Privacy Policy

Definitions

• Data Controller: The controller determines the purposes and means of processing data.
• Data Processor: The processor is responsible for processing the data on behalf of the controller.
• Data Subject: A person whose data is processed by a controller or processor.

Data Controller Information

Data Retention

If a data subject creates a registered account, data will be stored on the MWF Logger server. This data includes:

• Company name
• Company address
• Email address
• Encrypted password
• IP addresses
• Last login date
• Testing locations (as input by the data subject)
• Testing machines (as input by the data subject)
• Test date
• Dipslide batch number
• Pass / fail result
• Bacteria level
• Yeast level
• Mould level
• pH level
• Concentration level
• Temperature
• Tramp oil result
• Slime / Biofilm result
• Visual mould result
• Smell result
• Colour result
• Rust result
• Agitation result
• Excessive cuttings result

Only the registered user and the data controller have access to this data. Registered user accounts will be deleted if the user account has been dormant for 2 years. Due to the right to erasure, a registered user can choose to have their account deleted at any time by contacting the data controller (MWF Logger).

Email data: Emails from data subjects to MWF Logger email addresses will be deleted from the servers after one month unless the email is part of an ongoing conversation required for future correspondence. Once the conversation is complete/resolved, the emails will be deleted.

Lawful Basis for Processing

All data will be processed on the basis of consent. The data controller deems processing necessary for the following reasons:

• Company names and addresses are required to create reports for health and safety inspectors.
• IP addresses and last login dates help detect compromised accounts.
• Registration dates help identify inactive accounts for deletion after two years.
• Email addresses serve as the login username.
• Testing result data is required for reporting and graph generation.

Consent

The data subject must give clear consent by ticking two separate checkboxes for the privacy notice and terms & conditions when registering. If consent is withdrawn, data will no longer be processed and the account cannot be maintained.

No consent is required to browse the home page (only essential cookies are used). Consent can be withdrawn at any time—no personal data will be processed without consent.

Data Subject's Rights

• Right to be informed: About collection and use of data.
• Right of access: Access personal data; copy provided within 1 month free of charge.
• Right to rectification: Correct inaccurate or incomplete data within 1 month.
• Right to erasure: Delete personal data within 1 month, understanding account will be removed.
• Right to restrict processing: Store but not use data; decision within 1 month.
• Right to data portability: Data provided in a machine-readable format within 1 month.
• Right to object: Stop processing based on legitimate interests or marketing immediately.
• Rights related to automated decision-making and profiling: Not applicable—MWF Logger does not use profiling.
• Right to withdraw consent: At any time, acted upon promptly.

Data Processors

MWF Logger uses processors that guarantee GDPR compliance. Current processors:

Krystal Hosting

"We have updated our Privacy Notice to meet the requirements of the new framework and have also implemented the required internal procedures to ensure that as a business we are fully GDPR compliant."

LiveChat, Inc software

LiveChat's compliance statement can be viewed here:
https://www.livechatinc.com/general-data-protection-regulation/

Data Breaches

In the event of a data breach, MWF Logger will notify the Information Commissioner's Office within 72 hours and inform affected individuals if their rights and freedoms are at risk. Records of breaches (e.g., unauthorized access, data loss, malicious deletion) will be maintained.

Cookies

Cookies are classified as "essential" (installed by default) and "extra" (e.g., Google Analytics, LiveChat software (LiveChat, Inc), requiring user consent). Users may browse without "extra" cookies if they do not agree.

Live Chat

Consent: All data subjects will need to give pre chat consent (by agreeing to the terms of the privacy notice) before a live chat can commence.

Data Retention: All chat data older than 30 days old will be deleted.

What data is processed: Every time a live chat commences, the live chat agent (dip-slides.com) can view the following information:

• Date and time of chat
• Location
• Local time of visitor
• Cart items plus value
• Pages visited
• Previous visit and last visit (if within the previous 30 days)
• Referral URL
• Browser
• Platform (e.g Windows 10)
• Device
• IP address
• User agent
• Name of data subject (if they have volunteered this information or if they are a MWF logger registered user)
• Email address of data subject (if they have volunteered this info or if they are a MWF logger registered user)
• Data subject's rating of the chat service.
• Any data that is typed into the chat field.

Data Use

Data is used solely to assist the data subject with their enquiry, typically immediately or soon thereafter. Email addresses may be used for correspondence.