MCEL LEGAL

Privacy Policy

This policy explains what information MCEL collects, why it is used, how it may be shared, how long it may be kept, and what rights individuals have under applicable data protection law.

Effective date: 2 August 2026

Jump to section

1. Introduction

MCEL is a digital brand of Mega Commercial Enterprises Limited, an Irish-registered company, incorporated under Company Number 726999, with its registered office at 77 Camden Street Lower, Dublin, D02 XE80, Ireland (“MCEL”, “we”, “our” or “us”). Mega Commercial Enterprises Limited is the data controller for personal data processed through this website, and is committed to protecting personal data in accordance with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Irish Data Protection Act 2018, and the ePrivacy Regulations (S.I. No. 336/2011).

This Privacy Policy explains how we collect, use, process, store, disclose and protect personal information when you visit our website, communicate with us, submit enquiries, request business reviews, engage our services, or otherwise interact with MCEL. By accessing or using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are (Data Controller)

For personal data processed through this website, our enquiry forms, our business communications and our direct service enquiries, MCEL is generally the data controller. You can reach us at:

Brand: MCEL (mcel.ai) — a digital brand of Mega Commercial Enterprises Limited

Company: Mega Commercial Enterprises Limited

Registration: Registered in Ireland · Company Number 726999

Registered address: 77 Camden Street Lower, Dublin, D02 XE80, Ireland

Email: [email protected]

Phone: +353 87 148 3870

Website: https://www.mcel.ai/

For any question or request about your personal data, contact us at [email protected].

3. Scope of This Policy

This Privacy Policy applies to personal data processed in connection with:

this website and related pages;
contact forms and enquiry forms;
free business reviews, audits, consultations and discovery requests;
client communications by email, phone, WhatsApp and related channels;
our business services and consulting engagements;
our AI systems, automation, workflow and website services;
website analytics and operational systems; and
marketing communications where permitted by law.

It does not apply to third-party websites, platforms, AI providers, hosting providers, analytics providers, payment processors or other external services linked from our site or used independently by you. Those third parties are responsible for their own privacy practices.

4. Business Clients and Professional Users

MCEL services are primarily intended for business, professional, commercial and organisational users unless otherwise agreed in writing. Where you contact MCEL on behalf of a business, we may process your business contact details, role, professional information and communications in order to respond to your enquiry, assess suitability, prepare proposals, manage the relationship and provide requested services.

If you provide personal data relating to your employees, contractors, customers, leads or suppliers, you are responsible for ensuring you have the lawful right and appropriate authority to share that data with us.

5. The Personal Data We Collect

Information you provide directly

name; email address; telephone number;
company name, job title or professional role, website and industry;
business type or service interest, enquiry details and consultation requests;
messages submitted through forms, email, phone, WhatsApp or other channels;
communication preferences and information relating to requested services.

Technical and usage information

IP address, browser type and version, device information and operating system;
pages visited, referral sources, interaction and session information;
cookie identifiers, diagnostic logs and security logs.

Marketing and communication data

email and communication preferences; marketing engagement;
newsletter or update subscriptions where enabled; campaign response activity; opt-in and opt-out preferences.

Information from third parties

We may receive limited information from third-party platforms, service providers, analytics systems, communication providers or public business sources where lawful and relevant to our operations or services.

6. AI Systems, Automation and Client-Project Data

Because MCEL delivers AI-related services — including the AI Receptionist, Lead Capture & Customer Response, Workflow Automation, AI Employee Assistant, AI Content System, our AI Strategy services (readiness, workshop, roadmap, governance and team training), AI Operations, Managed AI Operations, and Websites & Web Apps — we may process information needed to assess, configure, deliver, test, support or improve those services. Depending on the project this may include:

business process information and workflow documentation;
website content and service descriptions;
contact form fields, lead or enquiry information;
call-handling requirements and AI receptionist scripts;
knowledge-base content and CRM field structures;
automation rules, integration requirements and testing information.

We do not intentionally request special-category (sensitive) personal data unless it is necessary for a clearly defined service and appropriate safeguards, instructions and a lawful basis are in place. AI systems and automation may involve third-party platforms whose own terms, privacy policies, data-processing terms and security practices also apply.

7. Free Reviews, Audits and Lead Capture

MCEL offers free business reviews, automation audits, enquiry audits, AI readiness reviews, consultations and discovery calls. When you request one, you may provide your name, email, phone, company, website, business type, service interest, current challenge and message details. We use this to respond, assess your needs, prepare recommendations and follow up where permitted by law. Requesting a review does not require you to purchase; any paid service is subject to a separate written proposal, invoice, scope of work or agreement.

Our enquiry form is protected by Cloudflare Turnstile, a spam and abuse prevention service provided by Cloudflare, Inc. When you use the form, Turnstile receives your IP address and technical signals about your browser and device in order to confirm that the form is being completed by a person rather than an automated script. Cloudflare acts as our processor for this purpose and does not use the data to build a profile of you or to serve advertising. Our lawful basis is legitimate interests, namely keeping our contact channels usable and protecting our systems from automated abuse. Where this involves transferring data outside the European Economic Area, the safeguards described in the International Data Transfers section apply.

