MGD CONSTRUCTMGD CONSTRUCTION LTD Return to Home page

Privacy Policy

Effective date of the current version: 1 January 2026. Reviewed and published by the operator of this website, the design and consultation house MGD Construct, formally running as MGD CONSTRUCTION LTD.

1. Introduction

This privacy policy explains how MGD CONSTRUCTION LTD, a company operating a design and consulting activity under the name MGD Construct and keeping its office at 211 St. Marys Road, LONDON - N9 8NR, United Kingdom (GB), handles personal information that arrives through the website at www.mgdconstruct.buzz and through the ordinary work of that company. MGD Construct is the developer and maintainer of this website, and MGD CONSTRUCTION LTD is the legal entity that carries the responsibility set out here.

The policy uses plain language on purpose. Every title and every table of contents is provided so that anyone reading from a phone on site or from a desktop in the drawing office can find the relevant part quickly. A short statement sits first: the company collects only what it needs to answer a request, to deliver a commissioned system piece, or to meet a legal duty. The company never sells personal information, never rents a list of contacts to a party, and never passes on a private drawing to a rival bidder.

The policy covers visitors, enquirers, clients, suppliers, and the individuals named on project files. Where a word refers to the legal body, it writes MGD CONSTRUCTION LTD. Where it writes the company it means the same legal body. Where it writes the yard it means the office and workshop floor at 211 St. Marys Road. The policy operates together with the Terms of Service, which are published separately on this site.

2. What personal data we process

MGD CONSTRUCTION LTD may process a limited and proportionate set of personal information, depending on the reason a person is in touch. The ordinary set includes a name, an employer, a job title, a business email address, a business telephone number, an invoice postal address and, when a person chooses to send one, the content of an enquiry message or an attached file handled by this organisation.

Project records can add more detail because steel coordination legitimately touches site detail. Those records can include the names of site managers and safety officers, swipe or attendance notes supplied to the company, fixed line numbers used for call coordination, and signatures against acceptance sheets. The company keeps such detail only where the client has asked for site supervision work and only to the extent the records describe their own staff working under the shared programme.

The company avoids collecting sensitive categories of data wherever the request can be met without them. Health information appears only when a client formally manages a safety event involving a named individual and passes that record over as part of a joint incident file. On those rare records the company marks the file as sensitive, limits internal access to two named roles, and keeps it separate from the shared project volume exactly as the law expects.

3. How the information is collected

Most personal data reaches the company directly: a person rings the yard desk, writes to chat@mgdconstruct.buzz, fills the contact form on this website, or hands a business card to a consultant at a meeting. Data can also arrive through a filled reference or permission as part of a proposal package where the client supplies a list of its own staff for the supervision log.

The website itself captures very little silently. Server records note an internet protocol address, a browser type and a requested resource for the purpose of keeping the site working and free of abuse. Where analytics is used the identifier is run through a masking routine described under cookies below. No hidden scanner reads a private mailbox and no tracker follows a visitor beyond the pages needed to answer the immediate request.

When a client sends drawings, BIM models or monthly reports the transmitted envelope carries sender and recipient addresses as a normal part of email. Those addresses appear in the company mail store so that a marked-up revision can be returned to the same thread, and they sit under the same retention and confidentiality rules as the technical envelope.

4. The lawful grounds relied upon

MGD CONSTRUCTION LTD relies on recorded legal bases for every act of processing. Where a person asks the company to quote for structural steel detailing or site supervision, the ground is the start of a contract and the steps a person asks the company to take before entering that contract. Where the company delivers a commissioned drawing set, delivery is the performance of that contract with the client.

Where the company answers a pre-sale question and no contract yet exists, the ground is the legitimate interest of answering an enquiry competently, balanced against the relatively light impact on the named business contact. Where the law forces a retention, for example keeping tax invoices six years under accounting rules or keeping an incident log under health and safety rules, the ground is a legal obligation.

The company refuses to stretch a single consent to cover unrelated uses. Marketing messages stand on their own consent or on a direct business interest, and every message carries a plain opt-out. The company writes each basis into an internal record so that an inspection or a subject access request can be answered with evidence rather than guesswork.

