MAMMALIAN Limited – Privacy and Data Policy

Key Author – Malcolm Beer (Managing Director)
Reviewing and Approval Body – Board of Directors
Approval Frequency – Two Years
Last Approved – 30th September 2025

Introduction

This privacy and data protection policy describes how Mammalian Limited collects and processes personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (‘Data Protection Legislation’). Under Data Protection Legislation, Mammalian Limited is designated as a ‘Data Controller’ with a responsibility for the control and processing of personal data. Mammalian Limited is registered with the Information Commissioner’s Office (ICO) (Registration Number C1789582).

This notice is intended to provide information about how Mammalian Limited and its subsidiaries will use and hold (“process”) the personal data of its clients, suppliers and other interested parties. This information is provided in accordance with the rights of individuals under Data Protection Law to understand how their data is used. This Privacy Notice applies alongside any other information that Mammalian Limited may provide about a particular use of personal data, for example when collecting data via an online or paper form.

Responsibility for Data Protection

All individuals have a responsibility towards the protection of their own data and that of others. Mammalian Limited’s Managing Director is the Privacy and Compliance Officer for the group and has overall responsibility for the execution of data control and the delivery and maintenance of data protection and GDPR compliance, including awareness/training, periodic data processing audits, access and retention checks, and the handling of subject access requests and personal data breaches.
Privacy and Compliance enquiries should be made to: ma*****@**********co.uk.

Why We Process Personal Data

Mammalian Limited has identified a ‘legitimate interest’ legal basis for the processing of personal data necessary for the administration and safety of its activities, and the retention of payment records including bank details and home addresses information in relation to business services. In addition, Mammalian Limited may need to process special category personal data (e.g. concerning health information) in accordance with the rights or duties imposed on it by statutory guidance or law, or from time to time by explicit consent where required. GDPR places particular emphasis on protecting the personal data of children. Any required consent will be obtained in accordance with ICO GDPR guidance on age and data protection procedures.

How We Collect Personal Data

Generally, Mammalian LImited will receive personal data from the individual directly. This may be via a form, or simply in the ordinary course of interaction or communication. Occasionally, Mammalian Limited will receive personal data collected by a trusted third party. This data will be treated in the same way primary source data would be received.

Access to Personal Data

Personal data collected by Mammalian Limited will remain within the company and will only be accessed and processed by authorised personnel in accordance with legitimate business activities. No personal data will be forwarded/exported beyond those processors without the specific consent of the relevant individual.

How Long We Keep Personal Data

Mammalian Limited will retain personal data obtained through legitimate business activities for a minimum of 6 years from the date of the termination of the business relationship.

The Rights of Data Subjects

A data subject has the following rights:

● to obtain access to, and copies of, the personal data that we hold about you;

● to require us to correct the personal data we hold about you if it is incorrect;

● to require us (in certain circumstances) to erase your personal data;

● to request that we restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);

● to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller;

● to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights.

Please note that the above rights are not absolute, and the company may be entitled to refuse requests where exceptions apply. Mammalian Limited will endeavour to respond to any such requests as soon as is reasonably practicable and in any event within statutory time-limits (which is generally one month, but actually fulfilling more complex or multiple requests, e.g. those involving third party information, may take longer).

Any individual wishing to access or amend their personal data, or wishing it to be transferred to another person or organisation, or who has some other objection to how their personal data is used, should put their request to the Company’s Privacy and Compliance Officer in writing at ma*****@**********co.uk.

Cookies

Your Internet browser has the in-built facility for storing small files- “cookies” – that hold information which allows a website to recognise your account. Our website takes advantage of this facility to enhance your experience. You have the ability to prevent your computer from accepting cookies but, if you do, certain functionality on the website may be impaired.

Changes to this Policy

Any changes to our Privacy Policy will be placed here and will supersede this version of our Policy. We will take reasonable steps to draw your attention to any changes in our Policy. However, to be on the safe side, we suggest that you read this document each time you use the website to ensure that it still meets with your approval.