This notice explains how Margrie Services Limited ("MSL", "we", "us", "our") collects and uses personal information, why we do it, who we share it with, how long we keep it and what your rights are. We are a small IT managed service provider based in Grimsby. We have tried to keep this short and in plain English. If anything is unclear, contact us using the details in section 1.
1. Who we are and how to contact us
| Item | Detail |
|---|---|
| Organisation | Margrie Services Limited, a private limited company registered in England and Wales |
| Company number | 14512486 |
| Registered office | 2 Amcotts Road, Grimsby DN33 1HX |
| ICO registration number | ZC279345 (registered 19 October 2026, expires 18 October 2027) |
| Privacy contact | David Margrie, Director |
| Privacy email | privacy@msl.org.uk |
| General email | services@msl.org.uk |
| Phone | 01472 564538 |
| Post | Privacy, Margrie Services Limited, 2 Amcotts Road, Grimsby DN33 1HX |
| Website | https://msl.org.uk |
For the information described in this notice we are the controller: we decide why and how it is used. We are not required to appoint a Data Protection Officer, but David Margrie is responsible for data protection at MSL and deals with all privacy questions, requests and complaints.
When we provide IT support to a client, we may also see or handle information that belongs to that client, such as their staff's emails, files or user accounts. For that information our client is the controller and we act as their processor, following their written instructions under a data processing agreement. If your question is about that information, please contact the client organisation first; we will help them answer it.
2. Business-to-business marketing (prospects)
We contact small businesses in and around Grimsby (mainly postcode areas DN31 to DN34) that we think may benefit from our IT support services. We only approach businesses, not members of the public in their private capacity.
Where we can, we use general business contact details (such as an info@ address or a main office number). Sometimes those details identify a person, for example the name of a director or owner, or a named email address. When they do, they are personal information and this section explains what we do with them.
What we collect about prospects
- Business name, company number, company type, trading and registered office address, website and public business social media pages
- Business phone number and business email address, as published by the business
- The name and role of a director, owner or other named contact, where this is published by the business or on the Companies House register
- Simple facts that help us decide whether our services are relevant, such as the business sector, approximate number of staff (from published accounts) and whether the business appears to have its own IT support
- Where and when we found each contact detail (the source)
- The date and result of our checks against the Telephone Preference Service (TPS) and Corporate Telephone Preference Service (CTPS)
- Our contact history with the business (what we sent or said, when, and any reply)
- Your marketing preferences, including any consent you have given us and any request not to be contacted
We do not collect home addresses (other than a registered office address that a business has chosen to publish), dates of birth, personal social media accounts or any sensitive ("special category") information about prospects.
Where we get it from
- Companies House, the public register of UK companies (for example company details and director names)
- The business's own website and its public business social media pages
- Public online business directories and search results
- You, if you contact us or reply to us
If we contact you and you would like to know where we found your details, just ask. We also include the source in our marketing emails.
How we contact prospects
- Email: By email to limited companies, limited liability partnerships and other incorporated organisations, always identifying MSL and giving you a simple way to opt out in every message.
- Sole traders and partnerships: We do not send marketing emails or texts to sole traders or ordinary (non-limited) partnerships unless they have told us they are happy to receive them, or they are an existing customer and we are telling them about similar services (with an opt-out in every message).
- Phone: Before any marketing call we check the number against the TPS and CTPS registers and our own "do not call" list, and we repeat that check at least every 28 days. We do not call numbers registered with the TPS or CTPS unless you have told us you are happy to receive our calls. We always say who is calling and display our number.
- Post: We may write to a business at its published address.
Our current outreach uses email, phone and post. We do not use text messages or social media direct messages for marketing unless we update this notice first.
3. Other people whose information we use
| Who | What we collect |
|---|---|
| Customers and their staff | Names, job titles and business contact details of the people we deal with, contract and service records, billing and payment details, and correspondence. |
| People who raise or are named in support requests | Name, business contact details, details of the problem, device and account information needed to fix it, and notes of the work done. When we connect remotely we may see information on screen. |
| Website visitors and enquirers | What you send us through our website, by email or phone: usually your name, business, contact details and enquiry. See our cookie policy for cookies. |
| Suppliers and partners | Names and business contact details of the people we deal with, and our correspondence. |
4. Why we use your information and our lawful basis
UK data protection law (the UK GDPR and the Data Protection Act 2018) requires a lawful basis for each use of personal information. Ours are:
| Purpose | Lawful basis |
|---|---|
| Finding, researching and contacting businesses that may want our services (B2B direct marketing), including keeping a record of contact | Legitimate interests: promoting our services to businesses they are relevant to. UK law recognises that direct marketing may be a legitimate interest. We have carried out a legitimate interests assessment, which weighs our interests against yours. You can object at any time (section 8). |
| Marketing emails or texts to sole traders and partnerships who have opted in | Consent. You can withdraw it at any time. |
| Marketing to existing customers about similar services ("soft opt-in") | Legitimate interests, with an opt-out offered when we collected your details and in every message. |
| Checking numbers against the TPS and CTPS and keeping our suppression and "do not call" lists | Legal obligation (the Privacy and Electronic Communications Regulations 2003, "PECR") and legitimate interests: making sure we do not contact people who have asked us not to. |
| Providing our services, support and billing | Contract (where you are our customer) or legitimate interests (where you are a contact at a customer business). |
| Answering enquiries | Legitimate interests, or steps you asked us to take before entering into a contract. |
| Keeping accounts and tax records | Legal obligation. |
| Keeping our own and our clients' systems secure | Legitimate interests. |
| Handling privacy requests and complaints | Legal obligation. |
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We use simple criteria (such as location, size and sector) to decide which businesses to contact; this does not affect you beyond whether you hear from us.
5. Who we share it with
We do not sell personal information and we do not share prospect details with other businesses for their own marketing. We share information only where needed with:
- Service providers who process information for us under contract (see the table below)
- Our accountant, bank, insurers and professional advisers
- HMRC, the police, courts or regulators where the law requires it
- A buyer or successor if our business is ever sold or restructured
| Provider | What it is used for |
|---|---|
| Microsoft 365 (Microsoft) | Email (Outlook, including our marketing emails), Teams (including our sales pipeline, which is our customer relationship management system), file storage and the spreadsheets we use to keep prospect, contact and suppression records |
| TPS Checker (tpschecker.co.uk) | Checking phone numbers against the TPS and CTPS registers before calls |
| Xero | Invoicing and accounts |
| IT support tools under contract | Delivering IT support to clients (for example monitoring, patching, security, backup, remote access and tickets), where those tools are needed for the service |
| Website host | Hosting our website and any contact form |
6. International transfers
Some of our providers store or access information outside the UK (for example in the European Economic Area or the United States). Where that happens we make sure the transfer is protected as UK law requires, for example by UK adequacy regulations (including the UK–US "data bridge" for certified US companies), the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for more detail.
7. How long we keep it
| Information | How long we keep it |
|---|---|
| Prospect records where we have had no reply | 12 months from our last contact, then deleted |
| Prospect records where you said "not interested" (without asking us to stop) | 12 months from your reply, then deleted |
| Suppression and "do not call" list | For as long as we carry out marketing, with only the minimum details needed to make sure we do not contact you again |
| Records of consent to marketing | While the consent is in use, then 2 years after it is withdrawn or lapses, as proof |
| TPS/CTPS check records | With the related prospect record |
| Customer contracts, invoices and accounts | 6 years after the end of the financial year or contract (tax law and legal claims) |
| Support tickets | 2 years after closure, or 6 years where linked to billing |
| Enquiries that do not lead to business | 12 months |
| Privacy requests and complaints | 2 years after closure |
Our Data Retention Policy has the full schedule and is available on request.
8. Your rights
You have the right to:
- Be told how we use your information (this notice)
- Get a copy of your information (a "subject access request")
- Have inaccurate or incomplete information corrected
- Have your information deleted in some circumstances
- Ask us to restrict how we use it in some circumstances
- Object to us using it on the basis of legitimate interests
- Object at any time to direct marketing — this right is absolute: if you object, we will stop
- Withdraw consent at any time, where we rely on consent
- Have information you gave us transferred to you or another organisation, where this applies
To use any of these rights, email privacy@msl.org.uk, call 01472 564538 or write to us at the address in section 1. There is normally no charge. We will reply without undue delay and within one month. For complex or multiple requests we may extend this by up to two further months; we will tell you within the first month if so. If we need to confirm your identity or need more information to find what you are asking for, the time limit starts once we have it. We will carry out reasonable and proportionate searches.
Stopping marketing
To stop hearing from us, reply STOP to any of our emails, tell us on a call, email privacy@msl.org.uk, call 01472 564538 or write to us. We will add your details to our suppression list so that you are not contacted again by any channel. If you ask us to delete your details as well, we will delete everything else but keep the minimum needed on our suppression list, because otherwise we could not make sure we never contact you again.
9. Security
We protect personal information with appropriate technical and organisational measures, including multi-factor authentication, encryption, access controls limited to the people who need it, security monitoring and regular updates. As an IT security business, we apply the same standards to our own systems as we recommend to our clients.
10. Complaints
If you are unhappy with how we have used your information, please tell us first so we can try to put it right. Contact David Margrie by email at privacy@msl.org.uk, by phone on 01472 564538 or by post at the address in section 1. We will acknowledge your complaint within 30 days (we aim for 5 working days), look into it without undue delay, keep you updated and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection and electronic marketing:
- Online: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL
11. Changes to this notice
We will update this notice when our practices change. The latest version will be published on this page.
Margrie Services Limited · Company number 14512486 · 2 Amcotts Road, Grimsby DN33 1HX