Cookies and Storage Technologies Policy

Version 3.1
Effective date: 21 July 2026
Next review: 21 July 2027, or earlier if our websites, technologies or legal obligations change
Responsible person: Maddie Schumann

1. Who we are and scope

Schumann Strategic, formerly known as MHMLA, is a trading style of Myriam Howard Mediation Law Assistance Ltd (company number 14203303) (“we”, “us” or “our”). We provide mediation, dispute-resolution, compliance and business-risk consultancy services.

We are registered with the Information Commissioner’s Office (ICO) under registration number ZB583865.

This Policy applies to:

www.mhmla.biz, our operating website;
www.schumannstrategic.co.uk, which currently redirects visitors to www.mhmla.biz, including technologies used during that redirection; and
www.mhmla.co.uk, while owned or operated by us.

Contact: ms@schumannstrategic.co.uk.

2. What cookies are

Cookies are small files stored on a computer, phone or other device when a website is visited. Similar technologies include pixels, tags, scripts, local storage and device-identification tools. They may operate the website, protect its security, remember choices and, where permitted, help us understand how it is used.

Our use of these technologies is governed by the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). Where personal data is involved, the UK GDPR and Data Protection Act 2018 also apply. This Policy reflects relevant changes introduced by the Data (Use and Access) Act 2025.

3. Consent and control

Continuing to browse does not constitute consent.

Strictly necessary technologies may operate without consent where they are essential to provide the website or a service requested by the visitor.

Other technologies will remain disabled until the visitor actively permits them, unless a specific PECR exception applies. Visitors may Accept all, Reject non-essential technologies or Manage preferences by category. Refusing non-essential technologies will not prevent access to the main website content.

Where we rely on PECR’s statistical-purpose or appearance-and-functionality exception, the technology will be used only for that permitted purpose. We will provide clear information and a simple, free way to object. If the conditions of an exception are not fully met, we will obtain consent before the technology operates.

Choices may be changed or withdrawn at any time through Cookie Settings or the website’s privacy control. Withdrawal does not affect processing carried out lawfully before withdrawal.

4. How we use cookies and similar technologies

Strictly necessary

These support functions such as page delivery, navigation, load balancing, secure forms, authentication, accessibility, fraud and security detection, and recording privacy choices. Blocking them through a browser may affect website operation.

Statistical and analytics

We may collect limited information such as total visits, pages viewed, general user journeys, device or browser type, page performance and approximate region to improve our websites.

We will use analytics without prior consent only where its sole purpose and configuration satisfy PECR’s statistical-purpose exception. This requires aggregate statistical results, no individual tracking or profiling, no advertising purpose, limited retention, clear information and a simple, free way to object.

Where analytics tracks visitors, links activity across services, measures advertising or conversions, creates profiles, or is used by a provider for its own purposes, it will not operate without consent.

Preferences and functionality

These may remember language, accessibility or display choices, or adapt a website to a visitor’s device. They will operate without prior consent only where a PECR exception applies and an easy objection mechanism is provided. Otherwise, consent is required.

Third-party content

Pages may contain maps, videos, booking tools, social-media features or other third-party services. Where these use non-exempt technologies, they will be blocked until the visitor consents or deliberately requests the content after receiving clear information.

Marketing and profiling

We do not currently use cookies for behavioural advertising, cross-site tracking or profiling. If this changes, we will update this Policy and obtain consent before using them.

5. Current cookie details

The Cookie Settings panel on the website forms part of this Policy and provides current site-specific details, including each technology’s:

name and provider;
purpose and category;
first-party or third-party status; and
duration or expiry.

We review this information after website scans and material changes. Google Analytics, Wix Analytics, Google Tag Manager, custom code and other non-exempt integrations must remain blocked before consent unless their exact configuration has been assessed and documented as satisfying a PECR exception.

6. Managing cookies

Visitors may manage cookies by:

choosing Accept all, Reject non-essential or Manage preferences;
reopening Cookie Settings through the website’s privacy control; or
blocking or deleting cookies through browser settings.

