Privacy Policy

1. Who We Are

MS Dynamics Consulting is the data controller for personal data collected through this website (msdynamicsconsulting.com). You can reach us at [email protected] or by phone on +44 7586 145607.

2. What Personal Data We Collect

We may collect and process the following data:

• Identity & contact data — name, email address, phone number, company name provided via our contact form or enquiry process.
• Usage data — pages visited, time spent, browser type, IP address, and referring URLs collected automatically via Google Analytics.
• Communications data — the content of messages you send us through the website contact form or by email.
• Transaction data — if you purchase a product (e.g. ColorGrid), order details and payment information processed through our payment partners (Stripe, GoCardless). We do not store full card numbers on our servers.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide the consulting or product services you request.
• To send service-related communications (e.g. project updates, invoices).
• To improve our website through aggregated analytics data.
• To comply with our legal obligations.

Our lawful bases for processing are: contract performance (to deliver services you have engaged us for), legitimate interests (responding to enquiries, site improvement), and legal obligation where required.

4. Cookies

Our website uses cookies — small text files stored on your device — to support site functionality and analyse traffic. We use the following categories:

• Strictly necessary cookies — required for the site to function (e.g. session management). These cannot be disabled.
• Analytics cookies — Google Analytics helps us understand how visitors use our site. Data is anonymised and aggregated. You may opt out via Google's opt-out tool.
• Third-party cookies — Google reCAPTCHA (form spam protection) and payment providers may set cookies in accordance with their own privacy policies.

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

5. Third-Party Service Providers

We work with the following third parties who may process your data on our behalf:

• Stripe & GoCardless — secure payment processing for product purchases.
• Google Analytics — website usage analytics (data anonymised and aggregated).
• Google reCAPTCHA — contact form spam protection.
• Mailgun — transactional email delivery for contact form notifications.
• Microsoft Azure — cloud hosting and application infrastructure.

Each provider is required to handle your data in compliance with applicable data protection law and is only permitted to use your data for the specific purpose for which it was shared.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to meet legal obligations. Contact enquiry data is retained for up to 3 years. Transaction records are retained for 7 years in line with UK tax and accounting requirements. You may request deletion of your data at any time (see Your Rights below).

7. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS, and access to personal data is restricted to authorised personnel only. No transmission over the internet is completely secure; however, we strive to use commercially acceptable means of protection.

8. Links to Other Websites

Our website may contain links to third-party websites (including our blog at blog.msdynamicsconsulting.com and external partner sites). We are not responsible for the privacy practices of those sites and recommend reviewing their respective policies.

9. Children's Privacy

Our services are directed at businesses and organisations, not individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will promptly delete it.

10. Your Rights Under UK GDPR

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — request that we restrict processing of your data in certain circumstances.
• Portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: