Privacy Policy

Last updated: 25 September 2026.

Who is responsible for your information

MB-SITES is the trading name of Mike (Michal) Bosnovic, based in Lancing, West Sussex. MB-SITES is responsible for deciding how personal information collected through this website and our own business enquiries is used.

For privacy questions or to exercise your rights, email info@mb-sites.com or use our Contact page.

This notice covers mb-sites.com and enquiries about our services. Where we handle personal information on a client’s behalf while providing website or hosting services, that client’s privacy notice and our agreement with them also apply.

Information we collect

Enquiries: your name, email address, phone number if supplied, website address where requested, and the information you include in your message.
Client communications: information needed to discuss a project, prepare a proposal, provide agreed services and administer the business relationship.
Technical information: information associated with website requests and form submissions, such as IP address, browser details, time and the page used. Website and hosting systems may record this to operate the site, investigate errors and protect against misuse.
Optional analytics: if you allow Analytics, information about page visits, interactions, referral sources and device/browser characteristics, together with cookie identifiers.
Cookie preferences: the categories you allow or reject and when you made that choice.

Please only send information relevant to your enquiry. Do not include passwords, payment-card details or sensitive personal information in a general enquiry form.

Why we use information

Under the UK General Data Protection Regulation and the Data Protection Act 2018, as amended, we need a lawful basis for using personal information. The basis depends on the activity:

Responding to an enquiry or preparing a proposal: taking steps at your request before entering a contract with you, or our legitimate interest in responding to business enquiries where you contact us on behalf of an organisation.
Providing agreed services: performing our contract with you, or our legitimate interest in managing a client relationship where the contract is with your organisation.
Running and protecting the website: our legitimate interests in maintaining a reliable service, preventing spam and misuse, and investigating faults.
Records required by law: compliance with applicable legal obligations, for example accounting requirements.
Optional website analytics: your consent, which you can withdraw through Cookie preferences.

An enquiry does not subscribe you to a mailing list. Cookie consent is separate from making an enquiry or agreeing a project.

Forms and service providers

Our WordPress forms send enquiries by email and are configured to save submissions in the website’s administration system. Information may therefore be held both in the website system and the business mailbox.

Providers supporting website hosting, email, backups, security and business administration may handle information where needed to deliver those services. Information may also be shared with professional advisers or authorities where necessary to meet legal obligations or deal with a legal claim.

Google Analytics and external services

Google Analytics 4 is configured to load only after you allow Analytics. It helps us understand website use and improve the site. Our current configuration disables Google signals and advertising-personalisation signals. You can reject Analytics and still use the website and enquiry forms.

Google operates internationally and information may be processed outside the UK. See Google’s explanation of its use of information and Google’s data-processing terms and transfer provisions. Contact us if you need further information about providers or safeguards relevant to your information.

If you follow a link to WhatsApp, a social network or a client website, that service’s own privacy notice applies. Our Cookie Policy explains the browser storage used on this website.

How long information is kept

We do not apply one fixed retention period to all records. How long information is needed depends on the purpose for which it was collected. For enquiries, we consider whether the enquiry is still active and whether the correspondence is needed for follow-up. For client records, we consider the duration of the relationship, ongoing support or service commitments, and any applicable accounting, tax or other legal requirements. Relevant records may also be needed to establish, exercise or defend legal claims. Information should be deleted or anonymised when it is no longer needed for these purposes. You can contact us to ask about the information we hold about you or request deletion, subject to applicable legal requirements.

Keeping information secure

We use appropriate technical and organisational measures to protect information, including access controls and website maintenance. No website or email service can be guaranteed completely secure. If you think information sent to us has been compromised, please contact us promptly.

Your rights

Depending on the circumstances, you can ask to access your personal information, correct it, erase it, restrict its use or receive it in a portable format. You can object to processing based on legitimate interests, and you have an absolute right to object to direct marketing.

Where processing relies on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of earlier processing. These rights have conditions and exceptions; we will explain any that apply to your request. We may need to verify your identity before disclosing or changing information.

Questions and complaints

Please contact us first if you have a privacy concern so we can investigate. You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator, at ico.org.uk/make-a-complaint.

Updates to this notice

We may update this notice when our services, website or legal obligations change. The date above shows when it was last updated.