Who we are

Our website address is: https://mbecnw.co.uk.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

By providing your contact details, you give us permission to contact you about the enquiry you are making. If further permission is given we can remain in contact with you, if it is declined we will cease contact in line with GDPR guidelines.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

In order to retain GDPR compliance we operate our analytics package(s) in a very particularly manner. Please see the examples below, referencing Google Analytics as an example.

1. We will always ask for and obtain end-user consent for all Google Analytics cookies on our website prior to their activation and operation.
2. Control each Google Analytics cookie in order to only activate them after your users have given their explicit consent to them.
3. Provide transparent information in your website’s cookie policy about the details of all Google Analytics cookies in operation – including their provider, technical details, duration and purpose. This is important as consent is only valid under the GDPR if it constitutes an informed choice on behalf of the users.
4. Turn on IP anonymization in your Google Analytics account and make sure that it uses pseudonymous identifiers.

Who we share your data with

Unless explicitly stated in a contact form, we will not share your data with any third parties.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. All requests will be handled in compliance with GDPR regulations.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Your contact information

Any contact information you have provided us with will remain with us until such time its deletion is requested,

Additional information

How we protect your data

Our encrypted data handling protects your data to accepted industry standards.

What data breach procedures we have in place

We will report any data breaches, regardless of size, to the relevant supervisory authority within 72 hours of becoming aware of said breach(es).

What third parties we receive data from

We may receive data from third parties such as analytics providers such as Google based outside the EU, advertising networks such as Facebook based outside the EU, such as search information providers such as Google based outside the EU, providers of technical, payment and delivery services, such as data brokers or aggregators.

We may also receive data from publicly available sources such as Companies House and the Electoral Register based inside the EU.
We may also receive data from your organisation if you have booked onto a course with us.

What automated decision making and/or profiling we do with user data

We do not operate any automated decision making or profiling of our website users or community members.

Industry regulatory disclosure requirements

If you feel that your data has not been handled correctly, or you are unhappy with our response to any requests
you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.

You can contact them by calling 0303 123 1113 or go online to www.ico.org.uk/concerns.

Disclaimer

MBEC NW Limited is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. If you have any questions related to our GDPR compliance, please contact our Data Protection Officer: or make a Data Subject Access Request.