Privacy Policy
Last updated:
This Privacy Policy explains how MBS Integrations handles personal information when you visit our website, contact us or use our services.
Information we collect
The information relevant to your contact with MBS Integrations may include:
- Your name, contact details, organisation and enquiry content.
- Correspondence, project requirements and information you choose to provide.
- Quote, customer-administration and transaction information, where applicable to agreed services or supplies.
- Relevant technical information provided for troubleshooting or support.
- Website request and security information associated with delivering and protecting the website. Form security uses validation, a hidden spam-check field and short-lived request counters linked to a hashed network address. These counters contain no enquiry text and are used to limit repeated submissions.
We need sufficient contact and project information to respond to an enquiry. Optional form fields are identified, including the phone field. Please do not send passwords, access credentials, camera footage or sensitive personal information through an ordinary enquiry. Any necessary access or secure exchange of information should be agreed separately.
Purposes and lawful grounds
The lawful ground depends on the purpose, your relationship with MBS Integrations and the information involved. Contacting us does not mean you consent to advertising or newsletters.
| Purpose | Lawful ground |
|---|---|
| Responding to an individual's request for a quote or service | Steps you request before entering a contract, where applicable. |
| General enquiries and communication with business representatives | Legitimate interests in answering enquiries and managing business relationships. |
| Delivering an individual's agreed services | Contract, where applicable. |
| Customer administration, troubleshooting and security | Relevant contractual grounds or legitimate interests, depending on the relationship and activity. These interests include administering customer relationships, resolving technical issues and protecting systems against misuse. |
| Required accounting and legal records | Legal obligations, where applicable. |
Where legitimate interests apply, they must be balanced against your interests and rights. Only information relevant to the purpose should be used.
Providers and recipients
- Website hosting: this website is hosted on an A2 VPS.
- Email: A2 provides the email service used for correspondence.
- Enquiry handling: enquiries are handled by email. The website does not forward enquiries to n8n or an AI service.
- Fonts: DM Sans and Manrope are served from this website. Your browser does not need to contact Google Fonts to display the typefaces.
- Delivery: where an agreed supply requires delivery, relevant delivery information may be shared with the supplier arranging it.
- External communication services: when you choose WhatsApp or a social platform, that service also handles information under its own terms and privacy practices.
For questions about information shared in connection with your enquiry or service, contact info@mbsintegrations.ie.
Authorised customer-system access
Authorised remote support may involve relevant system information and, depending on the agreed task, personal data held by the customer. Access is limited to the customer and authorised MBS personnel within the agreed scope. The agreed task determines what access is needed; it does not provide unrestricted permission to access or reuse customer data.
MBS Integrations’ own enquiry, customer and project-administration records are distinct from information processed on a business customer’s instructions. Where MBS acts as a processor, a separate data-processing agreement and documented instructions govern that work. This website policy does not replace that agreement.
International processing
Information may be processed in different countries depending on the provider and the service involved. The location of a website server alone does not determine where email, backups, support access or external services process information.
For information about the locations and transfer arrangements relevant to your enquiry or service, contact info@mbsintegrations.ie. Applicable data-protection requirements apply to transfers outside the European Economic Area (EEA).
How long information is kept
Information is kept only for as long as needed to deal with your enquiry or provide the service, meet applicable recordkeeping duties and address relevant legal claims. The appropriate period depends on the type of information, the relationship, ongoing obligations and the purpose for which it is needed.
Enquiry and project records may be needed while a matter is ongoing and afterwards for relevant contractual, accounting or legal purposes. Technical support information and access should be limited to what remains necessary and authorised. Different periods may apply to operational logs and backups.
You can ask about retention of information relating to you by contacting info@mbsintegrations.ie.
Your rights
Depending on the circumstances, you may request access to your personal information, correction of inaccurate information, erasure or restriction of processing. Applicable portability rights allow you to receive certain information in a structured, commonly used format and, where applicable, have it transferred to another controller.
You may object to processing based on legitimate interests on grounds relating to your situation. You can object to direct marketing at any time. Where processing relies on consent, you can withdraw it without affecting the lawfulness of processing before withdrawal.
Rights depend on the circumstances. Requests generally receive a response within one month. Where a permitted extension is needed, up to a further two months, you must be told the reason within the initial month.
To make a request, contact us by email. You may also complain directly to the Irish Data Protection Commission; you do not have to complain to MBS Integrations first.
Contact us
For privacy questions or requests, contact us by email. You can find further contact details on our Company Information page.
Policy updates
We may update this policy when our services or information-handling practices change. The latest version and its update date will appear on this page.
Cookie choices and consent records
We use a first-party cookie called mbs_consent to remember your privacy choices for six months. It is sent over HTTPS with Secure and SameSite=Lax protection and applies across this website. It contains only a random consent ID, Essential enabled status, your Analytics, Marketing and Functional choices, the consent timestamp, the notice/policy version and the expiry date. It contains no name or contact details.
Essential is always enabled for remembering and recording these choices. With your permission, Google Analytics 4 helps us understand visits to our pages. Marketing would support advertising measurement or remarketing. Functional would remember optional settings or support extra features. Analytics, Marketing and Functional are off by default. Google Analytics loads only after Analytics consent; no marketing or optional functional tools are installed. Optional tools may only load after their category has been selected and the choice successfully recorded. A new service or changed notice requires renewed consent before activation.
When you allow Analytics, we load Google Analytics 4 (Google Ireland Limited) to measure website visits. It receives a random analytics identifier, page views and basic browser/device information. We send the authored page address and title without query strings or fragments and suppress the page referrer. We do not send your name, email address, telephone number, enquiry text or form-field values, and do not send our consent-record ID to Google. Advertising personalisation, Google Signals and advertising consent remain disabled.
Google Analytics uses first-party _ga and _ga_WGMNW3NH5X cookies to distinguish browsers and maintain session information. We configure their lifetime to 180 days. Your separate consent preference expires after six months. No Google measurement library, request or analytics cookie is initiated before Analytics consent. Marketing consent alone does not enable Analytics. Withdrawal disables subsequent measurement and removes accessible GA cookies; it cannot recall information already sent.
Analytics processing is based on your consent. Google receives your network IP address when your browser connects; Google states that it does not log or store individual IP addresses from EU, Switzerland or UK users. This is separate from our own consent record, which does not retain your IP. Google may process information outside the EEA under its applicable data-protection arrangements. See Google’s Privacy Policy and Google Analytics privacy information. Contact info@mbsintegrations.ie with privacy questions.
Use Cookie settings in the footer of any page to review or change your choices. Choose Reject non-essential to turn off all optional categories, or save them separately. Withdrawing consent stops future optional tracking and removes known optional first-party cookies where technically possible. It does not affect the lawfulness of processing before withdrawal. The website remains usable when you refuse optional tools.
We ask again after six months, if you clear the preference cookie, or when the consent notice, banner UI or Cookie Policy version changes. If saving fails, optional tools remain off and you can retry. Browser settings can also remove or block cookies; blocked preference storage means your choices cannot be remembered.
We keep a separate consent record to demonstrate and honour your choices. Each change adds a new event rather than overwriting the earlier evidence. The record contains only an internal event number, random consent ID, event type (accept all, reject non-essential, customised, updated or withdrawn), Essential enabled status, Analytics, Marketing and Functional choices, consent-notice version, Cookie Policy version, banner UI version, browser-reported click time in UTC with millisecond precision, UTC server receipt timestamp, basic browser family, operating-system family and approximate two-letter country code where available.
This consent record contains no name, email address, phone number, full or partial IP address, complete user-agent string, fingerprint, advertising identifier or browsing history. It is separate from ordinary hosting/security logs and any information you submit through the contact form. Consent records are retained for 12 months from each event, then removed by daily scheduled cleanup. Our legitimate interest in documenting privacy choices and resolving consent disputes is the basis for this limited evidence record. Browser and operating-system names are derived from the request without retaining the full user-agent string or device/version details. The requesting IP address is used transiently for a country-only lookup in a database held on our own server, not sent to an external lookup service, and not saved in the consent record. Country is approximate and may reflect a VPN or network location; unavailable results remain blank. Browser-reported click time can be affected by the device clock, so we retain server receipt time separately. Records from earlier releases retain only the fields collected at that time. The banner UI version links to an archived copy of the wording, layout and styling. Country data: IP Geolocation by DB-IP, licensed under CC BY 4.0; converted to a local lookup format.