Privacy Notice

We take your privacy seriously, and we want to be as clear as possible about how we handle your personal information.

This policy explains what data we collect, how we use it, and what your rights are under UK data protection law.

For a plain text version of our policy, please click here

Who we are

We're Mast People Support Limited (you'll see us as “Mast People Support,” “we,” “us,” or “our”), a company registered in England and Wales under company number 12625962.

You can find our registered office at: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.

You can reach our privacy team at: ian@mastpeoplesupport.co.uk.

We're the "data controller," which means we're responsible for the personal data we collect and use.

What and How

What info do we collect?

We might collect and process the following personal details:

Name
Date of birth
Address
Email address
Phone number
Job title
IP address
Employer/organisation details
Associations or affiliations
Any other information you choose to give us while using our services.

In some cases, we might also process sensitive data (called "special category data") if it's relevant to our work.

We may collect your personal data in a few different ways:

Directly from you: When you fill out forms, send us emails, call us, or talk to us in person.
From your organisation: If we're working with your company, they might provide us with your details.
From public sources: We might gather information that is publicly available.
From our service providers: If other companies process data on our behalf, they may pass it to us.

How we collect your data

How and why we use your data

Purpose of Processing

Legal Reason (UK GDPR)

Our Legitimate Interest

To contact you

Legitimate interests – Art. 6(1)(f)

Responding to your questions and providing you with relevant information

To send you information about our services

Consent – Art. 6(1)(a) (non-clients); Legitimate interests – Art. 6(1)(f) (existing clients)

Growing our business by keeping existing clients informed about services that might interest them

To provide our services to you

Contractual necessity – Art. 6(1)(b)

n/a

To take payments from you

Contractual necessity – Art. 6(1)(b); Legal obligation – Art. 6(1)(c)

n/a

To send you articles and blogs

Consent – Art. 6(1)(a) (non-clients); Legitimate interests – Art. 6(1)(f) (existing clients)

Staying connected with clients and sharing useful resources

To receive information from your organisation to provide services

Contractual necessity – Art. 6(1)(b)

n/a

To collect information from open sources to deliver services

Legitimate interests – Art. 6(1)(f)

Preparing and delivering our tailored services effectively

To share information with your organisation, law enforcement, or third-party providers

Legal obligation – Art. 6(1)(c) (law enforcement); Contractual necessity – Art. 6(1)(b) or Legitimate interests – Art. 6(1)(f) (service delivery)

Making sure services are delivered effectively and meeting legal requirements

Automated Decision-Making

Don't worry, we don't use your personal data to make any decisions about you automatically, such as profiling, that would have a legal or other significant effect on you.

Clear, simple privacy you can count on

Third-Party Processors

Sometimes we need to share your data with other trusted companies to help us run our business. These might include:

Email and marketing platforms

Payment processors

Companies hosting our IT systems

Your employing organisation

Productivity platforms

Law enforcement or other regulatory bodies*

*if we are legally required to

International Transfers

Some of our service providers and our associates are based outside of the UK, so your data might be transferred there. When this happens:

We rely on special legal agreements (like Standard Contractual Clauses or International Data Transfer Agreements) to ensure your data is still protected, no matter where in the world it travels.

If a country has a specific "adequacy decision" (meaning the UK has deemed their data protection laws to be good enough), we can rely on that decision. If you'd like to see a copy of these safeguards, just ask by emailing us at ian@mastpeoplesupport.co.uk.

Special Category Data

In our work, we occasionally need to process highly sensitive data, such as:

Racial or ethnic origin
Political opinions
Religious or philosophical beliefs
Trade union membership
Health data
Sexual orientation

The legal reason we can collect this type of information is typically with your explicit consent or if we have a legal obligation to do so (Article 6 UK GDPR). We also have specific conditions under Article 9 UK GDPR that allow us to process this data, such as your explicit consent or substantial public interest (if authorised by law). Because this data is so sensitive, we take extra care. This includes:

Data minimisation: We only collect what's absolutely necessary.

Access controls: Only people who need to see the data can access it.

Pseudonymisation: We try to remove direct identifiers where we can.

When we rely on UK law-based conditions (Schedule 1 of the Data Protection Act 2018), we also keep a specific document called an "Appropriate Policy Document" to explain how we meet our obligations.

We also conduct a "Data Protection Impact Assessment" (DPIA) when processing this type of data, as it is considered high-risk.

We will never upload your special category data to third-party marketing platforms unless we have your explicit consent and all the necessary contractual safeguards.

Your data belongs to you, we just borrow a little to make your experience easier and more enjoyable

Your Rights

You have several important rights regarding your personal information. Hover to find out more:

Access your data

Get a copy of the personal information we hold about you.

Limit your data

Ask us to restrict the processing of your data in certain situations.

Correct your data

Ask us to fix any information that you think is wrong or incomplete.

Object to us using your data

Object to us processing your data in certain situations.

Delete your data

Ask us to erase your personal information in certain situations.

Transfer your data

Ask us to transfer the information you gave us to another organisation, or to you, in certain situations.

You won't have to pay to exercise these rights, and we have one month to respond to your request.

How Long we Keep Your Data

We hold on to your personal data for up to 7 years from our last contact with you, unless we're legally required to keep it for longer. Just so you know, our third-party processors may have their own backup and deletion schedules that might apply as well. If you want to find out more about this, please contact us at: ian@mastpeoplesupport.co.uk.

Consent and Withdrawal

If we've asked for your consent to do something with your data, you're free to change your mind at any time. You can withdraw your consent by:

Clicking the "unsubscribe" link in any of our marketing emails.

1

Sending an email to admin@mastpeoplesupport.co.uk

2

How to Complain

If you have any worries or a complaint about how we're handling your data, please get in touch with us first at ian@mastpeoplesupport.co.uk or via the form.

You can also always complain directly to the UK's supervisory authority:

Information Commissioner’s Office Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

0303 123 1113 | https://www.ico.org.uk