5. How the company uses personal data

Personal data here is a means to a job, not a product in its own right. The common uses are to reply to an enquiry, to prepare and issue a quotation, to set a signed agreement in place, to carry out the six services announced on this site, and to issue invoices and chase payment that relate to the work of this organisation.

The company also uses records to run safety duties. Where the company supervises a steel erection the daily log can name individuals present for a lift, and where a permit to work names a responsible person that name forms part of the permit record. Every such record exists to prove who held each duty on a given day, which is the honest backbone of a safe site.

From time to time the company runs an internal improvement activity, such as a check on how long a request took to answer. That check works on totals and timings, never on reading private content, and the results stay inside the drawing-room team. Improvement measured without prying keeps the culture honest while protecting the people the company serves.

6. Cookies and site tags

This website is kept deliberately light. Where the company enables small files, called cookies, they serve only the reasons named here: to remember a preference such as a chosen region, or to let an audience measurement tool count page views without building a profile of one individual across unrelated websites.

Strictly necessary cookies that keep a session secure or a form working do not need consent and the company states that clearly rather than hiding consent behind a press of a button. Anything used to reach across the internet to advertise or to study behaviour is placed only after a visitor has actively agreed on the banner shown.

A visitor can reset or delete the small files from a browser at any time, and this part of the policy explains that the core site still functions. The company does not buy behavioural data about the visitors of this site, and the tags it runs are limited to the purpose of seeing which of its own pages and which of its own documents answered a need.

8. Sharing with processors

Personal data reaches a short, named list of processors, never an open marketplace. The practical list covers a UK postal courier used to carry sealed drawing packs, a UK payment processor if the client agrees to pay by a card, an email and file-hosting service that holds the company mailbox and shared volumes, and an accounting product used to raise compliant invoices.

Each processor receives only the data the specific job needs. The courier, for example, receives a name and an address to label a parcel and never sees the BIM model inside the sealed envelope. Each processor is tied by a written arrangement that stops any onward sale, and each sits inside the standards described later in the security section.

The company does not pay for contact lists, does not join data brokers and does not permit a processor to reuse the information for its own advertising. If a processor changes its own standard terms in a way that touches this written arrangement, the company reviews that change before a new transfer proceeds and ends the relationship if the new terms fall short.

9. Transfer across borders

MGD CONSTRUCTION LTD works primarily from the United Kingdom and stores client records on services based in the United Kingdom or in the European Economic Area. Where a file must pass through a server outside those boundaries, the routing is governed by an adequacy recognition or by the standard contractual clauses that the responsible regulator publishes.

A connected reality of construction is that a client or a joint venture partner may sit abroad, for example where a steel package is coordinated between a London office and an overseas fabricating plant. On those projects the client controls delivery of its own works information, and the company draws attention in the agreement to where the client records will rest.

Before any transfer the company checks what protection the receiving processor holds, records the route in the project setup note and keeps a transfer log available to the compliance lead. The company refuses the convenience of moving data to a country that offers a worker little protection just because the connection is faster.

10. Retention periods

Records are kept no longer than the reason that justified them and are then removed or depersonalised as appropriate. Enquiry messages that never become a contract are deleted after twelve months, which gives enough time to answer a late follow-up without holding sales chatter a decade. Sales quotations under a live negotiation stay until that negotiation closes and then follow the same twelve month path.

Client work is different because evidence survives longer than the job. Drawing revisions, model issues, cost bridges, safety logs and invoices are held for six years after the relevant tax year ends, a period that covers both tax inspection and the ordinary limitation window for a construction claim. Site incident material that a regulator can ask to see is kept for the longer of the regulator limit or six years.

At the end of a retention period the company erases, destroys or removes identifiers from the affected files. The deletion is carried out by a process that confirms the removal rather than by leaving a file in a recycle bin, and a record of which volume was cleared is noted without repeating the content in the note.

11. Security measures in place

The company keeps information held under the same care as a plate drawing held for a customer: controlled, labelled and only in the hands that need it. Access to shared client volumes is restricted by role, so a scheduler does not read a private incident file and an intern does not touch an unaudited invoice trail.

