Who is responsible for your data
The data controller is Marzan Security Ltd, registered in England and Wales, Company No. 12251272, VAT 342 0900 39.
Marzan Security Ltd, registered in England and Wales.
Company No. 12251272. VAT 342 0900 39.
Suite A, 8th Floor St James
Pendleton Way
Manchester
M6 5FW
United Kingdom
Data protection enquiries: info.uk@marzansecurity.com. This is also our general enquiries address; we do not operate a separate privacy-only inbox.
What we collect, and why
| What | When | Why | Lawful basis |
|---|---|---|---|
| Name, company, email, telephone, sector, your message | When you submit an enquiry or request a call back | To answer your enquiry and, where relevant, prepare a quotation | Legitimate interests — responding to a business enquiry you initiated |
| Name and email | When you download a gated document | To send the document and, where you have agreed, related guidance | Consent for any follow-up marketing; legitimate interests for delivering what you asked for |
| Analytics data (pages viewed, device type, approximate location, interactions) | Only if you accept analytics cookies | To understand which guidance is used and improve it | Consent |
| Technical data in server logs (IP address, user agent, requested URL) | Every request | Security, fault diagnosis, and monitoring which crawlers access the site | Legitimate interests — operating the site securely |
| Anti-spam signals (a hidden form field and a submission timestamp) | When you submit a form | To reject automated submissions | Legitimate interests — preventing abuse. No cookies are set and nothing is shared with a third party. |
We do not collect special category data, and we ask you not to include health, criminal or other sensitive information in an enquiry — it is not needed to answer a question about battery storage.
The wizard
The cabinet selector works without any personal data. Your answers are processed to produce the result and are not stored against you. If analytics consent has been given, the fact that the selector was started and completed is recorded as an event, along with the answers chosen — but not linked to any identifying information.
Who we share it with
- DigitalOcean, which hosts this website on servers in Amsterdam as a processor on our instructions.
- Our own customer relationship system, operated by Marzan Security, so that enquiries can be tracked and answered. It runs on infrastructure provided by Supabase (database, hosted in Frankfurt, EU) and Vercel (application hosting), both acting as processors on our instructions.
- Google, if you accept analytics cookies. Analytics and advertising storage are set to denied by default and nothing is sent to Google until you consent.
- SimplySafes.co.uk, where you are dealing with a standard product enquiry that they fulfil.
Where a provider processes data outside the UK, transfers are made under the safeguards permitted by UK GDPR, such as an adequacy decision or the International Data Transfer Agreement.
We do not sell personal data, and we do not share it with third parties for their own marketing.
How long we keep it
- Enquiries that do not lead to a quotation: 12 months from your last contact with us, then deleted.
- Enquiries that lead to a quotation or an order: retained for as long as needed for the commercial relationship and any statutory record-keeping period that follows it.
- Marketing consent records: kept while consent stands and for a period afterwards as evidence that it was given and withdrawn.
- Server logs: a short rolling period set by our host.
- Analytics data: according to the retention period configured in the analytics platform.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing based on legitimate interests, and ask for data you gave us to be transferred elsewhere. Where we rely on consent, you can withdraw it at any time — that does not affect processing already carried out.
To exercise any of these, contact us using the details above. We respond within one month.
If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put it right first.
Cookies
Set out separately in the cookie notice.
Last reviewed: see the date at the foot of this page. This notice is updated when our processing changes.