Privacy Policy
Introduction and Scope
This Privacy Policy explains how Mirquosen, operating mirquosen.com, collects, uses, stores, and protects the personal data of users who visit or interact with this website. The Company is committed to handling personal data responsibly and in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. Users are encouraged to read this policy carefully to understand how their information is managed.
This policy applies to all personal data collected through mirquosen.com, including data submitted via contact forms, data collected automatically during website visits, and data provided through direct communications with the Company. It should be read alongside the Cookie Policy, which sets out how cookies and similar tracking technologies are used on this website. By using this website, the user acknowledges the practices described in this policy.
Information the Company Collects
The Company collects personal data in two ways: directly from users who provide it voluntarily, and automatically through the operation of this website. The type and extent of data collected depends on how the user interacts with the site. The Company collects only the data that is necessary for the purposes described in this policy and does not seek to collect excessive or irrelevant personal information from users.
Directly Provided Information
- • Name and contact details submitted through the enquiry form on this website
- • The subject matter and content of messages sent to the Company via the contact form
- • Specimen type, classification category, or provenance topic referenced in user enquiries
- • Email address provided for the purpose of receiving a response to an enquiry
- • Phone number provided voluntarily when the user requests telephone contact
Automatically Collected Information
- • IP address and general geographic region derived from the user's device connection
- • Browser type, version, and operating system used to access the website
- • Pages visited, time spent on each page, and navigation paths through the site
- • Date and time of each visit and the duration of the user's session on the website
- • Referring URL or search query through which the user arrived at mirquosen.com
How Personal Data Is Used
The Company uses personal data collected through this website for specific, documented purposes consistent with the lawful bases available under UK data protection law. Data is not used for purposes that are incompatible with the reason it was originally collected. The Company does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on users.
- • Responding to enquiries submitted through the contact form on this website
- • Providing classification, provenance, and valuation context information requested by users
- • Maintaining records of communications for the purpose of continuity and accuracy
- • Improving the content, structure, and usability of mirquosen.com using aggregated analytics data
- • Complying with legal obligations applicable to the Company under UK law
- • Detecting and preventing fraudulent or unauthorised use of the Company's website
- • Contacting users who have requested a follow-up response regarding specimen assessments
Our Commitment: The Company processes personal data only where a lawful basis exists under the UK General Data Protection Regulation. In most cases, processing is carried out on the basis of the user's consent, the legitimate interests of the Company in operating this website and responding to enquiries, or compliance with a legal obligation. Users may withdraw consent at any time by contacting the Company directly. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Disclosure of Personal Data
The Company does not sell, rent, or trade personal data to third parties. Personal data may be disclosed to carefully selected third-party service providers who assist in the operation of this website and the Company's communications. Any such provider is required to handle personal data in accordance with applicable UK data protection law and is permitted to use it only for the specific purpose for which it was shared. The Company remains responsible for ensuring that third-party handling of personal data meets the required standard.
Third-Party Service Providers
The Company engages third-party providers for services including website hosting, analytics, and email communication infrastructure. These providers act as data processors under the instruction of the Company and do not use personal data for their own independent purposes. Contracts with all data processors include appropriate data protection clauses consistent with UK regulatory requirements. The Company reviews third-party arrangements periodically to ensure ongoing compliance.
Legal Disclosure Requirements
The Company may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law or by a binding legal order. In such cases, the Company will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted, notify the user of the disclosure.
Anonymised Analytics Data
The Company uses anonymised, aggregated data derived from website visits to analyse user behaviour and improve the content and structure of mirquosen.com. This data does not identify individual users and is not combined with other information in a way that would make individual identification possible. Anonymised analytics data may be retained indefinitely as it does not constitute personal data under applicable law.
The Rights of Users
Users located in the United Kingdom have rights in relation to their personal data under the UK General Data Protection Regulation and the Data Protection Act 2018. The Company is committed to facilitating the exercise of these rights in a timely and transparent manner. Requests to exercise any of the rights listed below should be submitted in writing to the Company using the contact details provided on this website. The Company will respond within one calendar month of receiving a valid request.
- • The right to request a copy of the personal data the Company holds about the user
- • The right to request correction of inaccurate or incomplete personal data held by the Company
- • The right to request erasure of personal data where it is no longer necessary for the original purpose
- • The right to receive personal data in a structured, machine-readable format for transfer purposes
- • The right to object to processing carried out on the basis of legitimate interests of the Company
- • The right to request restriction of processing while a dispute about accuracy or lawfulness is resolved
Users who wish to exercise any of the rights described above, or who have a concern about how their personal data has been handled, should contact the Company directly using the details provided on the contact page of this website. Users also have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection matters, if they believe their rights have been infringed.
