Privacy
Controller: MCFIELDS LTD, 128 City Road, London, United Kingdom, EC1V 2NX, email: mail@mcfields.uk.
Data we process
Depending on how the website is used, we process contact details, account and profile data, contact and advisory enquiry content, Advisory Configurator responses, alert preferences, and technical security/audit data such as IP address, timestamps and security-relevant events.
Purposes and legal bases
Processing is carried out to respond to business enquiries and pre-contractual requests, administer client accounts and agreed services, provide requested alerts, protect IT systems and prevent abuse, and comply with legal obligations. Where applicable, processing relies on contract/pre-contractual steps, legitimate interests, consent or legal obligations under applicable data-protection law.
Email verification and security
The contact form, Advisory Configurator and registration process use time-limited verification codes. Passwords and verification codes are not stored in plain text. The website uses server-side sessions, CSRF protection, rate limiting, prepared database statements and security logging.
Recipients and service providers
Data may be shared where necessary with hosting, email, IT, security and other technical providers, professional advisers or authorities where required for operation, security, contractual performance or legal obligations. Providers are engaged in accordance with applicable data-protection requirements.
International transfers
Where personal data is processed outside the United Kingdom or another applicable protected jurisdiction, appropriate transfer mechanisms and safeguards are used where required.
Retention
Personal data is retained only for as long as necessary for the relevant purpose, the administration of a business relationship, statutory retention, legal claims or security. Data no longer required is deleted or anonymised unless a legal obligation or legitimate reason requires continued retention.
Cookies
This website uses technically necessary cookies or session mechanisms for login, language choice, form security and session management. The delivered system does not include external advertising, tracking or social-media scripts by default.
Your rights
Depending on applicable law, you may have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Requests can be sent to mail@mcfields.uk. You may also have the right to complain to the competent data-protection authority.
Changes
This notice may be updated when services, technical processes or legal requirements change. The version published on this website applies.
