1. Who we are
This website is operated by Cloud MSD Ltd (“CloudMSD”, “we”, “us”, “our”), a company registered in England and Wales under company number 11878049, with its registered office at 97 Nibthwaite Road, Harrow, HA1 1TE.
We are the controller of the personal data described in this policy, and we are registered with the Information Commissioner’s Office (ICO). We are not required to appoint a Data Protection Officer. For any question about this policy or your personal data, email hello@cloudmsd.com or write to us at our registered office.
2. What this policy covers
This policy explains how we handle personal data about people who visit this website, contact us, or work with us as clients, prospective clients or suppliers.
When we build or support systems for a client, we may also process personal data held in those systems on the client’s behalf. In that case the client is the controller and we act as its processor under a written data processing agreement. That processing is governed by the client’s own privacy notice, not this one.
3. Information we collect
Information you give us
- Enquiries: when you use our contact form, we collect your name, email address, company (if given), the type of help you need, your budget and timeline, and anything you tell us about your project.
- Correspondence: emails, call notes and meeting notes when we discuss a project with you.
- Client and supplier records: business contact details, contract and project information, and invoicing and payment details.
Information collected automatically
Like most websites, our hosting provider’s servers automatically record technical information when you visit: your IP address, browser type, the pages requested and the date and time. These server logs are used only to keep the website secure and working.
We do not use analytics, advertising or tracking tools, and we do not collect special category data (such as health information) through this website.
4. How we use it and why
UK data protection law requires a lawful basis for each use of personal data. Ours are:
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and preparing a proposal | Steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries |
| Delivering our services and managing our relationship with you | Performance of a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Keeping this website secure and working | Our legitimate interest in protecting our systems |
| Establishing, exercising or defending legal claims | Our legitimate interest in protecting our business |
We do not use your data for marketing mailing lists, we do not sell it, and we do not make decisions about you based solely on automated processing.
5. Cookies and tracking
This website does not set cookies and does not use analytics or tracking technologies, so we do not show a cookie banner. If that changes, we will update this policy and ask for your consent where the law requires it.
6. Who we share it with
We share personal data only where necessary, and only with organisations that are bound to protect it:
- Website hosting: Hostinger, which hosts this website and processes server logs.
- Enquiry delivery: Web3Forms, which receives submissions from our contact form and forwards them to our inbox.
- Email and business software: the providers we use for email, document storage, accounting and banking.
- Our partner engineering team: for client projects, our established delivery partner outside the UK may need project contacts’ business details. Access is governed by a written agreement and limited to what the project requires.
- Professional advisers: such as our accountants and lawyers, under a duty of confidentiality.
- Authorities: where we are legally required to, for example to HMRC or in response to a court order.
7. International transfers
Some of the providers and partners listed above process data outside the UK. When that happens, we make sure the transfer is protected: either the destination has been found by the UK government to offer adequate protection, or we use the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures needed. You can ask us for details of the safeguards that apply.
8. How long we keep it
- Enquiries that do not lead to work: up to 24 months after our last contact, then deleted.
- Client and supplier records: for the length of the engagement and six years after it ends, to meet tax, accounting and legal requirements.
- Server logs: for the short period set by our hosting provider for security purposes.
9. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls and limiting access to the people who need it. No method of transmission over the internet is completely secure, but we work to protect your data and will notify you and the ICO of a breach where the law requires it.
10. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you (access);
- have inaccurate data corrected (rectification);
- have your data deleted in certain circumstances (erasure);
- ask us to limit how we use your data (restriction);
- object to processing based on our legitimate interests (objection);
- receive data you gave us in a portable format (portability);
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, email hello@cloudmsd.com. There is normally no charge, and we will respond within one month. We may need to confirm your identity before acting on a request.
11. Complaints
If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.