Morgan Compliance Group
Privacy Policy
How we collect, use and protect personal information when you use this website or work with us.
Book a Free ConsultationWho we are
Morgan Compliance Group Ltd is the data controller for the personal information described in this policy. Registered in England and Wales, company number 17207134. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. ICO registration number: ZC246372. Contact: sales@morgancompliancegroup.com or 0330 229 7814.
Information we collect
- Enquiries and consultation requests: your name, company name, email address, telephone number, and any details you choose to give about your location, workforce size, service needs, deadlines and preferred contact method or date.
- Client work: contact details for people at client organisations, and the information needed to deliver the agreed service. This can include records such as risk assessments, training records and incident reports, which may contain information about the client├ö├Â┬úÔö£├é├ö├Â┬úÔö£┬║├ö├Â┬úÔö£Ôòùs employees.
- Business records: invoices, payment records and correspondence.
- Website use: technical information such as IP address, browser type and pages visited, collected by our website hosting and security providers to run and protect the site.
How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and consultation requests | Legitimate interests: replying to people who contact us |
| Delivering consultancy and subscription services | Performance of a contract with you or your organisation |
| Invoicing, accounts and tax records | Legal obligation |
| Running and securing the website | Legitimate interests: keeping the site available and secure |
Where client work involves health information about a client├ö├Â┬úÔö£├é├ö├Â┬úÔö£┬║├ö├Â┬úÔö£Ôòùs employees, such as injury details in an incident report, we handle it only as needed to provide the agreed service, under the employment and health and safety conditions in UK data protection law, and under the terms agreed with the client.
We do not sell personal information or share it with third parties for their marketing.
Who we share it with
- Base44: website and form hosting
- Cloudflare: website delivery and security
- IONOS: email hosting
- Stripe: payment processing
We use trusted service providers who process information on our behalf and under our instructions:
We may also share information with professional advisers, insurers or regulators where required by law or to protect our legal rights. With your agreement, we may involve a suitably qualified associate consultant in delivering your service.
International transfers
Some providers may store or process information outside the UK, including in the United States. Where this happens, we rely on the safeguards UK law recognises, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Enquiries that do not lead to work: up to 24 months, then deleted.
- Client records: for the duration of the relationship and 6 years afterwards, to meet legal, tax and insurance requirements.
- Website technical logs: as set by our hosting and security providers, normally a short period.
Your rights
You can ask us to: give you a copy of your information; correct it; delete it; restrict or object to how we use it; or transfer it to you or another organisation. Where we rely on consent, you can withdraw it at any time. Contact sales@morgancompliancegroup.com. We will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner├ö├Â┬úÔö£├é├ö├Â┬úÔö£┬║├ö├Â┬úÔö£Ôòùs Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this page if our practices change. Last updated: 28 September 2026.