Privacy Policy
Last updated 4 October 2026.
The short version
We use your data to make and deliver customer stories, run our business and tell relevant businesses about our work. We never sell it. Interview footage goes to the client who commissioned it. Nothing is posted under your name unless you have approved it. Ask us any time what we hold about you, or to delete it.
1. Who we are
MSP Testimonials is a trading name of Channel Steel Limited, a company registered in England and Wales (company number 16719457). Our registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
We decide how and why your personal data is used, which makes us the "controller" under UK data protection law (the UK GDPR and the Data Protection Act 2018). We are registered with the Information Commissioner's Office (ICO), registration number ZC000143.
If you have a question about your data, or want to use any of the rights in section 11, email james@msptestimonials.com.
2. Who this covers
We make video customer stories for managed service providers (MSPs) and the companies that sell through them. This policy covers:
- people who visit our website
- clients, and the people at clients we work with
- interview guests: the customers our clients nominate, whom we interview on camera
- people we contact about our services, mostly owners and leaders at MSPs and IT vendors
- newsletter and blog subscribers
- partners and affiliates who refer business to us
- freelancers who work with us, such as video editors
- people who use Social Studio, our tool for preparing LinkedIn posts
3. What we collect, and why
| Who | What we hold | Why we use it | Our lawful basis |
|---|---|---|---|
| Website visitors | Pages viewed, rough country (from your IP address), device and browser type | To understand which pages get used and to show prices in your currency | Legitimate interests |
| Clients | Names, work email addresses, job titles, company details, what you ordered, payment records, our emails and call notes | To deliver what you bought, run your account and portal login, invoice you and keep proper accounts | Contract; legal obligation (accounting) |
| Interview guests | Your name, job title and company, the contact details your client gave us, the recording of your interview (video and voice), its transcript, and any photos you send us | To produce the customer story you agreed to take part in, and the written and video pieces made from it | Consent to the interview and how it is used; contract with the client who commissioned it |
| People we contact about our services | Your name, job title, company, work email address and public LinkedIn profile, from public sources and B2B data providers. Our messages to you, and whether you opened a page we made for you | To introduce our work to businesses it is relevant to | Legitimate interests (B2B marketing). You can opt out at any time. |
| Subscribers | Your email address and when you signed up | To send you what you signed up for | Consent. Every email has an unsubscribe link. |
| Partners and affiliates | Contact details, referrals and payment details | To track referrals and pay fees | Contract |
| Freelancers | Contact details, the work you deliver and payment details | To brief you, review work and pay you | Contract; legal obligation |
| Social Studio users | Your name, how you would like posts sent to you, posts you have written that you choose to give us, drafts we prepare for you, and whether you posted them. Once direct posting is switched on, also your LinkedIn member ID and a LinkedIn access token. | To write posts in your voice and get them to you at the time you chose | Consent; contract with your employer |
We do not collect special category data (health, ethnicity, beliefs and so on) on purpose. If something like that comes up in an interview, it is only used if you and the client agree to it being in the finished story.
4. Interview recordings
The interview exists to make a customer story, and you agree to take part before we record. The client who commissioned the story receives the finished film, the clips and the written pieces made from it, and decides where to publish them. You are shown the finished pieces before they go out, and any changes you ask for are agreed with the client.
Quotes are always your own words. We cut and shorten what you said, but we never rewrite it and present it as yours.
We only show a finished story as an example of our own work, for instance on our website or to a prospective client, once the client who commissioned it has agreed.
We keep the raw recording and transcript for three years after the interview, so that further pieces can be made from it. Once the client has published, you can ask us to delete the raw recording and transcript sooner. That does not remove pieces the client has already published, which they control.
5. Pages we make for one person
Sometimes we make a page addressed to one named person, at msptestimonials.com/for/... . When that person opens it, we record that it was opened, when, roughly which country it was opened from, and what kind of device was used. We also record whether a video was played or a button was pressed. We use this to know whether our message landed and when to follow up. Visits by link-preview services and by our own team are not counted. These pages are hidden from search engines.
6. Social Studio and LinkedIn
If you use Social Studio, you can give us your own LinkedIn posts, either pasted in or as the export file LinkedIn lets you download. We use them only to learn how you write, and you can ask us to delete them. We never collect anything from LinkedIn on our own.
Before anything goes out, you can read and change every post prepared for you. Nothing is posted under your name unless you have approved it.
When direct posting is switched on, you will connect your LinkedIn account yourself. We will then store only what is needed to publish: your LinkedIn member ID, an access token, the posts and their scheduled times, and the ID LinkedIn gives each published post. We do not collect other people's profiles or posts through LinkedIn. If you disconnect, the access token is deleted straight away.
7. Cookies
We only set cookies that the site needs to work:
| Cookie | What it is for |
|---|---|
| Login cookies (client and editor portals) | Keep you signed in |
| blog_preview | Lets our team preview unpublished blog posts |
| for_ours | Marks our own team's browsers, so our visits are not counted on the pages in section 5 |
Our website analytics (Vercel Web Analytics and Speed Insights) do not use cookies and do not track you across other sites. We do not use advertising cookies.
8. Who we share it with
We never sell personal data. We share it only:
- with the client who commissioned your interview, as described in section 4
- with freelance editors working on a project, who get the footage and our notes for that project only
- with the services we use to run the business, which only handle data on our instructions:
| Service | What it does for us |
|---|---|
| Supabase | Our database and file storage (hosted in Ireland) |
| Vercel | Website hosting and cookie-free analytics |
| Google Workspace | Email, documents, file storage and meeting notes |
| Riverside | Recording interviews |
| Stripe | Taking payments |
| Xero | Accounting |
| Wise | Paying partners and freelancers |
| Resend | Sending email |
| Calendly | Booking calls and interviews |
| Slack | Internal team messages |
| Anthropic | AI that helps us draft from transcripts and notes. Under its commercial terms, it does not train its models on our data. |
| Deepgram | Live transcription during some interviews |
| Firecrawl | Reading public web pages, such as a company's website |
| Apollo | Business contact data for our sales outreach |
| Publishing posts you have approved, once you have connected your account |
We will also disclose data if the law requires it.
9. Data stored outside the UK
Our database is in the EU (Ireland), which the UK treats as giving adequate protection. Some of the services above are based in the USA. Where data goes there, we rely on the safeguards UK law requires, such as the UK Extension to the EU-US Data Privacy Framework or the UK's International Data Transfer Addendum to standard contractual clauses.
10. How long we keep it
| Data | How long |
|---|---|
| Client, invoice and payment records | 6 years after the end of the financial year they relate to (required by law for company accounts) |
| Finished customer stories | While we work with the client, and for as long as any agreement to show it as an example of our work stands |
| Raw interview recordings and transcripts | 3 years after the interview, or sooner if you ask (see section 4) |
| Sales contact records | 2 years after our last contact, or straight away if you ask us to stop |
| Page-open records (section 5) | 2 years, in line with sales contact records |
| Subscriber emails | Until you unsubscribe |
| LinkedIn access tokens | Until you disconnect |
11. Your rights
Under UK law you can:
- ask for a copy of the data we hold about you
- ask us to correct it
- ask us to delete it
- object to how we use it, including stopping marketing at any time
- ask us to restrict how we use it
- ask for your data in a portable format
- withdraw your consent where that is our basis, without affecting anything we did before
Email james@msptestimonials.com. We will reply within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.
12. Changes
If this policy changes, we will update the date at the top. If a change is significant, we will tell clients and Social Studio users directly.