Privacy Notice

Who we are

Martin Gabriel Holdings Ltd (company number 17354262), registered in England and Wales, registered office Carlile Institute Business Centre, 54 Huddersfield Road, Meltham, Holmfirth, HD9 4AE, is the controller of the personal information described in this notice.

What this website collects

The public pages of this website set no cookies, run no analytics tag, and make no request to any third party. Everything the page loads is served by us.

There is one exception, and it applies only to people who have an account with us. The private partner area sets a single cookie to keep you signed in. It is strictly necessary for that purpose, holds no information about you beyond a random identifier, is not read by anyone else, and is deleted when you sign out. No consent banner is needed for it and none is shown.

We keep a count of how many times each page has been viewed, by day. That count is a number and nothing more: it is not linked to you, to your device or to your address, and it is deleted after thirty days.

Our web server keeps short-lived operational logs, which may include an IP address, in order to keep the service running and to identify abuse. They are not used to build any profile of a visitor.

If you send us an enquiry

If you complete the enquiry form we receive the name, organisation, email address and message you provide. We use that information solely to respond to you and, where a conversation follows, to keep a record of it.

We do not sell it, share it for marketing, or pass it to anyone outside the group other than a professional adviser where a matter requires one. We keep enquiries for two years from our last contact with you, then delete them.

The lawful basis is our legitimate interest in responding to people who contact the group, and, where an enquiry leads to a commercial discussion, the steps taken at your request before entering a contract.

If you have an account with us

Partners and colleagues who are given an account in our private document area have a record held here: their name, their email address, the role they have been given, and the time they last signed in. The password is stored only as a hash, which cannot be turned back into the password.

We keep a log of activity in that area: each sign-in and each failed attempt, with the address it came from, and each document added, opened or deleted, against the name of the person who did it. It is there so that access to confidential material can be accounted for. We keep it for twelve months.

Documents held in that area are encrypted before they are written down, and each is sealed with its own key. Where a document contains information about someone else, we hold it as part of our work for the client it concerns, and we delete it when that work no longer requires it. A document removed from that area is kept, still encrypted and visible to nobody, for a further thirty days so that an accidental removal can be undone, and is then destroyed. We can destroy one sooner where there is a reason to, and we do that when someone asks us to delete information about them.

The area also holds a schedule. Entries on the firm’s calendar are seen by everyone with an account; entries on a person’s own calendar are seen by that person alone, and the record we keep of the fact that an entry was added or removed does not include what it said.

An entry can carry a reminder. If it does, we email the people who can see that entry shortly before it, at the address on their account, with the entry and a calendar file for it. The reminder is set, changed or turned off on the entry by whoever arranged it, and we send nothing else by email from that area.

If you join a video call with us

Someone with an account can invite you to a video call by sending you a link. To do that we record your name and, if they choose to note it, your email address, against the meeting. The call itself goes directly between the browsers of the people on it and is encrypted between them; this site passes only the few messages needed to connect you, and nothing of what is said or shown passes through it or is recorded. We keep a record that you joined and left, and the network address you joined from, in the activity log described above. The link works for one meeting only and stops working an hour after it ends.

We also keep a record of the organisations we deal with and, for each, the name, email address and telephone number of the person we deal with there, together with our own notes and the invoices we have issued. We hold it to do the work we have been engaged to do and to be paid for it. It is not used for marketing, it is not shared outside the group other than with a professional adviser where a matter requires one, and it is deleted when the relationship has ended and the records are no longer needed for tax or legal purposes.

Where information is held

This website and its records are hosted within the United Kingdom and the European Economic Area. Enquiries are stored on the service that runs this site and are not transferred elsewhere.

Backups

The records described above are copied once a day so that a failure of one disk does not lose them. Each copy is encrypted before it leaves the service, is held in the same United Kingdom and European Economic Area storage, and is deleted after fourteen days.

This matters to one of your rights. If you ask us to delete information about you, we delete it from the live records at once; it then persists in those encrypted copies until the last of them expires, which is fourteen days at the outside. We do not restore a backup in order to bring deleted information back.

Your rights

You may ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to our holding it. Write to us at the registered office above and we will respond within one month.

If you are not satisfied with our response you may complain to the Information Commissioner's Office at ico.org.uk.