Privacy Policy

1. Introduction

MTKP Consulting ("we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website at mtkpconsulting.com or engage with our services.

We comply with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Contact Forms: Name, email address, phone number, company name, and message content when you submit a contact or demo request form.
• Newsletter Subscription: Email address when you subscribe to our newsletter.
• Career Applications: Information you provide when applying for positions.

2.2 Automatically Collected Information

• Session Cookies: Essential cookies required for website functionality (form security tokens). These are temporary and expire when you close your browser.
• Server Logs: IP addresses, browser type, and access timestamps for security and operational purposes.

We do not use any tracking cookies, advertising cookies, or third-party analytics tools.

3. How We Use Your Information

• To respond to your enquiries and service requests
• To schedule demonstrations of our eClinical platform
• To send newsletter updates (only if you have subscribed)
• To process career applications
• To maintain website security and prevent abuse
• To comply with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Consent: When you submit forms or subscribe to our newsletter.
• Legitimate Interest: To operate and secure our website, respond to business enquiries, and improve our services.
• Legal Obligation: To comply with applicable laws and regulations.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared with:

• Our hosting provider (for website operation)
• Email service providers (for delivering responses to your enquiries)
• Legal authorities (if required by law)

6. Data Retention

• Contact enquiries: Retained for 2 years, then securely deleted.
• Newsletter subscriptions: Retained until you unsubscribe.
• Server logs: Retained for 90 days for security purposes.
• Session data: Deleted when your browser session ends.

7. Your Rights

Under GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request limitation of data processing.
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interest.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at info@mtkpconsulting.com.

8. Cookies

Our website uses only essential session cookies required for website security (CSRF protection). These cookies:

• Are strictly necessary for the website to function
• Do not track your browsing activity
• Are temporary and deleted when you close your browser
• Cannot be used to personally identify you

We do not use cookies for advertising, analytics, or tracking purposes.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• CSRF token protection on all forms
• Input validation and sanitisation
• Rate limiting to prevent abuse
• Secure session management with HttpOnly cookies
• Security headers (X-Frame-Options, CSP, etc.)
• Encrypted data transmission (HTTPS)

10. International Transfers

Your data is processed on servers located within secure hosting facilities. If data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: