Privacy Policy

1. Who we are

MHSEA operates this website and is the controller of personal information collected through it. For privacy questions or requests, use the website contact form and begin your message with “Privacy request”.

2. Information we collect

When you submit the contact form, we collect the information you enter: your name, email address, contact number and message.

To help answer your enquiry and protect the form from abuse, the submission also includes your IP address, approximate IP-based city, region and country, network provider, browser and device user-agent, browser language, time zone, referring page and submission time. It does not request or collect precise GPS location.

For abuse prevention, we temporarily keep submission timestamps, a one-way hash of the IP address and a one-way fingerprint of the submitted content. The rate-limit record does not store the raw form message.

3. Why we use it

• To review and respond to your enquiry.
• To take steps you request before potentially entering into an agreement.
• To keep the form secure, identify abuse and troubleshoot delivery problems.
• With your consent, to understand website use and improve navigation and usability.
• To meet legal, regulatory or record-keeping obligations where applicable.

Depending on the activity, our lawful bases are taking steps at your request before a contract, our legitimate interests in responding to genuine enquiries and protecting the service, compliance with legal obligations, and your consent for optional analytics and session-insight technologies.

4. Who receives the information

Form submissions are delivered to a private Telegram bot chat using the Telegram Bot API. Our website hosting provider processes request data to operate and secure the website. IPWHOIS.io may receive the IP address solely to return an approximate location when hosting-provided location data is unavailable. We may also disclose information where required by law.

If you allow the relevant optional service, Google receives website-usage data through Google Analytics and Hotjar receives interaction and session-insight data. These services may receive online identifiers, device and browser information, approximate location, referring pages, visited pages, interaction events and timestamps.

These providers may process information outside the United Kingdom. Where international processing occurs, we rely on the provider’s applicable contractual and legal safeguards.

5. Retention and security

Enquiry messages are normally retained for up to 12 months after the last meaningful contact, unless they become part of a client record or must be kept longer for legal, contractual or dispute purposes. Short-lived anti-spam and rate-limit records are normally retained for no more than 24 hours; duplicate-submission fingerprints are used for up to 30 minutes. Your website privacy choice is stored in your browser for up to six months. We use access controls, validation and transmission encryption, but no internet service can guarantee absolute security.

6. Cookies and analytics

Optional analytics and session-insight services are off by default. Google Analytics loads only if you allow “Analytics”; Hotjar loads only if you allow “Session insights”. Google Analytics helps us understand visits and general website use. Hotjar helps us understand navigation, clicks, scrolling and page usability, and may create heatmaps or session recordings. The contact form is marked for content suppression in Hotjar.

The site does not use advertising cookies. Necessary browser storage remembers your privacy choices and light or dark appearance preference. The contact form also sets a strictly necessary security cookie, which expires after approximately two hours, to help prevent fraudulent submissions.

You can accept, reject or select the optional services in the consent banner. You can later change or withdraw your consent using “Cookie settings” in the footer; disabling a service stops it loading on future pages and removes its known first-party cookies from this site.

7. Your rights

Depending on the circumstances, you may have rights to access, correct or erase your information, restrict or object to its use, and receive a portable copy. You may also complain to the UK Information Commissioner’s Office. To exercise a right, contact us through the form and begin the message with “Privacy request”.

8. Changes to this policy

We may update this policy when the website, providers or legal requirements change. The date above identifies the current version.