Legal
Privacy Policy
Last updated: 6 November 2026 (v3.0) · MGS Safety Management Ltd, Office, 31 Cattle Market Street, Norwich, Norfolk, NR1 3DY
This policy explains what personal data we collect through this website, our shop and the MGS Compliance Checks app, why we use it, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
Who we are
MGS Safety Management Ltd (trading as MGS Safety) is the controller of the personal data described in this policy. We are registered in England and Wales with company number 15161230, and our registered office is Office, 31 Cattle Market Street, Norwich, Norfolk, NR1 3DY. You can contact us about your data at matthew.sadler@mgssafetymanagement.com or on 07807 886576.
What we collect
- Enquiries: your name, email, phone number, company and the details you give us in our contact form, quote questionnaire or software enquiry form.
- Shop orders: your name, email, phone number, billing and delivery address, what you ordered and, for personalised fire action notices, the site details you give us. Card payments are handled by our payment provider; we never see or store your card details.
- Downloads: the email address we send your download link to, and how many times the link has been used.
- The Compliance Checks app: your business name, your name and email, your subscription and payment status, and the details of the people you add to your account. The checks and records you enter in the app are your own records: we store and process them for you, on your instructions, as your processor.
- Website use: if you accept analytics cookies, how you use our website (pages visited, device, approximate location) and which advert or campaign brought you here. See our Cookie Policy.
- Our correspondence with you, and the work we carry out for clients.
Why we use it, and our lawful basis
- To provide what you've asked for (orders, downloads, app subscriptions and consultancy work): this is necessary for our contract with you, or to take steps at your request before entering into one.
- To reply to enquiries, keep business records, keep our systems secure and, once after an order, ask whether you'd leave a review: our legitimate interests in running and improving our business. You can object at any time.
- To keep accounting, tax and VAT records: our legal obligations.
- Analytics and campaign cookies: your consent, which you can withdraw at any time from .
We do not sell your personal data, and we do not make decisions about you by automated means alone. We only send marketing emails to business contacts where the law allows, and every one lets you opt out.
Who we share it with
We use a small number of service providers, who process data for us under contract:
- Base44: hosts this website and the MGS Connect / Compliance Checks app, stores our records and sends our emails.
- Wix: takes card payments for shop orders and app subscriptions, and is the customer relationship system where enquiries are stored.
- Google: Google Analytics (only if you accept analytics cookies), and Google Fonts, which delivers the typefaces on this site and receives your device's IP address when a page loads.
- Royal Mail and other carriers: your delivery address, to deliver your order.
- Our accountants, insurers and professional advisers, where needed.
Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations (such as the UK–US data bridge for certified companies) or by the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries that don't lead to work: up to 2 years after our last contact.
- Orders, invoices and client records: 6 years after the end of the financial year they relate to, to meet tax and legal requirements.
- Compliance Checks app records: for as long as you subscribe, then 12 months after your subscription ends (see section 6 of our Terms), unless you ask us to delete them sooner.
- Google Analytics data: no longer than 14 months.
Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- object to, or ask us to restrict, how we use it, including for any marketing;
- ask for data you gave us to be transferred to you or another organisation; and
- withdraw your consent to analytics cookies at any time.
To use any of these rights, or to ask us to delete your data, email matthew.sadler@mgssafetymanagement.com or use our contact form. We will reply within one month.
Complaints
If you're unhappy with how we have used your personal data, please tell us first, by email to matthew.sadler@mgssafetymanagement.com with the subject "Data protection complaint", or through our contact form. We will acknowledge your complaint within 30 days, look into it and tell you the outcome without undue delay.
You can also complain to the UK regulator, the Information Commission (formerly the Information Commissioner's Office), at ico.org.uk.
Children
Our website, shop and app are for businesses and adults. They are not aimed at anyone under 18, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this policy to reflect changes in our services or the law. The version on this page is the one that applies, and we will tell our clients and subscribers about any significant change.
Contact us
- Phone: 07807 886576
- Email: matthew.sadler@mgssafetymanagement.com
- Post: MGS Safety Management Ltd, Office, 31 Cattle Market Street, Norwich, Norfolk, NR1 3DY
