Last Updated: July 2026
MC Investigations ("we," "our," or "us") is an independent private investigation and process serving agency operating in Scotland. We are committed to protecting the privacy and security of personal data in strict accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
For the purposes of data protection legislation, MC Investigations acts as the Data Controller for the information we collect and process.
Due to the nature of professional investigative services, we process data relating to two distinct categories of individuals: Clients and Subjects of Investigation.
A. Client Data (Information you provide to us) When you instruct us, we collect information necessary to fulfil our contractual obligations, including:
Identity Data: Names, job titles, and corporate entity details.
Contact Data: Billing addresses, email addresses, and telephone numbers.
Financial Data: Payment records and invoicing details.
B. Subject Data (Information collected during investigations) To execute process serving, tracing, and observation mandates, we may collect personal data regarding the subjects of our investigations. This data is collected strictly on a necessity basis and may include:
Names, aliases, and dates of birth.
Current and historical residential or business addresses.
Vehicle registrations and visual identifiers (e.g., photographs for identification purposes).
Publicly available footprint data (Open-Source Intelligence / OSINT).
We will only process personal data when the law allows us to. Under Article 6 of the UK GDPR, we rely on the following lawful bases:
Contractual Necessity: Processing client data to provide quotes, establish terms of service, and deliver our investigative services.
Legal Obligation: Processing data to comply with statutory requirements, such as maintaining tax records or serving court-mandated legal documents.
Legitimate Interests: Processing subject data for the purpose of locating absconders, debt recovery, asset protection, and verifying material facts. We only rely on this basis when our legitimate interests (or those of our clients) are not overridden by the subject’s fundamental rights and freedoms.
Direct Interactions: Information provided directly by clients via email, phone, or our Master Intake Form.
Third-Party & Public Sources: We may obtain subject data from our clients, publicly available registers, open-source databases, and on-the-ground field observations.
We do not sell personal data. We only disclose information where absolutely necessary to fulfil our operational objectives or legal obligations. We may share data with:
The Instructing Client: Providing evidential updates, reports, and Affidavits of Service.
Legal & Judicial Authorities: Submitting sworn Affidavits or Certificates of Service to courts or independent solicitors.
Trusted Service Providers: Third-party IT, secure cloud storage, and accounting software providers who operate under strict processing agreements.
We have implemented appropriate technical and organisational security measures to prevent personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. To ensure full compliance with data minimisation principles, we adhere to the following standard retention schedule:
Raw Investigation Data (e.g., field notes, raw footage, photographs): Securely deleted or destroyed within 30 to 90 days following the delivery of the final report and settlement of the associated invoice.
Final Evidential Reports & Affidavits of Service: Retained for 6 to 12 months to assist the instructing client with any immediate follow-up queries or court requirements, after which they are securely destroyed.
Administrative & Financial Records (e.g., invoices, billing details): Retained for up to 6 years to comply with statutory HMRC accounting and tax obligations.
Once these respective retention periods expire, all associated digital and physical records are permanently and securely deleted or shredded.
Under the UK GDPR, individuals possess specific rights regarding their personal data, including the right to:
Request access to your personal data.
Request correction of incomplete or inaccurate data.
Request erasure of your personal data.
Object to processing or request a restriction of processing.
Note: Due to the nature of private investigations and legal proceedings, certain exemptions under the Data Protection Act 2018 may occasionally apply to subject data, which may legally restrict our ability to comply with certain erasure or access requests.
If you have any questions regarding this privacy policy or wish to exercise your legal rights, please contact us at:
Email: info@mc-investigations.co.uk
Address: Office 1712, 3 Fitzroy Place, 1/1 Sauchiehall Street, Finnieston, Glasgow Central, G3 7RH
You also maintain the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
9. Cookie Policy
This website uses strictly necessary cookies to ensure the site functions securely and properly. We do not currently use non-essential tracking or marketing cookies. If this changes and we implement analytics or tracking tools in the future, we will ask for your explicit consent via a cookie banner before any non-essential cookies are placed on your device.