Privacy & Data Protection Policy

Who We Are

M&D Supply Solutions Limited is the data controller for personal data collected through this website. Registered in Scotland. Company No. SC593537. Registered office: 46 Colinton Mains Crescent, Edinburgh, EH13 9DD. Contact: info@mdsupplysolutions.com

1.0 GENERAL PROVISIONS

1.1 This document outlines the statutory obligations and internal procedures of M&D Supply Solutions (hereinafter referred to as "the Company") regarding the processing of personal data in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

1.2 The Company operates as a Business-to-Business (B2B) entity specializing in international procurement and logistical coordination. Data subjects interacting with the Company's digital interfaces are hereby notified of the following protocols.

2.0 DATA CATEGORIZATION AND COLLECTION

2.1 The Company collects specific data subsets through its electronic quotation request interface. These subsets are limited to:

• 2.1.1 Legal name of the individual representative.
• 2.1.2 Registered business name or trading entity.
• 2.1.3 Electronic mail (email) address for corporate correspondence.
• 2.1.4 Telephonic contact numbers.
• 2.1.5 Technical specifications, volume requirements, and logistical destination parameters.

3.0 PURPOSE OF PROCESSING

3.1 Data collected under Section 2.0 is processed solely for the following administrative purposes:

• 3.1.1 Formulation of commercial proposals and procurement feasibility studies.
• 3.1.2 Execution of due diligence and supplier vetting protocols.
• 3.1.3 Maintenance of corporate records and audit trails.
• 3.1.4 Compliance with statutory reporting requirements to relevant UK authorities.

4.0 DATA SUBJECT RIGHTS (UK GDPR)

4.1 Pursuant to the UK GDPR, data subjects possess the following statutory rights:

• 4.1.1 Right of Access: The right to obtain a copy of personal data held by the Company.
• 4.1.2 Right to Rectification: The right to correct inaccurate or incomplete records.
• 4.1.3 Right to Erasure: The right to request deletion of data where no overriding legal basis for retention exists.
• 4.1.4 Right to Restriction: The right to limit processing under specific contested circumstances.