Privacy Policy

1. Company Details

MXMG Ltd (Company No. 12253099)
The Old Pump House, Oborne Road, Sherborne DT9 3RX, UK
Contact: info@mxmg.com

2. Description of Service

MXMG Ltd provides website, software, and Customer Relationship Management (CRM) development services to clients. As part of these services, MXMG Ltd stores and processes personal data on behalf of its clients.

3. Role as Data Processor

MXMG Ltd acts solely as a Data Processor. The client is the Data Controller and retains full responsibility for the lawful collection and processing of any personal data entered into the CRM system.

4. Types of Data Processed

The CRM platform allows clients to store all types of personal and business data, depending on their needs. MXMG Ltd does not determine the types of data entered; this is at the sole discretion of the client.

5. Purpose of Processing

Personal data is processed to generate reports and provide CRM functionalities as instructed by clients. MXMG Ltd processes data strictly according to the instructions of the Data Controller.

6. Data Location

MXMG Ltd processes and stores data in the UK, EU, and USA, depending on client requirements and service needs.

7. Security Measures

Access to the CRM platform is protected by encrypted passwords. Optional two-factor authentication (2FA) is available upon request. MXMG Ltd employs technical and organisational measures to ensure the security and confidentiality of personal data.

8. Data Retention

Data retention periods are the responsibility of the client (Data Controller). MXMG Ltd processes and holds data only for as long as instructed by the client.

9. Data Subject Rights

Requests from data subjects regarding access, rectification, erasure, or portability of personal data are handled by the client/Data Controller.

10. Contact for Data Protection

For any data protection inquiries, please contact info@mxmg.com. MXMG Ltd does not have a dedicated Data Protection Officer.

11. Data Processing Agreement

The obligations and responsibilities of MXMG Ltd as Data Processor are set out in the Data Processing Agreement, which is incorporated by reference into the general terms of this privacy policy.

12. Supervisory Authority & Complaints

The supervisory authority is the Information Commissioner's Office (ICO), UK. Complaints can be submitted by email to info@mxmg.com.

13. Limitation of Liability

MXMG Ltd, its Directors, and employees are not liable for the nature, accuracy, lawfulness, or appropriateness of data entered into the CRM platform by the client. Liability is strictly limited to MXMG Ltd's responsibilities under UK GDPR and does not extend to any acts or omissions of the client (Data Controller). MXMG Ltd will not be held responsible for any damages resulting from the client's use or misuse of the CRM or for any personal data entered that breaches data protection laws.