Deleting cookies or using another browser or device may remove a saved preference. Browser controls may not prevent every similar technology, so Cookie Settings should be used where available.

7. Third parties, transfers and retention

Some suppliers process information on our behalf. We assess relevant providers and require appropriate contractual and security protections.

Where personal data is transferred outside the United Kingdom, we will use an appropriate lawful transfer mechanism where required. Relevant providers and purposes will be identified through Cookie Settings or our Privacy Policy.

Cookie-derived personal data is kept only for as long as necessary for its stated purpose. Cookie lifetimes are shown in Cookie Settings. Consent records may be retained for an appropriate period to demonstrate compliance and respect visitors’ choices.

8. Security and incidents

We use proportionate technical and organisational measures intended to reduce the risk of unauthorised access, loss, misuse or disclosure. No website or policy can guarantee complete security.

If a personal data breach occurs, we will act promptly to contain and investigate it, assess the risk to individuals, preserve relevant records and maintain a breach log. Where required, we will notify the ICO without undue delay and, where feasible, within 72 hours of becoming aware of the breach. We will notify affected individuals without undue delay where the breach is likely to create a high risk to them.

This Policy should be read with our Privacy Policy and relevant security, retention and incident-response procedures.

9. Changes, contact and complaints

We may update this Policy when our websites, suppliers, technologies or legal obligations change. Material changes may require a fresh cookie choice.

Questions or concerns should be sent to:

Maddie Schumann
Schumann Strategic, formerly known as MHMLA
Email: ms@schumannstrategic.co.uk
ICO registration: ZB583865

Founder of MHMLA, Maddie Schumann, working at her mediation and compliance consultancy office.

We take care in providing a safe environment for your data.

It is your responsibility to familiarise yourself

with our policies.

Terms and Conditions

Version 3.3
Effective date: 21 July 2026
Next review: 21 July 2027, or earlier if required
Responsible person: Maddie Schumann

1. About us and these Terms

Schumann Strategic, formerly MHMLA, is a trading style of Myriam Howard Mediation Law Assistance Ltd (company number 14203303) ("we", "us" or "our"). We serve businesses ("Business Clients") and individuals acting mainly outside their trade or profession ("Consumer Clients"), together "Clients".

We are not solicitors and give no legal, financial, insurance or tax advice. A mediator cannot impose a decision or guarantee settlement.

These Terms apply with our quotation and engagement documents; a later signed agreement prevails if inconsistent. Retainers have additional bespoke terms.

2. Engagement and suitability review

An enquiry or website use creates no engagement. A contract begins upon our written acceptance and cleared payment. A Business Client confirms its authority to contract. A Consumer Client must confirm that status.

Every mediation requires a paid Stage One suitability and conflict review, potentially covering documents, parties, issues and conflicts. Payment does not guarantee mediation. We may decline or end work for unsuitability, inadequate information, non-participation, conflict, safety, illegality or risk to independence.

Mediation requires party agreement, requested information, cleared fees and an accepted mediation agreement.

3. CLIENT RESPONSIBILITIES

The Client must promptly provide requested evidence and accurate party details, facts, dates, sums, contracts, deadlines, proceedings, conflicts and authority.

The Client warrants that supplied information is complete, accurate, current and lawful, must correct errors and preserve evidence, and remains responsible for every deadline.

We may rely on information without verification and, to the fullest lawful extent, are not responsible for consequences of inaccurate, incomplete, late or unlawful information, unidentified parties, insufficient authority or non-cooperation.

4. Fixed fees, additional work and payment

Unless stated otherwise, our fee is fixed, not hourly, for the invoiced scope. Out-of-scope work incurs an additional fee communicated before it begins and requires written approval and cleared payment unless otherwise agreed.

Payment must be made by bank transfer to the invoiced account and occurs when funds clear. Fees are advance-payable unless written instalments are agreed. No cleared payment means no work, meeting, reservation or mediation. We may suspend or cancel for non-payment without liability for delay.

