Privacy notice

This explains what happens to your personal data when you use this website — written to be read, not to be survived. If anything here is unclear, ask us and we’ll explain it properly.

Last updated 27 September 2026

Who we are

MPS Accountancy Ltd is the data controller for the personal data described here — meaning we decide what is collected and why, and we are responsible for looking after it.

Company
MPS Accountancy Ltd, registered in England and Wales, company number 15458296
Registered office
30 Greenbox Weston Hall Road, Stoke Prior, Bromsgrove, Worcestershire B60 4AL
ICO registration
ZB683413

Anything about your data can go to the address above, or straight to our data protection contact at matthew@mps-accountancy.co.uk, which is the contact published on our ICO register entry. Either reaches a person who can deal with it.

What we collect, and why

Everything this site does with your data is set out below, each with the legal basis we rely on — because a purpose without a basis isn’t much of an explanation.

Answering your enquiry

What we collect
Your name and email address, your phone number and business name if you give them, and whatever you tell us in the message — plus the business structure, trading duration, turnover band and industry you select.
Why
So we can reply to you and come to the first conversation knowing roughly what you need.
Legal basis
Legitimate interests (Art 6(1)(f)) — responding to someone who has asked us to get in touch. If we go on to work together, the basis becomes performance of a contract (Art 6(1)(b)).
How long we keep it
Kept for 12 months from your last contact with us, then deleted. If you become a client, your records are kept under our engagement terms and the retention periods our professional and tax obligations require.

Understanding how the site is used

What we collect
Pages viewed, how you arrived, approximate location (country or city level, worked out from your IP address), your device, browser and operating system, screen size and language, and what you do on a page, such as how far you scroll and which links you click. When you send an enquiry, the business structure, trading duration and turnover band you picked, but nothing you typed.
Why
So we can see which pages are useful, where people get stuck, and which pages bring in enquiries.
Legal basis
Consent (Art 6(1)(a)) for Google Analytics cookies, which are only set if you accept and stop being used the moment you withdraw. Everything else here relies on legitimate interests (Art 6(1)(f)), our interest being to know which pages help people and which bring in enquiries. That includes the requests Google Analytics sends without cookies, which go to Google whatever you choose on the banner, and Vercel's cookieless measurement, which cannot identify you.
How long we keep it
Google Analytics data is held for 14 months. Vercel's cookieless measurement is aggregated and its daily identifier is discarded every 24 hours.

Keeping the site running and secure

What we collect
Request logs, including IP address, and — for MPS staff only — a login session cookie.
Why
To keep the site available, diagnose faults, and stop the contact form being abused by automated spam.
Legal basis
Legitimate interests (Art 6(1)(f)) — running a secure website and preventing misuse.
How long we keep it
Short-lived. Logs are rotated by our host; staff sessions expire after 24 hours.

You don’t have to give us any of it. The contact form is the only place we ask for anything, and everything on it is there because it makes our first reply more useful — not because a form needed filling.

Cookies and analytics

Nothing that isn’t essential is stored on your device until you say yes, and declining changes nothing about how the site works.

Google Analytics runs either way, though. Until you accept, and for as long as you decline, it sets no cookies, but it still reads some details from your browser and sends them to Google with each page you view and each enquiry you send. The cookie policy lists exactly what. Accepting only adds the cookies that let it recognise a returning visitor.

Declining the banner doesn’t stop those requests. To stop them, install Google’s opt-out browser add-on, or block google-analytics.com in your browser. The site works the same either way.

Some other measurement runs without touching your device at all, and so doesn’t depend on your cookie choice:

  • Vercel Web Analytics. Counts page views and referrers. It sets no cookie and stores nothing on your device: your IP address and browser details are turned into a one-way hash on Vercel's servers, which is discarded daily and can't be traced back to you or joined up across days.
  • Server logs. Our host records the usual request details, including IP address, for security and troubleshooting. These are held briefly and are not used to build any profile of you.

The full list of cookies and storage, with what each one does and how long it lasts, is on the cookie policy. You can change your mind whenever you like: .

Who else sees your data

We don’t sell your data and we don’t share it for anyone’s advertising. A small number of suppliers process it on our behalf, under contract and only on our instructions:

SupplierWhat they doWhere the data goes
Vercel Inc.Hosts the website and provides the cookieless analytics above.United States, under the UK Addendum to the EU Standard Contractual Clauses.
MongoDB Limited (MongoDB Atlas)Provides the database your enquiry is stored in.Stored in Ireland (EU), which UK law recognises as adequate. May be accessed from other countries, including the United States, by MongoDB, Inc. and its affiliates, under the UK Addendum to the EU Standard Contractual Clauses.
ResendDelivers your enquiry to us as an email.United States, under the UK Addendum to the EU Standard Contractual Clauses.
Google Ireland LimitedProvides Google Analytics. Whatever you choose on the cookie banner, it receives details of the pages you view and what you do on them, including the business structure, trading duration and turnover band you picked if you send an enquiry (never anything you typed). Accepting only adds the cookies that let it recognise a returning visitor.May be processed in the United States by Google LLC, under the UK Addendum to the EU Standard Contractual Clauses.
Microsoft Ireland Operations Limited (Microsoft 365)Provides the mailbox your enquiry is delivered to and stored in.May be processed outside the UK, under the UK Addendum to the EU Standard Contractual Clauses.

Where data leaves the UK for a country without a UK adequacy decision, the transfer is covered by the UK Addendum to the EU Standard Contractual Clauses. Data held in the EU needs no such safeguard: UK law already recognises the EU as adequate.

We may also disclose data where the law requires it, or where a professional obligation obliges us to.

Your rights

UK data protection law gives you the following rights over your personal data. Exercising any of them is free, and we’ll respond within one month.

Access
Ask for a copy of the personal data we hold about you.
Rectification
Ask us to correct anything inaccurate or incomplete.
Erasure
Ask us to delete your data. We may need to keep some records where a legal or professional obligation requires it — if so, we'll tell you which and why.
Restriction
Ask us to pause what we do with your data while a concern is resolved.
Portability
Ask for the data you gave us in a portable format, where we hold it on the basis of consent or a contract.
Objection
Object to processing we carry out on the basis of legitimate interests, including the site measurement described above. Declining the cookie banner doesn't stop the requests Google Analytics sends without cookies; Google's opt-out browser add-on, linked in the cookies section above, does.
Withdrawing consent
Change your cookie choice at any time using the Cookie settings link in the footer of any page. Withdrawing is as easy as accepting, and nothing about the site changes when you do.

To exercise any of these, email info@mps-accountancy.co.uk. We may ask you to confirm your identity first, so that we don’t hand your data to someone else.

Complaints

If you think we’ve handled your data badly, tell us first — most things are a misunderstanding we can fix quickly. If you’re not satisfied with how we respond, you have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Helpline 0303 123 1113 · ico.org.uk/make-a-complaint

Complaining to the ICO doesn’t cost anything and doesn’t affect any other route open to you.

Changes to this notice

If we change what we do with your data, we’ll update this page and move the date at the top. Where a change affects something you consented to — adding advertising cookies, for instance — we won’t carry your old answer over: the banner will ask you again, because a choice you made about analytics isn’t consent for anything else.