Who we are
Mazel Grand HMS operates in software publishing, information technology consultancy, and data processing (SIC 58290, 62020, 63110). Because our product is other people’s data, compliance is not paperwork for us — it is the core of the business.
Mazel Grand HMS is registered in England and Wales under company number 17481411, with registered office at 128 City Road, London, United Kingdom, EC1V 2NX.
Our compliance architecture
Compliance at Mazel Grand HMS is built on a layered framework: legal foundation, operational controls, and ethical standards. Each layer serves a specific purpose and is documented in separate policies that expand on the framework below.
Data protection and privacy
We handle personal and business data under UK GDPR and equivalent European standards. Because we process data on behalf of clients, we clearly distinguish between data controller (you) and data processor (us) roles.
- Data minimisation: we only collect and process the data necessary for the agreed engagement.
- Purpose limitation: your data is used solely for the scope defined in the quote.
- Data retention: all engagement data is deleted within 30 days of delivery unless you request earlier removal.
- Access control: engagement data is isolated per client and accessible only to personnel assigned to that project.
- See the Privacy Policy for detailed rights and procedures.
Security and ephemeral access
Our security model is designed around data isolation and limited-duration access. We do not retain data after engagement completion.
- Engagement-specific environments: each project works in an isolated workspace.
- Ephemeral access: access credentials are granted only for the duration of the engagement and revoked on completion.
- No permanent data storage: we do not build long-term data warehouses from client data.
- Secure communications: all client data transfers use encrypted channels.
- See the Security & Ephemeral Access Policy for technical details.
Financial integrity and client verification
We perform limited client verification to ensure we work with legitimate businesses and to support anti-money-laundering obligations where applicable.
- Basic verification: we verify company registration and contact details before engaging.
- Enhanced verification: for larger engagements, we may request additional documentation.
- Payment security: all payments are processed through secure payment infrastructure; we do not store card details.
- No offshore structures: Mazel Grand HMS operates from a single UK jurisdiction.
- See the KYC & AML Policy for verification procedures.
Ethical standards and supply chain
We hold ourselves and our suppliers to ethical standards. Because our supply chain is limited and primarily digital, our modern slavery risk exposure is low, but we still maintain a formal statement and supplier code.
- Modern Slavery Act 2015: we publish an annual statement outlining our steps to prevent slavery and human trafficking.
- Supplier Code: all software vendors, hosting providers, and professional services must meet our ethical and security standards.
- No forced labour: we do not accept services from suppliers with forced labour allegations.
- Transparency: we maintain open communication with suppliers about compliance expectations.
- See the Modern Slavery Act statement and Supplier Code for details.
Governance and accountability
Compliance is not delegated to a single role; it is embedded in how we design engagements, select tools, and communicate with clients.
- Quote-based governance: every engagement scope includes explicit data handling terms.
- Documented instructions: we process data only on your documented instructions within the agreed scope.
- Incident response: we maintain procedures for data breach notification and remediation.
- Regular review: this framework and supporting policies are reviewed annually or when regulations change.
Your role as a client
When we process data for you, you remain the controller of that data; Mazel Grand HMS processes it on your documented instructions within the agreed scope.
You are responsible for ensuring you have the right to share the data with us and for providing accurate instructions on how it should be processed.
Related policies
This overview is the entry point to our full compliance documentation. Each area is expanded in dedicated policies:
- Privacy Policy — data protection, your rights, and our obligations.
- Security & Ephemeral Access Policy — technical security controls and data isolation.
- KYC & AML Policy — client verification and financial integrity.
- Modern Slavery Act statement — ethical standards and supply chain.
- Supplier Code — requirements imposed on our vendors and partners.
- Speak-Up Policy — how to raise concerns about misconduct or non-compliance.
Contact
Compliance questions: info@mazelgrandhms.com. Typical response time: one business day.
If you have a concern about our compliance or a specific engagement, use the Speak-Up Policy to raise it confidentially.