1. Introduction
Murzo Group is committed to protecting the privacy, confidentiality, and security of personal data entrusted to us.
This Privacy Policy explains how Murzo Group collects, uses, stores, shares, and protects personal information across all business operations, platforms, and divisions.
Murzo Group operates internationally and recognises its responsibility to comply with applicable data protection laws, including the UK GDPR, EU GDPR, and other relevant global privacy frameworks.
This policy applies to all visitors, clients, partners, suppliers, and users of Murzo Group websites, platforms, systems, and services.
2. Who We Are
Murzo Group is a UK-registered company operating multiple business divisions under a single legal entity.
For the purposes of data protection law, Murzo Group is the Data Controller responsible for determining how and why personal data is processed.
Where Murzo Group engages third parties to process data on its behalf, those parties act as Data Processors under contractual and legal obligations.
3. Scope of This Policy
This Privacy Policy applies to:
- All Murzo Group websites and digital platforms
- Client portals, project systems, and collaboration tools
- Business communications (email, messaging, video conferencing)
- Recruitment, procurement, and supplier engagement
- Events, research, and innovation activities
- Any personal data processed in the course of Murzo Group’s operations
This policy applies regardless of the country from which the website or services are accessed.
4. Legal Basis for Processing
Murzo Group processes personal data only where there is a lawful basis, including:
- Contractual necessity – to deliver services or fulfil agreements
- Legal obligation – compliance with UK or international law
- Legitimate interests – business operations, security, fraud prevention, service improvement
- Consent – where explicitly provided (e.g. newsletters, marketing)
- Public interest – where applicable to research, security, or regulatory matters
Where consent is relied upon, it may be withdrawn at any time.
5. Types of Data We Collect
Murzo Group may collect and process the following categories of personal data:
5.1 Identity & Contact Data
- Name, title, organisation
- Email address, phone number
- Business address
5.2 Technical & Usage Data
- IP address
- Browser type, operating system
- Device identifiers
- Website usage analytics
5.3 Client & Project Data
- Business communications
- Project notes, files, and deliverables
- Platform access records
5.4 Recruitment & Professional Data
- CVs, qualifications, experience
- References and verification information
Murzo Group does not intentionally collect special category (sensitive) personal data unless explicitly required by law and protected by additional safeguards.
6. How We Use Personal Data
Murzo Group uses personal data to:
- Deliver and manage services and projects
- Communicate with clients, partners, and suppliers
- Operate secure platforms and systems
- Maintain business records and compliance
- Improve services, security, and user experience
- Prevent fraud, misuse, or unauthorised access
- Meet legal, regulatory, and contractual obligations
Murzo Group does not sell personal data and does not use data for profiling or automated decision-making that produces legal or similarly significant effects.
7. Data Sharing & Disclosure
Murzo Group may share personal data only where necessary and lawful, including with:
- Trusted service providers under strict contractual controls
- Professional advisers (legal, financial, compliance)
- Regulators, courts, or law enforcement where legally required
- Security and infrastructure partners supporting Murzo Group systems
All third parties are required to uphold confidentiality, security, and data protection standards equivalent to Murzo Group’s own.
Murzo Group does not permit unauthorised third-party access to personal data.
8. International Data Transfers
Murzo Group operates internationally. Where personal data is transferred outside the UK:
- Transfers are protected by adequacy decisions, standard contractual clauses (SCCs), or equivalent safeguards
- Data is protected against unauthorised access, surveillance, or misuse
- Murzo Group maintains oversight of all international data flows
Users accessing Murzo Group services from other jurisdictions are responsible for compliance with their local data protection laws in addition to this policy.
9. Data Security
Murzo Group implements technical, organisational, and physical security measures to protect personal data, including:
- Encryption in transit and at rest
- Access controls and authentication systems
- Network monitoring and intrusion detection
- Secure data centres and controlled environments
- Regular security audits and risk assessments
Despite best efforts, no system can be guaranteed 100% secure. Murzo Group limits liability to the maximum extent permitted by law.
10. Data Retention
Murzo Group retains personal data only for as long as necessary to fulfil its purposes, including:
- Contractual and project requirements
- Legal and regulatory obligations
- Security and audit requirements
Where retention periods expire, data is securely deleted, anonymised, or archived in accordance with Murzo Group’s internal data governance policies.
11. Your Rights
Under UK GDPR and related laws, individuals have the right to:
- Access their personal data
- Request correction or completion
- Request deletion (subject to legal limits)
- Restrict or object to processing
- Data portability (where applicable)
- Withdraw consent at any time
Requests should be made in writing to admin@murzo.co.uk.
Murzo Group may require identity verification before responding.
12. Children’s Data
Murzo Group services are not directed at children.
Murzo Group does not knowingly collect personal data from individuals under the age of 16.
13. Changes to This Policy
Murzo Group reserves the right to amend this Privacy Policy at any time to reflect:
- Legal or regulatory changes
- Operational or technological developments
- Security or risk considerations
Updated versions will be published on Murzo Group websites. Continued use of services constitutes acceptance of the revised policy.
