Privacy Policy

1. Who we are

My Best Solutions Limited (“we”, “us”, “our”) is the data controller responsible for your personal data. We are a company registered in England & Wales, company number 14243668, registered with the Information Commissioner’s Office under registration ZB623638.

Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.

2. Data Protection contact

For any privacy questions or to exercise your rights, contact:

Matthew Porteus
matthew@mybestsolutions.co.uk

3. Personal data we collect

• Enquiry data you submit via our contact form: name, email, company, website, project type, budget and your message.
• Communication data when you email or call us.
• Technical data automatically collected by our hosting provider for security and reliability: IP address, browser user-agent, request timestamps. Kept in short-term server logs.
• Analytics data (only if you consent): pseudonymised usage events via Google Analytics 4 with IP anonymisation enabled.

4. How we use your data and our lawful basis

• To respond to enquiries and provide quotes — lawful basis: legitimate interests (responding to people who contact us) and, where applicable, steps prior to entering a contract (Art. 6(1)(b) UK GDPR).
• To deliver services to clients — performance of a contract (Art. 6(1)(b)).
• To keep our site secure and operational — legitimate interests (Art. 6(1)(f)).
• To measure site usage via analytics — consent (Art. 6(1)(a)). You can withdraw consent at any time via our Cookie Policy.
• To comply with legal obligations — Art. 6(1)(c).

5. Who we share your data with

We do not sell your personal data. We share it only with trusted processors who help us run the business:

• Hosting & database — Supabase (operated under our Lovable Cloud workspace) for application hosting and database storage.
• Analytics — Google (Google Analytics 4), only if you consent.
• Email — our email service provider for sending and receiving correspondence.
• Professional advisers — lawyers, accountants and insurers where strictly necessary.
• Regulators or law enforcement where required by law.

6. International transfers

Some of our processors (including Google) are based outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards under Article 46 UK GDPR — the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK government has deemed adequate.

7. How long we keep your data

• Enquiries with no engagement: up to 24 months, then deleted.
• Client records: for the duration of our engagement plus 6 years to meet UK statutory and tax requirements.
• Server access logs: up to 30 days.
• Analytics data: GA4 default retention (currently 14 months) where you have consented.

8. Your rights under the UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Have inaccurate data rectified.
• Have your data erased in certain circumstances.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the Information Commissioner’s Office (ico.org.uk, 0303 123 1113). We’d appreciate the chance to address your concerns first — please contact matthew@mybestsolutions.co.uk.

9. Cookies

Our site uses strictly necessary cookies and, with your consent, analytics cookies. See our Cookie Policy for the full list and how to manage your preferences.

10. Security

We use industry-standard technical and organisational measures including encryption in transit (TLS), encrypted storage, access controls and least-privilege principles to protect your data.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified on this page along with a revised “last updated” date.