1. Who We Are

Mando Systems Ltd is a private limited company registered in England and Wales (Company Number: 17168657), incorporated on 20 April 2026. We operate the website at mando.systems and are the data controller for any personal data collected through this website.

Contact us regarding privacy: support@mando.systems

2. What Data We Collect

We collect only the minimum data necessary to respond to your enquiries and provide our services:

  • Contact form submissions: name, email address, company name (optional), and message content.
  • Server logs: IP address, browser type, and pages visited — automatically recorded by our web server for security and diagnostic purposes.
  • Cookies: We do not currently use tracking, analytics, or advertising cookies. Only technically necessary session handling may apply.

3. How We Use Your Data

We use the information you provide solely for:

  • Responding to your enquiry or business request.
  • Communicating about a potential or ongoing engagement.
  • Maintaining server security and diagnosing technical issues.

We do not use your data for marketing, profiling, or any automated decision-making. We do not sell, trade, or share your personal data with third parties except where required by law.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:

  • Legitimate interests — to respond to business enquiries submitted through our contact form.
  • Legal obligation — where we are required to process data to comply with applicable law.

5. Data Retention

Contact form data is retained for as long as reasonably necessary to fulfil the purpose for which it was submitted, or for up to 24 months, whichever is shorter. Server logs are retained for up to 90 days. You may request earlier deletion at any time.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access — request a copy of any personal data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion of your personal data.
  • Restriction — request that we limit how we use your data.
  • Objection — object to processing where we rely on legitimate interests.
  • Portability — request your data in a portable format.

To exercise any of these rights, please contact us at support@mando.systems. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, HTTP security headers, and access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you review their respective privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date. We encourage you to review this page periodically.

10. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's independent data protection authority. Visit ico.org.uk for more information.