8. Our Legal Bases for Processing

Under the GDPR we rely on one or more of the following lawful bases:

Consent — where you have given permission for a specific purpose, such as certain marketing or non-essential cookies;
Performance of a contract — where processing is necessary to provide requested services or to take steps before entering a contract;
Legitimate interests — where processing is necessary for reasonable business purposes and your rights do not override those interests;
Legal obligation — where processing is required by law, tax, accounting or regulatory rules;
Legal claims — where processing is necessary to establish, exercise or defend legal claims.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

9. How We Use Personal Data

We may use personal data to: respond to enquiries and communications; provide consulting, automation, AI, website and business services; assess suitability and requirements; manage client relationships; schedule calls and meetings; prepare proposals, scopes of work and invoices; configure and support AI systems and automations; improve website functionality; carry out website analytics where permitted; monitor security and prevent fraud; run business administration; send marketing where permitted by law; keep records; comply with legal obligations; and enforce our rights and terms.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to support functionality, security, preferences, analytics and communication features. Where legally required, non-essential cookies are only set after you consent through our cookie consent tool. Full details are in our Cookie Policy.

11. Phone, WhatsApp, AI Receptionist and Communications

When you contact us by phone, email, WhatsApp, contact form, booking link, AI receptionist or another channel, we process the contact and message information you provide to respond and manage related communications. We do not sell phone numbers, WhatsApp details or messaging data to third parties for their own marketing. Where calls are handled by an AI receptionist or recorded for quality, training, security or operational purposes, notice will be given where required by law. Please do not submit sensitive, confidential or unnecessary personal data through general enquiry channels unless specifically requested.

12. Marketing Communications

Where permitted — based on consent, legitimate interests or an existing business relationship — we may send business updates, service information, insights or promotional communications about MCEL services. You can unsubscribe at any time using the link in the communication or by emailing [email protected]. Operational, transactional, legal, security and service-related messages may still be sent where necessary.

13. Sharing of Personal Data

We do not sell personal data. We may share it with trusted providers where necessary for operations, service delivery, website functionality, security, communications, analytics, compliance or legal purposes, including:

website hosting and cloud infrastructure providers;
analytics providers where enabled;
email, contact-form, enquiry-management and anti-spam providers;
AI, automation, voice, CRM, workflow and integration providers used to deliver a service;
payment processors where applicable and marketing-service providers where permitted;
technical support providers and professional, legal, accounting or compliance advisers;
public authorities where legally required.

We may also disclose information where required by law, court order, regulatory obligation, or to protect legal rights, property, security or operations.

14. Controller and Processor Roles

MCEL is generally a data controller for personal data collected through this website, direct enquiries, business communications, marketing and our own operations. In some client projects — for example customer enquiry data, CRM data, call-handling information, lead-capture data or workflow data — MCEL processes personal data on behalf of a client. In those cases the client is usually the controller and MCEL acts as a processor under a written data processing agreement that defines the subject matter, duration, nature, purpose, categories of data, security measures, sub-processors and the client's instructions.

15. International Data Transfers

Some providers or platforms we use may process data outside the European Economic Area (EEA). Where international transfers occur, we rely on appropriate safeguards required by law, such as European Commission adequacy decisions, Standard Contractual Clauses, provider transfer arrangements and additional security measures.

16. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected. As a guide:

enquiry and lead data is generally kept while we handle your enquiry and for a reasonable follow-up period afterwards;
client and project records are kept for the duration of the engagement and then as required by law — for example, tax and accounting records are generally retained for six years under Irish law;
marketing data is kept until you opt out or it is no longer needed.

When personal data is no longer required we delete, anonymise or securely archive it, retaining it only where necessary for legal, accounting, dispute, compliance or security reasons.

17. Data Security

We use reasonable technical and organisational measures to protect personal data from unauthorised access, misuse, disclosure, alteration, loss or destruction. These may include SSL/TLS encryption, secure hosting, access controls and authentication, security monitoring, firewall and malware protection, software updates and limited internal access. No online system, transmission method or storage platform can be guaranteed to be completely secure.

18. Personal Data Breaches

We maintain procedures to detect, investigate and respond to personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission without undue delay and, where required, inform affected individuals, in line with the GDPR.

19. Your Rights Under GDPR

Subject to applicable law, you may have the right to: access your personal data; request correction of inaccurate data; request erasure; restrict processing; object to processing; withdraw consent where processing is based on consent; request data portability; and lodge a complaint with a supervisory authority.

To exercise your rights, email [email protected]. We will respond within one month, though this may be extended for complex requests, and we may ask you to verify your identity first. Some rights are subject to legal limitations and exemptions.

20. Automated Decision-Making

MCEL does not use personal data collected through this website to make solely automated decisions that produce legal or similarly significant effects on individuals. AI systems and automation used in client projects are intended to support business processes and should be used with appropriate human oversight, review and escalation.

21. Third-Party Services and External Links

Our website may link to external websites, platforms, embedded content, social media or communication tools. We are not responsible for their privacy or cookie practices, content or security. Please review the policies of any third-party service independently.

22. Children and Minors

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children, and if we become aware that we have, we will take reasonable steps to delete it.

23. Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, financing transaction or change of control, personal data may be transferred as part of the transaction, subject to applicable legal protections.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, regulatory, service, technology or security changes. The latest version will always be published on this page with an updated effective date.

25. Supervisory Authority

If you believe your personal data has been handled unlawfully, you may lodge a complaint with a supervisory authority. As MCEL is established in Ireland, the relevant authority is the Data Protection Commission:

Data Protection Commission (DPC)
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
Phone: +353 (0)1 765 0100 / 1800 437 737

You may also have the right to complain to the supervisory authority in your own country of residence or work.

26. How to Contact Us

For any question about this Privacy Policy or our data practices, contact: