Personal Data Protection

1. Our Position

METC treats personal data as information held in trust. Most information provided to us is submitted by individuals acting in a professional capacity on behalf of an organisation, and it is handled accordingly — for a defined business purpose, for a defined period, and with access restricted to those who require it.

2. Categories of Data Processed

• Contact data: name, position, organisation, business email, telephone number.
• Engagement data: enquiry content, assessment responses and correspondence relating to a potential or active engagement.
• Subscription data: preferences relating to METC communications.

3. Purpose Limitation

Personal data is used only for the purpose for which it was provided. Assessment responses are used to understand organisational context and prepare relevant recommendations; they are not used for unrelated marketing without consent.

4. Data Subject Rights

• Right to request access to personal data held about you.
• Right to request correction of inaccurate or incomplete data.
• Right to withdraw consent for communications at any time.
• Right to request deletion, subject to legal and contractual obligations.

5. Confidentiality in Engagements

Organisational information disclosed during advisory, solution or education engagements is treated as confidential and is used solely for the delivery of that engagement.

6. Data Used with Automation and AI

Where automation or artificial intelligence is applied within an engagement, METC works with the client to define what data may be used, where it is processed, and what human review is required before any output is relied upon.

7. Making a Request

Requests relating to personal data may be submitted through the enquiry form on the Contact page. We will respond within a reasonable period.