Work commences upon first review, checks, reserved time or party contact. Stage One is earned once review starts.

For Business Clients, overdue instalments carry statutory interest at 8% above the Bank of England base rate, plus statutory compensation and recovery costs, unless a different substantial contractual remedy applies. Consumer instalments are interest-free unless a separate, legally compliant credit agreement states otherwise; late payment suspends work and may incur lawful recovery costs.

We may help arrange an expert but do not employ or invoice for them. The Client contracts with and pays them directly. We are not responsible for their work, charges or availability.

5. Engagement-letter changes

One reasonable clarification round is included. Repeated or substantial amendments, changed parties or scope, or restarting an abandoned instruction may incur a fixed £400 administration and re-scoping fee. We give advance notice and require written acceptance. For Consumer Clients it applies only where fair, proportionate and lawful. If declined, we may stop processing the engagement.

6. Cancellation, training and refunds

6.1 Business Clients

Once work starts, fees for completed work, preparation and reserved time are non-refundable. On cancellation, we may retain those amounts and direct reasonable loss, returning any balance legally due. No refund arises because mediation fails to proceed or settle where contracted work was provided. Stage One is non-refundable once started.

6.2 Consumer Clients

A Consumer Client contracting at a distance or off-premises normally has 14 days to cancel. An early start requires their express request; cancellation then requires proportionate payment for work supplied. Full performance after the required request and acknowledgement ends that right. Later charges reflect work, committed costs and direct loss. Mandatory rights remain unaffected.

6.3 Training bookings

Training cancellations must be made in writing. Cancellation at least 72 hours before the start receives a full refund; between 36 and 72 hours receives 50%; less than 36 hours receives no refund. For Consumer Clients this schedule is subject to section 6.2 and applies only to the extent it fairly reflects work performed, committed costs and direct loss. We may offer rescheduling at our discretion.

7. Confidentiality and data

Mediation communications are private and, where applicable, without prejudice, subject to the mediation agreement and legal exceptions. Disclosure may occur when authorised or required to prevent harm, address illegality, enforce settlement or recover fees.

Personal data is handled under our Privacy Policy. Clients must lawfully disclose information.

8. Outcomes and liability

Decisions belong to the parties, who should obtain advice before signing. We guarantee no settlement, enforceability, savings, compliance or outcome.

Nothing excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, fraud or fraudulent misrepresentation. Subject to that, we are not liable for indirect or consequential loss, or loss of profit, business, opportunity, reputation or anticipated savings. For Business Clients, where lawful and reasonable, aggregate liability is limited to fees paid for the relevant service. Consumer statutory rights remain unaffected.

9. Intellectual property, termination and law

Our materials remain our intellectual property. Paid deliverables are for the Client's agreed internal use and cannot be sold or published without permission.

Either party may terminate in accordance with the engagement documents. We may terminate immediately for non-payment, material breach, abusive conduct, illegality, conflict or risk to impartiality, confidentiality or safety. Accrued fees and continuing confidentiality, intellectual-property and liability provisions survive termination.

These Terms are governed by the law of England and Wales. Its courts have exclusive jurisdiction for Business Clients. Consumer Clients retain any mandatory right to bring proceedings in another competent court. Questions or complaints should be sent first to ms@schumannstrategic.co.uk.

Privacy and Financial Crime Prevention Policy

Version 1.0 | Effective: 21 July 2026 | Review: 21 July 2027
Responsible person: Maddie Schumann

1. Who we are

Schumann Strategic, formerly MHMLA, is a trading style of Myriam Howard Mediation Law Assistance Ltd, company number 14203303 ("we", "us" or "our"). We are the controller of personal data used through www.schumannstrategic.co.uk, www.mhmla.biz, www.mhmla.co.uk and our services. ICO registration: ZB583865. Contact: ms@schumannstrategic.co.uk.

This Policy explains how we handle personal data and prevent misuse of our mediation, dispute-resolution, compliance, training and consultancy services.

2. Information we collect

We may collect:

names, addresses, contact details, identity documents and signatures;
business, employment, financial, contractual, dispute and payment information;
communications, evidence, attendance and service records;
information about directors, representatives, counterparties and beneficial owners;
technical information from our websites and systems; and
special-category or criminal-offence information where relevant, necessary and lawful.

Information may come from clients, other parties, representatives, advisers, experts, public registers, screening services, regulators, courts or other lawful sources. Clients must have authority and a lawful basis for personal data they provide about others.

3. Purposes and lawful bases

We use personal data to assess enquiries and suitability; verify identity and authority; check conflicts, sanctions and financial-crime risk; provide and administer services; communicate, invoice and recover debts; maintain security and records; establish or defend legal claims; and comply with legal or regulatory duties.

Depending on the circumstances, our lawful bases are taking steps before or performing a contract, legal obligation, legitimate interests, consent, or the establishment, exercise or defence of legal claims. Our legitimate interests include operating securely, preventing fraud, administering engagements and protecting legal rights. Where consent applies, it may be withdrawn. We do not use solely automated decisions producing legal or similarly significant effects.

4. Financial-crime controls

We take a risk-based approach to money laundering, terrorist financing, fraud, bribery, sanctions evasion and criminal property. Mediation and general consultancy are not automatically activities regulated by the Money Laundering Regulations 2017. Where an engagement falls within regulated activity, we will apply the applicable Regulations and supervisory requirements. Otherwise, we conduct proportionate checks under our legitimate interests and comply with generally applicable law, including the Proceeds of Crime Act 2002, Terrorism Act 2000 and UK sanctions legislation.

Checks may include verifying identity, address, corporate status, authority and beneficial ownership; understanding the engagement and expected payments; screening the UK Sanctions List and politically exposed persons; and requesting source-of-funds or source-of-wealth evidence where risk justifies it. Enhanced checks may apply to complex ownership, unusual payment arrangements, higher-risk jurisdictions, sanctions exposure, PEPs or inconsistent information.

Payments must be made by bank transfer from an account reasonably connected to the paying Client unless we approve otherwise after checks. We do not accept cash. We may delay, refuse, suspend or terminate work, decline or return funds where lawful, or request further evidence if checks are unsatisfactory.

Where disclosure is required or appropriate under applicable law, we may report suspected money laundering or terrorist financing to the National Crime Agency or another authority. We may be legally prohibited from informing any affected person. Nothing in this Policy requires us to make a disclosure where it would be unlawful.

5. Sharing and international transfers

We disclose personal data only where necessary and lawful, including to service providers, professional advisers, mediators, experts, payment providers, insurers, regulators, courts, law enforcement or other parties authorised by the client or required by law. Experts and other independent professionals act under their own privacy obligations.

Where data is transferred outside the UK, we use an adequacy regulation, approved contractual safeguards or another lawful mechanism where required.

6. Retention and security

We retain information only as long as needed for the relevant purpose, legal claims and legal or regulatory requirements. Regulated AML records are normally retained for five years after the relationship or transaction ends, unless law requires or permits otherwise. Other records follow our retention schedule and are securely deleted or anonymised when no longer required.

We use proportionate access controls, authentication, secure storage, backups, supplier review and incident procedures. No system can be guaranteed completely secure. We assess personal-data breaches and notify the ICO and affected individuals where legally required.

7. Your rights and complaints

Subject to legal limits, individuals may request access, correction, erasure, restriction, portability or objection, and may withdraw consent. Rights may be restricted where information must be retained, disclosure would prejudice financial-crime prevention, or a legal exemption applies. Identity verification may be required.

Contact ms@schumannstrategic.co.uk. You may complain to the Information Commissioner's Office at www.ico.org.uk. We welcome the opportunity to address concerns first.

We may update this Policy when our services, risks or legal obligations change. Our separate Cookies Policy explains website storage technologies.