Privacy Policy

At Maclunga Investments Limited, we are committed to protecting and respecting your privacy. This Privacy Policy explains when, why, and how we collect personal data about people who visit our website, how we use it, the conditions under which we may disclose it to others, and how we keep it secure.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Maclunga Investments Limited is a registered limited company in England & Wales (Company No. 16159292). Our registered office is 73 Wortley Heights, Leeds, LS12 1JF, United Kingdom. For the purposes of data protection laws, we are the "Data Controller" of the personal information we collect from you.

If you have any questions regarding this policy or our privacy practices, please contact us by email at admin@maclungainvest.co.uk.

2. Information We Collect

We may collect and process the following personal data about you:

• Information you provide via our Enquiry Form: This includes your Name, Organisation Name, Organisation Type (e.g. Charity, CIC, Business, Social Enterprise), Email Address, Phone Number, and any additional details you include in your enquiry message.
• Correspondence: If you contact us by email, phone, or written letter, we may keep a record of that correspondence.
• Technical and Usage Data: Basic technical metadata collected automatically through standard server logs, including your anonymised IP address, browser type, operating system, and pages visited.

3. How We Use Your Information

We use your personal data to:

• Process and respond to the enquiries you submit through our website.
• Review your organisation's eligibility for our Founding Member Deal (50% OFF for 3 months).
• Provide you with tailored proposals, quotes, or service information.
• Fulfill our contractual obligations if you choose to enter into a service agreement with us.
• Send you occasional, relevant updates or newsletters about our services (only where you have provided explicit consent to receive them).
• Comply with applicable legal or regulatory duties.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

1. Consent: When you voluntarily fill out our enquiry form and agree to provide your contact details, you are giving us consent to process that information to answer your enquiry.
2. Contractual Necessity: To take steps at your request prior to entering into a contract, such as formulating a proposal or quote for services.
3. Legitimate Interests: To run our business effectively, manage relations with our prospective B2B clients, charities, and community partners, and maintain web security.

5. How We Store and Protect Your Data

We employ appropriate technical and organisational security measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. All data provided through the enquiry form is stored securely on servers located within the UK or European Economic Area (EEA), or on third-party form-handler systems (such as Web3Forms or Formspree) that maintain robust security compliance.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the absolute security of data transmitted to our site; any transmission is at your own risk.

6. How Long We Keep Your Data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• General Enquiries: If you enquire but do not enter into a contract with us, we will retain your contact data for a maximum of 2 years before deletion or anonymisation.
• Clients/Partners: If we enter into a business relationship, we retain your data for the duration of the contract and up to 6 years following contract termination for tax and legal compliance.

7. Disclosing Your Information

We do not sell, rent, or trade your personal data with third parties for marketing purposes. We may disclose your information to:

• Service Providers: Trustworthy third-party vendors who perform services on our behalf (e.g. secure form processing, email delivery hosts) who are strictly bound by confidentiality contracts.
• Legal Authorities: If required by law, court order, or to prevent fraud or coordinate compliance.

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct or complete inaccurate data.
• Right to Erasure (Right to be Forgotten): You can ask us to delete your personal data under certain conditions.
• Right to Restriction of Processing: You can ask us to limit how we use your data.
• Right to Data Portability: You can request that we transfer your data to another controller in a structured format.
• Right to Object: You can object to the processing of your data based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please email us at admin@maclungainvest.co.uk. We respond to all valid requests within 30 calendar days without charge.

9. Cookies and Analytics

Our website uses standard cookies to ensure standard user experience (for example, storing your choice to dismiss the promotional banner in localStorage so it stays closed). We do not run invasive tracking or behavioral advertising scripts.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes we make will be posted on this page with an updated revision date. We encourage you to check back periodically.

11. Contact Us & Complaints

If you have any questions or complaints about how we handle your personal data, please contact us at admin@maclungainvest.co.uk. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk.