Who we are

What personal data we collect

We collect and process limited personal data in the following situations:

• When you contact us directly

  • Personal details such as your name, address, email address and phone number when you fill out a form or email us.

• When you browse our website

  • We collect non-identifying usage statistics through privacy-focused web analytics

  • No personally identifiable information (PII) is automatically collected or stored.

We use Umami Analytics to understand general trends in how visitors use our site. Umami is a privacy-friendly analytics platform that does not use cookies, does not store IP addresses, and does not collect any personally identifiable information.

Data Umami may collect:

• Pages visited

• Referring website

• Browser and device type

• Approximate location (city-level, inferred without storing IP)

This data is anonymized and used solely for improving the website’s usability and performance. It cannot be used to identify individual visitors.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How we use your data

We use your data only for:

• Responding to your direct inquiries

• Providing our services

• Monitoring the performance and security of our website

We do not use your data for profiling, advertising, or selling to third parties.

Legal basis for processing

We process your personal data based on the following legal grounds:

• Consent – when you voluntarily contact us or provide personal information.

• Legitimate interests – to operate and secure our website and respond to enquiries.

• Legal obligation – where processing is necessary to comply with applicable law.

Cookies

We only use essential cookies required for the operation of our website. These are set automatically by our server software.

These cookies are required for the site to function and cannot be disabled. They do not collect personal data and are not used for marketing or tracking.

No third-party tracking or advertising cookies are used.

What rights you have over your data

If you have contacted us or interacted with our website in a way that results in personal data being collected, you may request to receive an exported file of the personal data we hold about you. You may also request that we erase any personal data we hold, unless we are required to keep it for legal or administrative purposes.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at privacy@maze-mh.co.uk if you wish to make a request.

How long we keep your data

We retain personal data only for as long as necessary to fulfill the purposes it was collected for, including legal, accounting, or reporting requirements. Data submitted via contact forms or email will be kept for a maximum of 12 months unless required for ongoing correspondence or legal obligations.

Where your data is sent

We use cloud software such as Gmail, Xero and Flowlens to manage our business. Your data may be held by these 3rd party companies.

Some of these providers may store or process data outside the United Kingdom. When this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, in compliance with UK data protection law.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at privacy@maze-mh.co.uk

You can also complain to the ICO if you are unhappy with how we have used your data.