process transactions and administer customer relationships;
• maintain service security, monitor performance, and prevent fraud or misuse;
• send service messages, updates, and important notices;
• send marketing communications where permitted by law and where you have not opted out;
• comply with legal, regulatory, tax, accounting, and reporting obligations;
• establish, exercise, or defend legal claims.

5. Lawful bases for processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Contract: where processing is necessary to provide services to you or take steps at your request before entering into a contract.
• Legitimate interests: for operating and improving our business, securing our systems, handling support, and administering relationships, provided your rights do not override those interests.
• Legal obligation: where we must process personal data to comply with applicable law or regulation.
• Consent: where required, including for certain marketing activity or non-essential cookies.

6. Who we may share personal data with

We may share personal data with trusted third parties where necessary, including:

• hosting, infrastructure, analytics, communications, and customer support providers;
• payment processors and professional advisers;
• service providers who help us operate the platform or website;
• regulators, courts, law enforcement, HMRC, or other public authorities where required or permitted by law.

We require service providers processing personal data on our behalf to act only on our instructions and to apply appropriate security and confidentiality measures.

7. International transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are used, such as adequacy regulations, international data transfer agreements, or other lawful transfer mechanisms.

8. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to meet legal, accounting, tax, regulatory, dispute resolution, and record-keeping requirements. Retention periods may vary depending on the nature of the data and the service relationship.

9. Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure in certain circumstances;
• request restriction of processing;
• object to processing based on legitimate interests or direct marketing;
• request transfer of your personal data where applicable;
• withdraw consent where processing relies on consent.

To exercise your rights, contact us using the details above. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

10. Cookies and similar technologies

Our website may use cookies and similar technologies to support functionality, security, and where permitted, analytics or communications. Please read our Cookie Policy for more detail.

11. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. No internet transmission or storage system can be guaranteed to be completely secure, but we take security seriously and review our controls regularly.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page, and material changes may also be brought to your attention by other appropriate means.