Data Security Measures
The Company takes the security of personal data seriously and has implemented a combination of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. No method of data transmission or storage can be guaranteed as completely secure, and the Company cannot warrant the absolute security of data transmitted over the internet. Users should take appropriate steps to protect their own devices and communications.
Technical Security Measures
- • Encryption of data in transit using industry-standard secure socket layer protocols
- • Access controls that restrict personal data to authorised personnel only within the Company
- • Regular security assessments of the website infrastructure and hosting environment
- • Secure deletion procedures applied to personal data that has reached the end of its retention period
Organisational Security Measures
- • Data protection training provided to all staff who handle personal data on behalf of the Company
- • Internal policies governing the handling, storage, and disposal of personal data by Company personnel
- • A process for identifying, assessing, and responding to personal data breaches in a timely manner
- • Periodic review of data protection practices to ensure ongoing compliance with applicable UK law
Retention of Personal Data
The Company retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Retention periods are determined by the nature of the data and the purpose of processing. When personal data is no longer required, it is securely deleted or anonymised. The following retention periods apply to the principal categories of personal data the Company holds.
- • Contact form enquiry data is retained for up to two years from the date of last correspondence
- • Specimen assessment records are retained for up to three years to support continuity of service
- • Email and written communications are retained for up to two years from the date of the last exchange
- • Records relevant to any financial transaction or formal engagement are retained for six years under UK law
- • Where consent to marketing communications has been given, data is retained until consent is withdrawn
Users may request early deletion of their personal data at any time by contacting the Company in writing. The Company will action such requests within one calendar month, subject to any overriding legal obligation to retain the data for a specified period.
International Data Transfers
The Company is based in the United Kingdom and processes personal data primarily within the UK. Where personal data is transferred to a third-party service provider located outside the UK, the Company ensures that appropriate safeguards are in place to protect the data in accordance with UK data protection law. Such safeguards may include adequacy decisions, standard contractual clauses, or other approved transfer mechanisms.
- • Transfers are made only to countries or organisations offering an adequate level of data protection
- • Standard contractual clauses approved under UK law are applied where adequacy decisions do not exist
- • Third-party processors outside the UK are required to comply with equivalent data protection obligations
- • Users may request further information about international transfer safeguards by contacting the Company
Cookies and Tracking Technologies
This website uses cookies and similar technologies to support its operation and to collect anonymised analytics data. Cookies are small files placed on the user's device that allow the website to recognise the device on subsequent visits and store certain preferences. The Company does not use cookies for targeted advertising or cross-site tracking. Full details of the cookies used on mirquosen.com are set out in the Cookie Policy, which should be read alongside this Privacy Policy.
Types of Cookies in Use
- • Strictly necessary cookies that enable core website functions and cannot be disabled without affecting usability
- • Anonymised analytics cookies that collect aggregated data on page visits and navigation patterns
- • Preference cookies that remember user settings such as language or display options across sessions
- • Functional cookies that support contact form operation and session continuity during a single visit
Users may manage or disable cookies at any time through their browser settings. Disabling strictly necessary cookies may affect the functionality of certain areas of this website. Further information on managing cookies is available in the Cookie Policy published on mirquosen.com.
Changes to This Privacy Policy
The Company reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the Company's data processing practices. When material changes are made, the updated policy will be published on this page with a revised effective date. Users are encouraged to review this policy periodically to remain informed of how their personal data is handled.
- • The updated policy will be published on this page with a clearly stated effective date
- • Where changes are material, the Company will take reasonable steps to draw them to users' attention
- • Continued use of the website following an update constitutes acceptance of the revised policy
- • Users with questions about any change to this policy may contact the Company directly for clarification
This Privacy Policy was last reviewed and updated on October 20, 2026. Users who have previously reviewed this policy are advised to check the effective date to determine whether any changes have been made since their last review.
Contacting the Company About Privacy
Users with questions, concerns, or requests relating to this Privacy Policy or to the handling of their personal data may contact the Company using the details provided on the contact page of this website. The Company aims to respond to all data protection enquiries within a reasonable time and no later than one calendar month from receipt.
Mirquosen
Whiteladies Rd, Clifton, Bristol BS8 2NN, United Kingdom
Phone: +44(0)20 8073 2547
Email: content@mirquosen.com