Privacy policy.

How I collect, use and look after your personal information.

Last updated 25 August 2026

In short: I only collect what I need to answer your enquiry and deliver your services, I never sell your data, and you can ask me to delete it at any time.

Who I am

MFD Virtual Assistant Solutions (“MFD”, “I”, “me”) is a sole trader business based in the United Kingdom, run by Megan Detheridge. I am the data controller for the personal information described in this policy. You can reach me at support@mfd.org.uk.

What information I collect

Information you give me: Your name, business name, email address, preferred contact method and the details of what you need help with, submitted through the enquiry form on this website or sent to me by email.
Information I collect during our work together: Where you engage me for services, this may include business documents, contact lists, supplier details, calendar and inbox contents, and any other material you share so I can carry out the work.
Technical information: Basic, aggregated information about visits to this website, such as pages viewed and approximate location, collected by my hosting provider for security and performance purposes.

Why I use it, and my lawful basis

To respond to your enquiry and arrange your free consultation. Lawful basis: legitimate interests, and taking steps at your request before entering a contract.
To deliver the services you have engaged me for. Lawful basis: performance of a contract.
To send invoices and keep financial records. Lawful basis: legal obligation and legitimate interests.
To keep this website secure and working properly. Lawful basis: legitimate interests.

I do not send marketing emails or newsletters, and I will not add you to any mailing list from a website enquiry.

Who I share it with

I never sell your personal information. I share it only with the service providers I need to run my business, and only to the extent necessary. These currently include my website host, my email provider, my accounting software and, where relevant to your project, tools you have asked me to work in such as your own scheduling, storage or social media platforms.

All of my providers are bound by their own data protection obligations. Where information is transferred outside the UK, I rely on the safeguards those providers have in place, such as the UK International Data Transfer Agreement or equivalent approved mechanisms.

How long I keep it

Enquiries that do not turn into work are deleted within twelve months. Client records and correspondence are kept for the duration of our working relationship and then for six years afterwards, in line with UK tax and accounting requirements. Material belonging to you, such as documents and logins, is returned or securely deleted at the end of our engagement on your instruction.

How I keep it safe

I work on password-protected, encrypted devices with two-factor authentication enabled on my business accounts. Client credentials are stored in an encrypted password manager and never shared in plain text. I hold professional indemnity insurance covering my business activities.

Your rights

Under UK GDPR you have the right to be informed about how your data is used, to request a copy of it, to have inaccurate data corrected, to ask for it to be deleted, to restrict or object to its use, and to ask for it to be transferred to you or another provider. To exercise any of these, email support@mfd.org.uk and I will respond within one month.

If you are unhappy with how I have handled your information, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If I change this policy I will update the date at the top of this page. Where the change is significant and affects existing clients, I will let you know by email.