Privacy policy

This policy explains how MMR Consultant handles your personal data, in line with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Spanish Organic Law 3/2018 on data protection (LOPDGDD).

Who is responsible for your data

Controller: DATA ONLINE CONSULTING MARBELLA, S.L., trading as MMR Consultant
NIF: B01842152
Address: C/ Pedraza, 12, 1ºB, 29601 Marbella (Málaga), Spain
Email: info@mmrconsultant.co.uk
Phone: +34 951 409 175

What this website collects

This website has no contact form, no user accounts, no newsletter, no comments and no analytics. You can read it without giving us any personal data.

When you visit, the company that hosts the website processes the technical data any web server needs to deliver a page and protect it from attacks, such as your IP address and browser type. We do not use this data to identify you.

When you contact us

If you write to us by email or call us, we process the data you give us: usually your name, contact details and what you tell us about your situation, which may include financial or tax information. We use it to:

Answer your enquiry. Legal basis: steps you ask us to take before a possible engagement (GDPR, article 6.1.b) or, for general questions, our legitimate interest in replying (article 6.1.f).
Provide our services if you become a client. Legal basis: the performance of the engagement (article 6.1.b). The terms are set out in your engagement letter.
Meet our legal obligations as accountants and tax advisors, including accounting, tax and anti-money-laundering rules (article 6.1.c). Tax advisors and external accountants are obliged entities under Spanish anti-money-laundering law (Law 10/2010, article 2), which requires us to identify our clients.

We do not use your data for automated decisions or profiling, and we do not send marketing without your consent.

How long we keep it

Enquiries that do not lead to an engagement: for as long as we need to answer you; afterwards we keep them blocked only for the period in which a claim could arise, and then delete them.
Client records: for as long as the engagement lasts and afterwards for the periods the law requires, for example six years for accounting books and supporting documents (Commercial Code, article 30) and ten years for anti-money-laundering documentation (Law 10/2010, article 25).

Who receives your data

We do not sell your data. We share it only when needed:

With public authorities, such as the Spanish tax agency or Social Security, when we file or act on your behalf or when the law requires it.
With service providers that process data for us: our email service provider and the provider that hosts and delivers this website, Cloudflare, Inc. (web hosting and content delivery network). In its published Data Processing Addendum (version 6.4, in force since 3 April 2026), Cloudflare relies on the European Commission’s standard contractual clauses for transfers of personal data outside the European Economic Area, and Cloudflare states that it is certified under the EU-U.S. Data Privacy Framework.

Where a provider processes data outside the European Economic Area, we rely on the safeguards the GDPR allows, such as an adequacy decision or standard contractual clauses.

Your rights

You can ask us at any time to access, rectify or erase your data, to restrict or object to its processing, or to receive it in a portable format (GDPR, articles 15 to 22). You can exercise these rights yourself or through a representative (LOPDGDD, article 12). Write to info@mmrconsultant.co.uk or to our postal address, telling us which right you want to exercise. Where processing is based on your consent, you can withdraw it at any time.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD, www.aepd.es) or to the supervisory authority of the country where you live or work (GDPR, article 77).

Changes to this policy

If we add a contact form, analytics or any other processing, we will update this policy before it starts.

Last updated: 21 October 2026