The technical controls are direct and explained. The company uses multi-factor sign in for each mailbox and for the document library, encrypts transfer between the drawing room and the hosting services with current transport security, and keeps its own laptops encrypted at rest with a passphrase only the owning individual knows. Software patches run on a fixed cycle.

Physical control matches the technical. Sealed drawing packs wait in a locked cabinet beside the entrance rather than against a public window, printed signing sheets return the same evening, and the yard policy asks that a visitor leaving the drawing room takes with them no open client set. These are ordinary professional habits and the company sets them without extra drama because they keep real trust through quiet days.

12. Privacy for Children

This site serves a professional audience of fabricators, erectors, engineers and commercial managers and is not aimed at children. MGD CONSTRUCTION LTD does not knowingly request details from a person below the age of thirteen, and the forms on this site carry a professional framing that makes a child enquiry unlikely.

Should a school or an educational body approach the company for a short talk about careers in steel, the school or guardian remains in control of any attendance list. The company never builds its own child register from such a visit and forgets a name the moment the visit ends unless the school hands over a consent note naming a different arrangement.

If a parent or guardian believe the website holds a detail about their child, the fastest route is to email chat@mgdconstruct.buzz or telephone +18148769323 so a named individual can search and, where the record exists, remove it without delay. The company handles these requests quicker than the legal deadline because a child record should live privately and briefly.

13. Your rights as a data subject

UK data protection law gives an individual rights that this company honours with named roles behind them. A person can ask for a copy of the records, a correction where a record is wrong, an erasure where no legal duty keeps it, a restriction on processing, a transferable machine-readable copy, and can object to processing that relies on legitimate interest.

The company prefers the rights to be exercised by addressing a request to the contact desk so that files can be returned without confusing a search. A request is answered within one month as the law allows, and where a file is complex the company tells the requester when a second lawful month is needed. Any fee the law permits the company to charge is named before work begins, and no fee is asked where the law allows none.

Making a request costs no goodwill. A visitor who asks for transparency remains welcome at the desk, and the company treats a request for a copy as proof of healthy governance rather than as a reason to slow a request. Each answer states what was held in that folder, what was deleted, and what remains for a legal reason together with the period that legal reason runs.

14. Marketing preferences and consent

Marketing from MGD CONSTRUCTION LTD is occasional and always relevant. A building services note, an event invitation or a summary of a new coordination standard may reach a business contact who asked to stay informed, whether through a check box on a form or through an in-person request at the desk.

Every marketing message carries a plain instruction to stop similar mail, and the company honours that instruction within ten working days rather than fighting to keep a reluctant address. A person can also write to chat@mgdconstruct.buzz with the words stop marketing in the note and the company closes the lane without asking for a reason.

The company does not call a private mobile number for marketing at unreasonable hours and does not send marketing to a note marked as purely for site minutes. Consent is kept in the same records as other permissions so that a regulator or a member of the public can see exactly what was agreed and when that agreement was recorded.

15. Automated decision making

The company makes no automated decisions that carry legal or significant effect on a person. Every quotation, every supervisory judgement and every close-out decision passes through a named individual who can explain the reasoning in plain English on the telephone.

Automation that does exist is mechanical rather than judgemental. A scheduling spreadsheet calculates a milestone date, a viewer flags a drawing that has not turned a revision and a dashboard rolls up a weekly tonnage sum. A machine moves numbers; a person moves judgement, and the company states that division openly.

Where a future client asks the company to score a tendering panel automatically, the company refuses unless a human signs the recommendation and unless that human can show the scored factors. The guard stays in place because a decision about a person deserves a person who owns it and can defend it.

16. Confidentiality of drawings and models

Drawings, BIM models, cost bridges and site logs are the client working assets behind every project. MGD CONSTRUCTION LTD treats them as confidential trade records for the term of the agreement and, beyond it, for as long as the retention schedule and ordinary commercial duty require care.

The company grants access to a client file only to the people doing that work and to the regulator or court described in the regulatory section. It never uses one client marked-up set to build a competing party library, never quotes a rival against those marks and never publishes a frame as its own portfolio without written permission.

