How Managed Services Ltd uses personal information connected with this website.
Document owner: Max Pocock, Lead Consultant Operational role: Data Protection Lead (not a statutory Data Protection Officer appointment) Version: 1.0 Issued: 25 July 2026 Review due: 25 July 2027, or earlier after a material change to the website or its processing Applies to: Visitors to managed-group.co.uk and people who contact Managed Services Ltd through a published website contact route
This notice describes the website as it operates on the issue date. The project-brief builder runs in the visitor's browser and does not send its contents to Managed Services Ltd.
1. Who is responsible
Managed Services Ltd is the controller for personal information it receives through the website's published contact routes and for any website processing that it determines.
Privacy and data-protection enquiries can be sent to Max Pocock at [email protected]. General enquiries can be sent to [email protected].
2. Information processed
The website does not contain an account, newsletter, online payment service or server-submitted contact form. Its project-brief builder processes text entered by the visitor locally in that browser. The brief is not uploaded, stored by the website or automatically emailed. A visitor may choose to copy it and send it separately.
If a visitor emails Managed Services Ltd, the company will receive the sender's email address and any name, organisation, message content, attachments and other information they choose to provide.
As with ordinary website hosting, technical request and security records may include an IP address, date and time, requested page, browser or device information, referring page and security-event information.
Max to confirm before final legal sign-off: the Cloudflare account's enabled logging or analytics features, the precise data fields retained, log-retention periods, hosting location and any additional processors configured outside this repository.
3. Why information is used
Information sent by email may be used to:
- respond to an enquiry and communicate with the sender;
- assess a possible engagement and take requested pre-contract steps;
- deliver and administer an agreed service;
- maintain appropriate business, complaint and legal records; and
- protect the company's systems, rights and users.
The usual lawful bases are taking steps at a person's request before a contract, performing a contract, complying with a legal obligation, and legitimate interests in responding to enquiries, operating a professional consultancy, maintaining records and protecting systems. A different basis will be identified where the circumstances require it.
Technical request and security records are used where necessary for delivery, reliability, abuse prevention, incident investigation and security, normally on the basis of legitimate interests in providing and protecting the website.
4. Sharing and processors
Personal information is shared only where there is a proper need. Possible recipients include authorised suppliers supporting website hosting, email, IT or professional advice; a client or delivery partner where this is explained and appropriate; and a regulator, court, law-enforcement body or other authority where required or justified.
The repository and live deployment identify Cloudflare Pages as the website hosting and deployment service. Cloudflare Email Address Obfuscation is active: it rewrites published email addresses in delivered pages and supplies a decoding script intended to make automated harvesting more difficult. It does not submit the project-brief contents.
Max to confirm: the public email provider, all other active Cloudflare account services, any subprocessors selected through those services, and whether any international transfers occur. Appropriate contractual and legal safeguards must be recorded where required.
5. Retention
Managed Services Ltd keeps personal information only for as long as needed for the purpose, relevant legal or contractual duties, and the establishment or defence of claims. Enquiry records that do not lead to work should have a defined review or deletion point; engagement records follow the applicable contract and company retention arrangements.
The project-brief builder has no company-side retention because the entered text remains in the visitor's browser unless the visitor copies and sends it.
Max to confirm: the working retention period for general email enquiries and the actual retention applied to Cloudflare request and security logs.
6. Individual rights
Depending on the circumstances, a person may have rights to be informed, access their information, correct it, have it erased, restrict or object to processing, and receive portable information. They may also have rights concerning automated decisions. These rights are not absolute and exemptions may apply.
Requests should be sent to [email protected]. Identity may be checked proportionately. A person may complain to the Information Commissioner's Office at ico.org.uk, but Managed Services Ltd welcomes the opportunity to address the concern first.
7. Security and links
Managed Services Ltd uses proportionate organisational and technical controls for information it holds. No internet or email service can be guaranteed completely secure. Visitors should avoid sending unnecessary sensitive information by ordinary email and agree a suitable secure route where needed.
Links to other websites are provided for convenience. Their operators are responsible for their own content and privacy practices.
8. Changes
This notice will be updated when the website's processing or relevant requirements change. Material changes will be made clear where appropriate.
9. Document control
This public notice is separate from the company's internal Privacy and Data Protection Policy. It must be checked against the live website, hosting account, email arrangements and processing records at each review.