01Who handles your information
B L NOTTS HOLDINGS LTD, company number 16782785, operates Marketing Support Partners (MSP) and msupportpartners.com. We are the controller responsible for deciding how the personal information described in this policy is used.
For privacy questions or requests, email hello@msupportpartners.com.
This policy covers website visitors, prospective clients and our own business contacts. Where an agency appoints us to handle personal information on its behalf, that work is governed by its instructions and a separate data-processing agreement. The agency remains responsible for explaining its own use of that information.
02Information we collect
Information you provide. Our enquiry form asks for your business name, name, email address, a description of the support you need and an estimated timeframe, including any custom timeframe you enter. Your phone number is optional. We also receive the information you choose to share in emails, calls, proposals and other business correspondence.
Enquiry records. We store a submission reference and the date and time alongside the submitted details. These help us manage enquiries and avoid duplicate records when a submission is retried.
Technical information. Our hosting and security providers may process your IP address, browser and device information, requested pages, request times and security or delivery events to operate the website, diagnose faults and prevent abuse. This is separate from the contact details in our enquiry database.
Information from other people. A colleague or business contact may introduce you or supply your work contact details. We use those details for the relevant business discussion and explain the source where required.
Please share only what is needed for your enquiry. Do not include passwords, payment-card details, sensitive personal information or a client’s customer database. There is no obligation to contact us, but without the required form details we may be unable to respond or understand the support you need.
03How and why we use it
Responding to enquiries and discussing work. We use your information to answer questions, understand requirements, prepare proposals and follow up on the discussion. For contacts acting for a business, our lawful basis is our legitimate interest in responding to relevant enquiries and managing business relationships. Where you would personally be a party to the contract, we may instead need the information to take steps at your request before entering into it.
Providing and administering services. We use business contact and correspondence records to arrange agreed support, communicate about the work and manage payments. The basis is performance of a contract where you are personally a party, or our legitimate interest in delivering and administering services for the business you represent.
Security, records and legal responsibilities. Our legitimate interests include keeping the website reliable, preventing misuse and establishing or defending legal claims. We rely on legal obligations where applicable, for example for required accounting records. When relying on legitimate interests, we consider your rights and reasonable expectations.
Sending an enquiry does not subscribe you to a newsletter or give consent to unrelated marketing. If we ask for consent for a separate purpose, we explain that purpose and how to withdraw it. We do not use this website to make solely automated decisions with legal or similarly significant effects on you, or to profile you for that purpose.
04Storage, email & service providers
Cloudflare. Cloudflare hosts and protects the website. Form enquiries are stored in a Cloudflare database so we have a record to respond to and follow up. Cloudflare Email Routing forwards notifications addressed to hello@msupportpartners.com to the inbox used by MSP.
Resend and our email provider. Resend sends the submitted enquiry details to MSP by email, using your email address as the reply address. Our inbox provider processes and stores the resulting messages and correspondence. A database copy can remain even if delivery of the email notification fails.
Access is limited to people who need the information for the relevant work. Hosting, email and other service providers process information for their role in delivering the service, subject to applicable contractual and data-protection requirements. See Cloudflare’s privacy information and Resend’s privacy information for their own practices.
We may share relevant information with professional advisers or authorities where necessary for advice, a legal obligation or a legal claim. We do not sell your personal information. Sharing a prospective client’s details with an agency partner is subject to the necessary permission and confidentiality arrangements.
05International processing
MSP works remotely, and information may be accessed by us from outside the UK. Our hosting and email providers also operate internationally, including in the United States and other countries. Using a UK business name or domain does not mean all information stays in the UK.
Where a transfer is restricted under UK data-protection rules, it must be covered by an applicable adequacy regulation or another lawful safeguard, such as approved contractual terms and any necessary additional protections, before it takes place. You can contact us to ask about the processing locations and safeguards relevant to your information, including how to obtain information about applicable contractual safeguards.
06How long we keep it
We keep enquiry information while responding to your request and dealing with relevant follow-up. We then retain only information needed for an ongoing business relationship, agreed services, required records, security or legal claims.
The appropriate period depends on whether the enquiry becomes an engagement, when our last meaningful contact took place, the nature of the records, applicable accounting requirements and the period during which a claim may need to be addressed. Once those purposes no longer justify retention, the information should be deleted or anonymised.
These criteria apply to both the website’s enquiry records and our copies of email correspondence. Providers may retain limited backups or service logs under their own retention arrangements. Ask us if you would like the retention criteria explained for a particular record, or wish to request deletion.
We apply these retention periods to the information we actually hold:
Enquiries that do not lead to work. Enquiry form records in our database, the email notifications and related correspondence are deleted or anonymised 12 months after our last contact with you.
Enquiries that lead to work. The enquiry and related correspondence become part of the client records below.
Client and contract records. Proposals, accepted engagements, contracts, data-processing agreements and related business correspondence are kept for 6 years after the engagement ends, the usual period in which a contract claim can be brought.
Invoices and accounting records. Invoices, payment records and other accounting records are kept for 6 years from the end of the financial year they relate to, as HMRC requires.
Website technical and security logs. MSP does not keep its own website logs. Our hosting and security provider processes this information under its own retention arrangements.
Cookies and browser storage. The navigation and cookie-notice entries in session storage last only for your browser tab’s session. Where Cloudflare sets its __cf_bm security cookie, it expires after 30 minutes of inactivity.
07Your privacy rights
Depending on the circumstances and applicable law, you can ask to access your personal information, correct inaccurate information, have information erased, restrict its use, or receive eligible information in a portable format. You can also object to processing based on legitimate interests. If we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing.
You have the right to object to use of your information for direct marketing. Some other rights are subject to conditions; for example, we may need to retain particular records to meet a legal obligation or deal with a legal claim.
Send requests to hello@msupportpartners.com. We may ask for proportionate information to confirm your identity and locate the relevant records. We normally respond within one month, subject to any extension or adjustment permitted by law, and explain if a request cannot be fully met.
Where we hold information only on an agency’s instructions, we will refer the request to that agency or assist it as required by our agreement and the law.
08Cookies & website choices
MSP does not currently add analytics or advertising trackers to this website. Essential browser storage supports navigation and remembers dismissal of our cookie notice. Cloudflare may use security cookies where its protection features require them.
Our cookie policy explains the storage and browser choices in more detail. Reading this notice or submitting an enquiry is not agreement to optional tracking. Links to other websites are subject to those websites’ own privacy information.
09Questions, complaints & updates
If you have a concern about your information, contact hello@msupportpartners.com so we can investigate and respond.
Data complaints. We will acknowledge your complaint within 30 days of receiving it, investigate it without undue delay and tell you the outcome. If you are not satisfied with our response, you can then complain to the UK Information Commission (formerly the ICO), or another relevant data-protection authority.
We update this notice when our handling of information changes. The date above identifies the current version. Where required, we will bring material changes to your attention before using your information for a new purpose.