"We", "our" or "us" means MXC Capital Limited and its subsidiaries. For the purposes of data protection law (the Data Protection Act 1998), we are a data controller in respect of personal data. We collect and use personal data as described below. We are responsible for ensuring that we use personal data in compliance with applicable data protection law.

If you have any questions about this notice, about how we process personal data or about your rights over your personal data, you can contact us via email to gdpr@mxccapital.com in the first instance. Alternatively, our Data Protection Officer can be contacted using the details set out in the “Contact us” section below.

This notice applies to personal data we receive or otherwise create in connection with the provision of services to clients and users of our website www.mxccapital.com.

It is important that you take the time to read this notice so that you understand how we will use your personal data and your rights in relation to your personal data.

 

Personal data that we collect about you

We will collect and use the following information about you:

Information you give us

We use the information about you that you provide to us, including the information that you provide when filling in fields in a contract and any other information or updates to your information that you provide to us when corresponding with us (by phone, e-mail or otherwise)

Information we collect or generate about you

  • When you submit information to us, we may use this information to interact with, and provide services to, you (or your employer), and to carry out our obligations arising under or in connection with a contract.
  • We may also receive information from other sources for the above purposes.
  • Website usage information – our website uses analytics and cookies to automatically gather certain statistical information such as the number and frequency of visitors and their IP addresses. A cookie is an element of data that our Website sends to your browser which is then stored on your system. You can set your browser to prevent this happening. Any information collected in this way can be used to identify you unless you change your browser settings. This information is used as aggregated statistical information about users, providing usage by IP address. We do not identify individual users from this type of data and it does not involve the processing of personal data about you. This information helps us to measure how individuals use our website and our services, so that we can continually improve them.
  • We may record, monitor and retain any and all communications (which may include the recording and monitoring by a third party appointed by us), including email and other electronic messaging, telephone conversations and other electronic communications with you, for the purposes of providing services to you (or to your employer) and/or otherwise in order to comply with applicable law.
  • We generate data for internal analysis and research.

If we do not receive this information we may not be able to provide certain services to you.

 

How we use your personal data

Your personal data may be processed by us for the following purposes:

  • to provide you with services you request (or services requested by your employer) or other services reasonably ancillary thereto, and to carry out our obligations arising under or in connection with a contract;
  • to administer and maintain user access to our services and/or website;
  • to communicate with you in relation to the services we provide to you (or to your employer);
  • to comply with our obligations under applicable law;
  • to monitor and improve our website and services; and/or
  • for internal analysis and research.

 

Legal basis for processing your personal data

We process your personal data pursuant to the following legal bases:

  • where necessary for the purpose of our legitimate business interests which includes:
    • the provision of services to you (or your employer), the sending and receipt of communications in relation thereto and/or carrying out obligations arising in connection with a contract;
    • compliance with legal and regulatory obligations (including applicable laws, rules and regulations outside of the European Union and requests or requirements of competent authorities);
    • contacting you with email updates in relation to services; and
    • generating data for internal analysis and research (including monitoring and improving our website and services);
  • where necessary to comply with a legal obligation (for example anti-money laundering, know-your-customer and counter-terrorist financing checks and the prevention and detection of fraud and other financial crime).

You have the right to object to processing under (ii) at any time by emailing us at gdpr@mxccapital.co.uk and requesting the same.

 

Sharing your personal data

We may disclose your personal data to our third-party service providers in the circumstances described below:

  • to facilitate the provision of services to you (or your employer);
  • to facilitate the administration and maintenance of user access to our services and/or website;
  • to conduct and/or improve our business development activities;
  • to ensure the safety and security of our data (and that of third parties, including data vendors and other data sources); and
  • as part of our internal research and statistical analysis activity.

We will take reasonable steps to ensure that the personal data is accessed only by personnel that have a need to do so for the purposes described in this notice.

We may also share your personal data with third-parties:

  • if we sell any of our business or assets, in which case we may disclose your personal data to the prospective buyer for due diligence purposes;
  • if we are acquired by a third party, in which case personal data held by us about you will be disclosed to the third-party buyer; and
  • to third party agents or contractors (for example, the providers of our electronic data storage services) for the purposes of providing services to us.

These third parties will be subject to confidentiality requirements and they will only use your personal data as described in this notice.

We may also share your personal data with third parties (including, without limitation, regulatory, governmental, judicial and other bodies or authorities of competent jurisdiction) to the extent required by applicable law, for example if we are under a duty to disclose your personal data in order to comply with any legal or regulatory obligation, and to establish, exercise or defend our legal rights.

 

Transfer of personal data outside the European Economic Area

The information you provide to us will be transferred to and stored on our secure servers in the European Economic Area (“EEA”). However, from time to time, your personal data may be transferred to, stored in, or accessed from a destination outside the EEA.

In all cases, however, we will ensure that any transfer of your personal data is compliant with data protection law and we will treat the information under the guiding principles of this Privacy Notice.

 

How long we keep your personal data

How long we hold your personal data for will vary. The retention period will be determined by various criteria including:

  • the purpose for which we are using it – we will need to keep the data for as long as is necessary for that purpose (for example, to communicate with you in respect of our services for so long as you (or your employer) remain a recipient of such services); and/or
  • legal and regulatory obligations – applicable laws, rules or regulations may set a minimum period for which we have to store your personal data.

 

Links to other websites

Our website may contain links to other websites. This Privacy Policy only applies to our websites so when you link to other websites you should read their privacy policies. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

 

Your rights

You have a number of rights in relation to the personal data that we hold about you. These rights include:

  • the right to object to our processing of your personal data where we process your personal data pursuant to our legitimate business interests. Please note that there may be circumstances where you object to our processing of your personal data but we are legally entitled to refuse that request;
  • the right to obtain information regarding the processing of your personal data and access to the personal data which we hold about you;
  • the right to withdraw your consent to our processing of your personal data at any time. Please note, however, that we may still be required to process your personal data if we have another legitimate reason (other than consent) for doing so;
  • the right to request that we rectify your personal data if it is inaccurate or incomplete;
  • the right to request that we erase your personal data in certain circumstances. Please note that there may be circumstances where you ask us to erase your personal data but we are legally required to retain it;
  • the right to request that we restrict our processing of your personal data in certain circumstances. Please note that there may be circumstances where you ask us to restrict our processing of your personal data but we are legally entitled to refuse that request;
  • the right to object to the processing of your personal data for direct marketing purposes; and
  • the right to lodge a complaint with the data protection regulator (details of which are provided below) if you think that any of your rights have been infringed by us.

You can exercise your rights by contacting us using the details set out in the “Contact us” section below. You can find out more information about your rights by contacting the data protection regulator, the Information Commissioner, or by searching their website at https://ico.org.uk/

 

Changes to this Privacy Notice

We keep this notice under regular review. Any changes we make to this notice in the future will be posted on this page. Please check back frequently to see any updates or changes to this notice.

 

Contact us

MXC Capital Limited is a company registered in Guernsey. Our registered address is at 1st and 2nd Floors, Elizabeth House, Les Ruettes Brayes, St Peter Port, Guernsey GY1 1EW and our company registration number is 58895.

Please contact us if you have any questions about this notice or personal data that we may hold about you.

By post: Data Protection Officer, MXC Capital Limited, 1st and 2nd Floors, Elizabeth House, Les Ruettes Brayes, St Peter Port, Guernsey GY1 1EW

By telephone: 0207 965 8149; or

By email: gdpr@mxccapital.com