Privacy Policy

Last updated: 2 November 2026
1. Who we are
This website is operated by Marcelino Ltd trading as MCA Managed IT (CRO no. 306244; VAT no. IE6326244A). We are the data controller of the personal data described in this policy.

• Registered office and address: Unit 4, Rossmore Factory, Dublin Road, Monaghan, Co. Monaghan, H18 X752

• Email: solutions@mcait.ie

• Phone: 047 84664

We have not appointed a Data Protection Officer because the law does not require us to. Please send any privacy questions to the email address above.
2. The personal data we collect

• Contact and enquiry forms (e.g. "Contact", "Get Support", "Book a Consultation"): your name, email address, phone number, company name and whatever you write in the message.

• Email and phone: your contact details and anything you tell us when you email or call.

• Customers: contact details for named people at your organisation, and support-ticket and service records. Billing details are covered by your service agreement.

• Website use: IP address, device and browser information, pages visited and cookie identifiers. See section 7.

We do not knowingly collect special category data through this website. Please don't include sensitive information in a form.
3. Why we use it and our lawful basis

• Replying to your enquiry and preparing a proposal or quote — Steps taken at your request before entering into a contract (6(1)(b)), or our legitimate interest in responding to business enquiries (6(1)(f))

• Providing managed IT services and support to customers — Performance of a contract (6(1)(b))

• Invoicing, accounting and tax records — Legal obligation (6(1)(c))

• Running, securing and improving the website — Legitimate interests (6(1)(f))

• Analytics and any marketing cookies — Consent (6(1)(a)), given through the cookie banner and withdrawable at any time

• Sending occasional service or marketing emails to business contacts — Legitimate interests or consent, as the ePrivacy Regulations 2011 (S.I. 336/2011) require; you can opt out at any time

4. How long we keep it

• Enquiries that don't lead to work: 12 months after our last contact.

• Customer records: for the length of the contract plus 6 years, to cover limitation periods and Revenue requirements.

• Analytics data: for the retention period set in Wix Analytics.

5. Who we share it with (processors)
We use the following service providers, who process data on our behalf under contract:

• Wix.com Ltd hosts the website, its forms and its site analytics.

• Email provider: Microsoft 365, provided by Microsoft Ireland Operations Ltd as our processor. Data is processed in the EU under Microsoft's EU Data Boundary where applicable; any transfer outside the EEA is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

We do not sell personal data. We may also disclose data where the law requires it, or to professional advisers such as accountants and solicitors.
6. International transfers
Some of our providers, including Wix, may process data outside the European Economic Area, for example in Israel or the United States. Where they do, we rely on an EU adequacy decision (Israel; the EU–US Data Privacy Framework for certified US companies) or on Standard Contractual Clauses approved by the European Commission.
7. Cookies
The site uses strictly necessary cookies that Wix needs for the site to work, plus analytics cookies that only load with your consent. You can accept or refuse non-essential cookies in the cookie banner, and change your choice at any time through the "Cookie settings" link in the footer. Wix's cookie list: https://support.wix.com/en/article/cookies-and-your-wix-site
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing (including direct marketing), to data portability, and to withdraw consent at any time. To exercise any of these, email solutions@mcait.ie. We will reply within one month. We may need to confirm your identity first.
9. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Data Protection Commission: www.dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.
10. Security
We use appropriate technical and organisational measures to protect personal data.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version.
Cyber Risk Check (additions to the sections above)
Section 2 addition: Cyber Risk Check: if you use our online cyber risk self-assessment, we collect your answers, your score and the risks it identifies. If you ask for the full report, we also collect your name, email address and company name. If one of our engineers runs the check with you on site, we also record the engineer's notes and what they observed; these notes are for our internal use and are not included in your report. During on-site checks, our engineers don't record passwords, network details, system names or other security-sensitive information in their notes.
Section 3 additions (purpose / lawful basis): Sending you your Cyber Risk Check report, sending a copy to our team, and following up about it: Steps taken at your request before entering into a contract (6(1)(b)), or our legitimate interest in responding to business enquiries (6(1)(f)). Sending cyber security tips and news, only if you tick the separate marketing box: Consent (6(1)(a)); you can withdraw it at any time using the unsubscribe link or by emailing us.
Your Cyber Risk Check answers are treated as confidential. We use them only to prepare your report and to talk it through with you. We don't sell or share them, and we don't use them for marketing unless you give separate consent.
Section 4 addition: Cyber Risk Check: if you only view your score and don't ask for the report, nothing is submitted or stored. If you ask for the report, your answers and details are deleted from our form provider (Jotform) 30 days after you submit them. The copy of your report emailed to our team is kept as an enquiry under the enquiry period above, unless you become a customer.
Section 5 addition: Jotform Inc. provides the Cyber Risk Check form, creates the PDF report and sends it by email. Jotform stores the data in the United States and processes it on our behalf under a Data Processing Addendum. When you request your report, a copy is also sent to our team at solutions@mcait.ie, held in Microsoft 365 (above).
Section 6 addition (after the first sentence): Cyber Risk Check data is stored by Jotform Inc. in the United States. Jotform Inc. is certified under the EU–US Data Privacy Framework, so we rely on the European Commission's adequacy decision for that framework (Article 45 GDPR).