When a file leaves the building it leaves encrypted or sealed, and when it returns to the client at handover it returns with a dated list of what was delivered. The confidentiality duty survives the end of the engagement because a set of steel marks keeps commercial value and because the company regards a trust broken at handover as a trust broken.

17. The services and third party links

The company announces six service lines on this site: structural steel detailing, site supervision systems, cost estimation platforms, BIM coordination, safety management tools and progress reporting dashboards. Each is described on the service deck and each relies on the same disciplined data practices laid down in this policy.

From time to time a page carries a link to a standards body, a regulator or a fabrication trade group. Those links leave this site, and this policy stops applying the moment a visitor follows one. The company chooses links it trusts on the day they are written and cannot vouch for changes a different site later makes.

A visitor should treat each outside page against the policy that page itself publishes. The company publishes its own policy prominently at the footer of every page and hopes other makers do the same, because clear labels help the whole industry use digital tools with the same care as a well-filed drawing.

18. Complaints and the regulator

Where something in this policy or in the company handling does not sit right, the adult first step is to raise it with the compliance lead via the contacts below. The company answers every such note, explains what happened in the file and records what it changed so that a lesson does not fade.

Every individual retains an independent right to complain to the Information Commissioner office, the United Kingdom supervisor for data protection, at any time. The company neither asks a person to give up that right nor penalises someone who exercises it. A note to the regulator is reported to the drawing-room lead so that the company learns from it as well.

The company keeps a running list of the data questions it has received and how it answered them, so that the next enquiry benefits from the last one. Closing the loop on questions is how a policy becomes a culture, and culture is what protects a person when no regulator is watching.

19. How to contact the company about privacy

All privacy questions, rights requests and incident reports can be sent through the office at 211 St. Marys Road, LONDON - N9 8NR, United Kingdom (GB). The company answers post at the registered office with the words privacy attention on the envelope so the envelope reaches a named lead undamaged.

The fastest route remains an email to chat@mgdconstruct.buzz. A caller who prefers the telephone can reach the yard desk on +18148769323 and ask for the compliance lead; the desk carries the short briefing on how to route a privacy question the same afternoon. Please include the subject used at first contact so the file is found in one search.

Useful contact number recognition: the value +18148769323 above is the same public business line shown on every page of this site, and it is answered by the office rather than by a distant call centre. Written confirmation follows any verbal promise made on a phone call, so a person keeps a dated record of where things stand.

20. Contact procedure and updates to the policy

A question received by email is logged with the date and the requester role, and the answer is sent to the same thread within the calendar month limit the law gives. Where a request concerns a file shared with a joint venture, the company coordinates with the venture data controller before it answers, and it tells the requester which body holds the shared part.

This policy is reviewed at least annually and whenever a new service line, a new processor or a new regulator rule changes how records flow. When a change matters to a visitor, for example a new retention length or a new sharing party, the revised policy is dated and the section that changed is printed clearly so that a returning reader sees the deltas.

Earlier versions remain available on request through the records below for a reasonable period so that a project started under an old policy can still be judged against the rules that applied at that time. Keeping the history keeps the promise consistent, which suits long steel programmes whose records span several years of policy text.

21. Final provisions

This policy sits inside the wider legal framework of the website. Where a term in this policy appears to argue with the Terms of Service, the more specific promise wins, and where a specific project agreement puts a stricter limit in place, that stricter limit wins both. No clause in this policy is intended to remove a right the law does not allow to be removed.

Any reference to the company or to MGD CONSTRUCTION LTD in this document means the same legal body, and the singular they are used only where English needs a neutral actor. Copies of this policy are printed in accessible text with a strong contrast so that a reader with low vision can follow the terms as comfortably as anyone else at the desk.

Finally, the whole policy returns to one line of good sense. MGD CONSTRUCTION LTD collects so that it can answer, deliver and protect; it holds records so that evidence exists; and it forgets them on a schedule so that a useful trust never bloats into an unnecessary risk. Where this page joins the requests it makes of the company, the head of the drawing room holds the copy and the responsibility.