Privacy Policy

1. Who we are

Mediant Partners is the trading name of Marks AI Ltd, a private limited company registered in Scotland, United Kingdom (company number SC889184), with its registered office at 5 South Charlotte Street, Edinburgh, EH2 4AN. Marks AI Ltd is the data controller for the personal data described in this policy. The company's registered name is in the process of changing to reflect the Mediant Partners trading name; the company number, registered office and the way we handle your personal data are not affected by that change.

Contact for any privacy enquiry: privacy@mediantpartners.com.

2. What this policy covers

This policy covers mediantpartners.com and mediantpartners.co.uk — this site — and anyone who visits it or contacts us through it. It does not cover websites we build or operate for clients under a separate agreement; those carry their own privacy policies.

3. Information we collect

3.1 If you contact us

If you email us, or submit the data-protection complaint form, we hold the content of your message, your name (if given), your email address, your phone number (if given), and anything else you choose to tell us, for as long as needed to respond and to keep an accurate record of the exchange.

3.2 Automatically, from visiting the site

This site is hosted on Cloudflare Pages. Cloudflare logs standard request metadata (IP address, user‑agent, country, timestamp) for security, abuse prevention and reliability. We do not currently run any analytics, advertising or tracking cookies of our own on this site — no PostHog, no Google Analytics, no ad pixels. If that changes, this policy and the site will show a cookie notice before anything non‑essential is set.

4. How we use it

• To reply to enquiries and conversations you start with us.
• To investigate and respond to a data‑protection complaint, and to send you the acknowledgement the law requires (see §10).
• To meet legal, accounting and tax obligations.

5. Our lawful bases

We only process personal data where we have a lawful basis under UK GDPR:

• Consent — where you have actively given it, for example by ticking the consent box on the complaint form.
• Legitimate interests — to respond to enquiries and to run and secure this site.
• Legal obligation — to meet record‑keeping and tax requirements.

Where we rely on legitimate interests, we apply a three‑part test first:

• Purpose — there is a genuine, specific benefit (for example, replying to a message you sent us).
• Necessity — the processing is a reasonable, targeted way to achieve that purpose, with no less intrusive alternative.
• Balance — that interest is not overridden by your rights and freedoms. You can object at any time (see §9).

The UK's Data (Use and Access) Act 2025 also sets out a list of recognised legitimate interests — for example, disclosures to a public body carrying out a public‑interest task, safeguarding national security, responding to an emergency, or detecting and preventing crime — where the balancing test is treated as already met. We would only rely on this where an activity genuinely fits one of those recognised categories.

6. Third-party processors

We use a small number of processors to run this site and handle correspondence:

• Cloudflare — hosting, DNS and security for this site.
• Postmark — delivery of the automated emails this site sends (a complaint acknowledgement, for example).
• Google Workspace — our own email inboxes.

We do not sell, rent or trade personal data with anyone.

7. International transfers

Some of the processors above operate outside the United Kingdom. Where personal data is transferred outside the UK, we rely on the UK government's adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses, as applicable.

8. How long we keep information

• Enquiry and complaint correspondence — kept for as long as needed to resolve the matter, plus 24 months.
• Server/CDN logs (Cloudflare) — kept for 30 days unless retained longer for a specific security investigation.

9. Your rights under UK GDPR

You have the right to:

• Ask what personal data we hold about you (a subject access request, or “SAR”). We will carry out reasonable and proportionate searches for the data we hold about you and respond within one calendar month; if a request is complex we may extend that by up to a further two months, and will tell you why within the first month.
• Ask us to correct anything that's wrong, or delete data we no longer have a lawful basis to keep.
• Ask us to restrict or object to certain processing, or withdraw consent you've given us.
• Ask for a copy of data you've given us, in a portable format.

To exercise any of these rights, email privacy@mediantpartners.com.

10. Your right to complain

If you think we've handled your personal data unfairly or unlawfully, please tell us first — the quickest way is our data‑protection complaint form, or email privacy@mediantpartners.com or write to us at the registered office in §1.

We will acknowledge your complaint within 30 days and respond substantively in that time; if the matter is complex we'll keep you updated on our progress. This reflects our duty under the UK's Data (Use and Access) Act 2025 to handle data‑protection complaints promptly.

If you're not satisfied with how we handle it, you can escalate to the UK Information Commissioner's Office at ico.org.uk at any time — raising it with us first usually resolves things faster.

11. Cookies

This site does not set any cookies of its own. Cloudflare may set a small number of strictly necessary cookies for bot protection and load balancing; these are essential for the site to function and require no consent under UK law.

12. Security

This site is served entirely over HTTPS/TLS. We take reasonable technical and organisational measures to protect any personal data you send us, and any incident is investigated and disclosed in line with UK law.

13. Changes to this policy

We may update this policy as the site and our services change. The “Last updated” date at the top reflects the most recent change.

14. Contact

For any privacy enquiry, data subject request, or complaint: privacy@mediantpartners.com, or write to Marks AI Ltd, 5 South Charlotte Street, Edinburgh, EH2 4AN.