We value your privacy and take our obligations under privacy and data protection law very seriously.

All personal information given to us through this website will only be held and used in accordance with this policy and the UK General Data Protection Regulation 2018 and relevant privacy laws.

This statement describes how we collect, use and take care of the personal information we collect about you through the use of this website.

What is Personal Information?

Personal information means information about a living person by which that person can be identified either directly or indirectly.

What Personal Information do we collect about you?

We will not collect any personal information about you except where it is specifically and knowingly provided by you, for example: 

• If you request information from us via the contact form
• If you provide feedback by filling in the contact form
• When you ask for a login to add a project to MEnD
• With consent, your Internet Protocol (IP) address, and details of which version of web browser you used?
• With consent, information on how you use this website, using cookies and page tagging techniques ?

Why do we need your information?

We collect your personal information in order to:

• Respond to any questions or feedback you send us, if you’ve asked us to
• Allow you to upload project data
• Send email alerts to users who request them
• Gather feedback to improve our services, for example our email alerts
• Monitor the performance of the site to identify inefficiencies

Our legal basis for processing your data

The legal basis for processing personal information will fall into one of the following categories:

To perform our legitimate business interests

To manage our relationship with you

To improve/develop our services

What we do with your data

The data we collect may be shared with other government departments, agencies and public bodies.

It may also be shared with our technology suppliers, for example our hosting provider.

We will share your data if we are required to do so by law - for example, by court order, or to prevent fraud or other crime.

The data we collect with Google Analytics cookies is transferred and stored with Google where we analyse it with Google Analytics software (Universal Analytics). We do not allow Google to use or share this data for their own purposes.

We will not:

• Sell or rent your data to third parties
• Share your data with third parties for marketing purposes

For more information on how we use cookies, read our Cookies Policy.

How long we keep your data

We will only retain your personal data for as long as it is needed for the purposes set out in this document or for as long as the law requires us to.

We will:

• Keep your email data until you unsubscribe
• Keep your feedback data for 2 years
• Delete access log data which contain your IP address after 120 days

Where your data is processed and stored

We design, build and run our systems to make sure that your data is as safe as possible at all stages, both while it’s processed and when it’s stored.

All personal data is stored in the European Economic Area (EEA). Data collected by Google Analytics and SpeedCurve RUM may be transferred outside the EEA for processing.

Where data processing happens in the US, suppliers need to meet the certification standards set out in the UK-US data bridge agreement. This facilitates flows of personal data to certified US companies that have opted in to the EU-US Data Privacy Framework.

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data - for example, we protect your data using varying levels of encryption.

We also make sure that any third parties that we deal with keep all personal data they process on our behalf secure.

Your rights

You have the right to request:

• Information about how your personal data is processed
• A copy of that personal data
• That anything inaccurate in your personal data is corrected immediately

You can also:

• Raise an objection about how your personal data is processed
• Request that your personal data is erased if there is no longer a justification for it
• Ask that the processing of your personal data is restricted in certain circumstances

If you have any of these requests, please contact us.

Links to other websites

MEnD contains links to other websites.

This privacy notice only applies to MEnD and does not cover other sites that we link to. These sites have their own terms and conditions and privacy policies.

Following a link to another website

If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.

Following a link to MEnD from another website

If you come to MEnD from another website, we may receive personal information from the other website. You should read the privacy policy of the website you came from to find out more about this.

Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.