This notice describes the website as it operates on the issue date. The project-brief builder runs in the visitor's browser and does not send its contents to Managed Services Ltd.
1. Who is responsible
Managed Services Ltd is the controller for personal information it receives through the website's published contact routes and for any website processing that it determines.
Privacy and data-protection enquiries can be sent to Max Pocock at [email protected]. General enquiries can be sent to [email protected].
2. Information processed
The website does not contain an account, newsletter, online payment service or server-submitted contact form. Its project-brief builder processes text entered by the visitor locally in that browser. The brief is not uploaded, stored by the website or automatically emailed. A visitor may choose to copy it and send it separately.
If a visitor emails Managed Services Ltd, the company will receive the sender's email address and any name, organisation, message content, attachments and other information they choose to provide.
As with ordinary website hosting, technical request and security records may include an IP address, date and time, requested page, browser or device information, referring page and security-event information.
The deployed site uses Cloudflare's network and may generate request, diagnostic and security records as part of delivery and protection. No analytics or advertising tracker was present in the website code or live pages checked on 25 July 2026. Managed Services Ltd does not receive the contents of the locally generated project brief through Cloudflare.
3. Why information is used
Information sent by email may be used to:
- respond to an enquiry and communicate with the sender;
- assess a possible engagement and take requested pre-contract steps;
- deliver and administer an agreed service;
- maintain appropriate business, complaint and legal records; and
- protect the company's systems, rights and users.
The usual lawful bases are taking steps at a person's request before a contract, performing a contract, complying with a legal obligation, and legitimate interests in responding to enquiries, operating a professional consultancy, maintaining records and protecting systems. A different basis will be identified where the circumstances require it.
Technical request and security records are used where necessary for delivery, reliability, abuse prevention, incident investigation and security, normally on the basis of legitimate interests in providing and protecting the website.
4. Sharing and processors
Personal information is shared only where there is a proper need. Possible recipients include authorised suppliers supporting website hosting, email, IT or professional advice; a client or delivery partner where this is explained and appropriate; and a regulator, court, law-enforcement body or other authority where required or justified.
The repository and live deployment identify Cloudflare Pages as the website hosting and deployment service. Cloudflare Email Address Obfuscation is active: it rewrites published email addresses in delivered pages and supplies a decoding script intended to make automated harvesting more difficult. It does not submit the project-brief contents.
Public mail-routing records identify mailbox.org as the email service provider. Cloudflare and mailbox.org may use infrastructure or subprocessors outside the United Kingdom. Where personal information is transferred internationally, Managed Services Ltd relies on an applicable adequacy regulation or approved contractual safeguards and supplementary measures where required.
5. Retention
Managed Services Ltd keeps personal information only for as long as needed for the purpose, relevant legal or contractual duties, and the establishment or defence of claims. Enquiry records that do not lead to work should have a defined review or deletion point; engagement records follow the applicable contract and company retention arrangements.
The project-brief builder has no company-side retention because the entered text remains in the visitor's browser unless the visitor copies and sends it.
General email enquiries that do not lead to an engagement are reviewed and normally deleted within 12 months after the enquiry is closed, unless there is a legal, complaint, safeguarding or other documented reason to retain them longer. Managed Services Ltd does not keep a separate copy of Cloudflare request or security logs; any provider-side records are retained under the applicable service configuration and provider terms and are not kept longer than needed for delivery, security or incident investigation.
6. Individual rights
Depending on the circumstances, a person may have rights to be informed, access their information, correct it, have it erased, restrict or object to processing, and receive portable information. They may also have rights concerning automated decisions. These rights are not absolute and exemptions may apply.
Requests should be sent to [email protected]. Identity may be checked proportionately. A person may complain to the Information Commissioner's Office at ico.org.uk, but Managed Services Ltd welcomes the opportunity to address the concern first.
7. Security and links
Managed Services Ltd uses proportionate organisational and technical controls for information it holds. No internet or email service can be guaranteed completely secure. Visitors should avoid sending unnecessary sensitive information by ordinary email and agree a suitable secure route where needed.
Links to other websites are provided for convenience. Their operators are responsible for their own content and privacy practices.
8. Changes
This notice will be updated when the website's processing or relevant requirements change. Material changes will be made clear where appropriate.
9. Document control
This public notice is separate from the company's internal Privacy and Data Protection Policy. It must be checked against the live website, hosting account, email arrangements and processing records at each review.