MD Web Solutions – Privacy Policy
This Privacy Policy explains how MD Web Solutions collects, uses, stores, and protects personal data when you use our website and services (the “Service”).
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
We may update this Privacy Policy from time to time. Any changes will be published on this page and will take effect when published.
Information We Collect
We may collect and process the following personal data:
- Name
- Email address
- Business information provided via contact or intake forms
- Billing and payment-related information
- Communications sent to us (e.g. emails or form submissions)
We only collect personal data that is necessary to provide, manage, and support our services.
Lawful Basis for Processing (UK GDPR)
We process personal data under one or more of the following lawful bases:
- Contractual necessity – to provide website-as-a-service subscriptions and one-off services
- Legal obligation – for accounting, tax, and regulatory compliance
- Legitimate interests – to operate, secure, and improve our services
- Consent – where you have explicitly provided it (for example, contact forms or cookies)
How We Use Your Information
We use personal data to:
- Deliver and manage your website and related services
- Process payments and manage billing
- Respond to enquiries and support requests
- Communicate with you about your service
- Maintain platform security and reliability
- Meet legal and regulatory obligations
We do not use personal data for automated decision-making or profiling.
Payments
Payments are processed securely by third-party payment providers.
MD Web Solutions does not store full payment card details on its own systems. Payment information is handled by payment providers in accordance with their own privacy policies.
Sharing Your Information
We do not sell or rent personal data.
We may share personal data with trusted third parties where necessary, including:
- Hosting and infrastructure providers
- Email and form processing services
- Payment processors
- Analytics and performance monitoring services
We may also disclose personal data where required to comply with legal obligations, enforce our Terms & Conditions, or protect our legal rights.
If mdweb.co.uk or markdudley.co.uk is sold, transferred, or restructured, personal data may be transferred as part of that change.
International Data Transfers
Some third-party service providers may process data outside the United Kingdom. Where this occurs, appropriate safeguards are used to ensure data is protected in accordance with UK GDPR requirements.
Data Retention
We retain personal data only for as long as necessary:
- While a subscription or service relationship is active
- For 90 days to 2 years after cancellation or completion
- Longer where required by law (e.g. financial and tax records)
Anonymous and aggregated data may be retained indefinitely.
Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)
Withdrawing or removing required data may prevent us from delivering services under our Terms & Conditions.
Requests can be made by emailing support@mdweb.co.uk. We aim to respond within 30 days.
Cookies
We use cookies to operate and improve the Service.
This may include:
- Essential cookies required for site functionality
- Analytics cookies to understand site usage and performance
Where required, consent will be requested. For more information, please see our Cookie Policy.
Data Security
We use reasonable technical and organisational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.
Contact & Data Protection
If you have questions or concerns about this Privacy Policy or how personal data is handled, please contact: