Privacy Policy

PRIVACY POLICY

Last Updated: October 2025

1. INTRODUCTION

mgsh. ("we," "us," or "our") is committed to protecting your privacy and ensuring your personal data is handled in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at http://mgsh.agency/ (the "Site") or use our services.

This policy applies to all users regardless of location. Whether you are based in the UK, EU/EEA, United States, or any other country, we are committed to protecting your personal data in accordance with applicable data protection laws. Additional information for international clients can be found in Section 11.

Who we are:
- Organisation Name: mgsh.

- Nature of Service: A GTM (Go-To-Market) consultancy and claygency providing GTM strategy, marketing consulting, and Clay.com implementation services to business clients

- Contact Email: [marina@mgsh.agency]
- Registered Address: [London, UK]

By using our Site or services, you acknowledge that you have read and understood this Privacy Policy.

2. INFORMATION WE COLLECT

We only collect personal information that you voluntarily provide to us. This may include:

2.1 Client Information and Service Delivery
When you engage our consultancy services, we may collect:
- Full name
- Email address
- Company name and position
- Phone number
- Billing address
- Project requirements and specifications
- Business information relevant to service delivery
- LinkedIn profile (optional)

2.2 Contact Form Submissions
When you contact us through our website, we collect:
- Name
- Email address
- Message content
- Any other information you choose to provide

2.3 Payment Information
When you engage our services, we collect payment information including:
- Billing name and address
- Payment method details
- Transaction history

We do not store complete payment card information on our servers. Payment processing is handled securely by our third-party payment processors who are PCI-DSS compliant.

2.4 Newsletter Subscriptions
When you subscribe to our mailing list:
- Email address
- Name (if provided)
- Subscription preferences

2.5 Website Usage Information
We automatically collect certain technical information when you visit our Site:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on pages
- Referring website
- Timestamp data

This information is collected through cookies and similar technologies (see Section 6 below).

3. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

- Consent: When you sign up for events, newsletters, or community membership
- Legitimate Interests: To operate and improve our community platform, send relevant updates about our events and activities, and analyse website usage
- Contract: Where necessary to provide services you have requested

You have the right to withdraw consent at any time by contacting us or using the unsubscribe link in our emails.

4. HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

4.1 Service Delivery
- Delivering GTM consultancy and marketing services
- Managing client relationships and communications
- Processing payments and invoices
- Fulfilling contractual obligations
- Providing customer support
- Responding to your enquiries and requests

4.2 Communications
- Sending project updates and deliverables
- Sharing relevant industry insights and resources
- Responding to your questions and feedback
- Marketing our services (with your consent)

4.3 Website Improvement
- Analysing website usage to improve user experience
- Understanding which content and events are most valuable to our community
- Troubleshooting technical issues

4.4 Compliance
- Meeting legal and regulatory obligations
- Maintaining records for legitimate business purposes

5. DATA SHARING AND DISCLOSURE

We do not sell your personal data. We may share your information in the following limited circumstances:

5.1 Service Providers
We work with trusted third-party service providers who assist us in operating our business and delivering our services, including:
- Payment processors (for invoicing and transactions)
- CRM and project management platforms
- Clay.com and other GTM tools (for client service delivery)
- Email marketing and communication platforms
- Cloud storage providers
- Website hosting and analytics services
- Accounting and financial services

These providers are contractually bound to protect your data and use it only for the purposes we specify.

5.2 Client Projects
When delivering services on your behalf, we may use your business information within GTM tools and platforms (such as Clay.com) to execute the agreed scope of work. This is necessary for contract performance.

5.3 Business Partners
In some cases, we may collaborate with business partners to deliver services. Where relevant, we will inform you of this and ensure appropriate data protection measures are in place.

5.4 Legal Requirements
We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., law enforcement).

6. COOKIES AND TRACKING TECHNOLOGIES

6.1 What Are Cookies?
Cookies are small text files placed on your device when you visit our website. They help us improve your experience and understand how our Site is used.

6.2 Types of Cookies We Use

Essential Cookies: Required for the website to function properly (e.g., maintaining your session)

Analytics Cookies: Help us understand how visitors use our Site (e.g., Google Analytics)

Marketing Cookies: Used to deliver relevant content and track engagement with our communications

6.3 Managing Cookies
You can control and delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of our Site.

Our Site does not respond to "Do Not Track" signals from browsers.

For more information about cookies and how to manage them, visit: https://www.aboutcookies.org/

7. YOUR RIGHTS UNDER UK GDPR

Under UK data protection law, you have the following rights:

1. Right of Access: Request a copy of the personal data we hold about you
2. Right to Rectification: Request correction of inaccurate or incomplete data
3. Right to Erasure: Request deletion of your personal data (in certain circumstances)
4. Right to Restriction: Request limitation of processing of your data
5. Right to Data Portability: Receive your data in a structured, commonly used format
6. Right to Object: Object to processing based on legitimate interests
7. Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
8. Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling

To exercise any of these rights, please contact us using the details in Section 15.

7.1 Response Times
We will respond to your request within one month of receipt. If your request is complex, we may extend this by up to two months and will inform you of any delay.

8. COMPLAINTS PROCEDURE

8.1 Making a Complaint
If you have concerns about how we handle your personal data, you can:

1. Contact us directly using the details in Section 15
2. Use our electronic complaints form at marina [@ mgsh.agency

We take all complaints seriously and will:
- Acknowledge your complaint within 30 days
- Investigate the matter thoroughly
- Respond to you without undue delay with the outcome

8.2 Information Commissioner's Office (ICO)
If you are not satisfied with our response, you have the right to lodge a complaint with the UK's supervisory authority:

Information Commissioner's Office (ICO)
- Website: https://ico.org.uk/
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

9. DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

- Client project data: Retained for 6 years after project completion (in line with UK tax and accounting requirements)
- Financial and invoicing records: Retained for 6 years after the end of the financial year (legal requirement)
- Newsletter subscriptions: Retained until you unsubscribe
- Contact form enquiries: Retained for 2 years after resolution
- Website analytics data: Aggregated data retained indefinitely; personal identifiers removed after 26 months
- Marketing consent: Retained until consent is withdrawn or 3 years of inactivity

After these periods, we will securely delete or anonymise your data unless we are required by law to retain it longer.

10. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Secure backup procedures
- Staff training on data protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

11. INTERNATIONAL DATA TRANSFERS AND CLIENTS

11.1 Working with International Clients

As a GTM consultancy, we work with clients globally. If you are located outside the United Kingdom, please note:

- Your personal data may be transferred to and processed in the UK
- The UK has robust data protection laws (UK GDPR and Data Protection Act 2018)
- The UK has adequacy decisions from the EU, meaning data can flow freely between the UK and EU/EEA
- By engaging our services, you consent to this transfer and processing

11.2 Our Service Providers and Tools

Some of our service providers and GTM tools (including Clay.com) may be located outside the UK, including in the United States and other countries. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

For transfers to the United States:
- We use service providers that participate in the UK Extension to the EU-US Data Privacy Framework
- We implement Standard Contractual Clauses (SCCs) approved by the ICO where applicable
- We conduct transfer impact assessments where required

For transfers to other countries:
- We only transfer data to countries with an adequacy decision from the UK government (including EU/EEA countries, Switzerland, New Zealand, Japan, and others)
- Where no adequacy decision exists, we implement appropriate safeguards such as Standard Contractual Clauses
- We ensure all third-party processors maintain adequate data protection standards

11.3 Data Protection Standards

Regardless of where your data is processed, we maintain the same high standards of data protection and security outlined in this policy. All service providers and partners are contractually bound to comply with UK GDPR requirements.

11.4 Additional Rights for International Visitors

For EU/EEA Residents:
If you are located in the EU/EEA, you have the same rights as UK residents under this policy, plus any additional rights granted under EU GDPR. You may also lodge a complaint with your local data protection authority.

For California Residents (US):
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect and how it's used
- The right to request deletion of your personal information
- The right to opt-out of the "sale" of personal information (note: we do not sell personal information)

To exercise these rights, please contact us using the details in Section 15.

For Residents of Other Jurisdictions:
If you are located in a jurisdiction with specific data protection laws (such as Canada, Australia, Brazil, or other countries), you may have rights under those laws. We respect and will honor such rights where applicable. Please contact us if you wish to exercise any rights under your local data protection laws.

12. CHILDREN'S PRIVACY

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly.

13. THIRD-PARTY LINKS

Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last Updated" date.

We encourage you to review this policy periodically. For significant changes, we will provide more prominent notice or seek your consent where required by law.

15. CONTACT US

If you have any questions about this Privacy Policy, wish to exercise your data rights, or make a complaint, please contact us:

Email: marina [@] mgsh.agency
Address: [London, UK]
Response Time: We aim to respond to all enquiries within 5 working days

---

Your Consent

By using our Site and services, you consent to the collection and use of your personal data as described in this Privacy Policy. If you are located outside the UK, you also consent to the international transfer of your data as outlined in Section 11. You may withdraw your consent at any time by contacting us.

We engineer brand-led GTM systems that transform your CRM from operational liability to competitive advantage for Series A & B Companies in UK & EMEA.

About

Legal

CONTACT

© Stephanie Holland, 2025.  All Rights Reserved