Privacy Policy & Compliance

Last Updated: May 2026

M.P BUILD MAINTAIN LIMITED (“we”, “us”, “our”) is a member of the Marshall Property Group framework. We are committed to protecting the privacy and security of the personal data we collect from website visitors, clients, tenants, subcontractors, and suppliers.

This privacy notice keeps you informed of how we handle your personal data in strict compliance with the UK Data Protection Act 2018 and the General Data Protection Regulation (UK GDPR).

1. Important Information & Who We Are

If we have been passed your personal data from a third party for our own purposes, or collect it directly from your interaction with this website, we act as the Data Controller.

We have appointed a Data Protection Lead to oversee our data protection compliance programme. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact our lead using the details below:

• Full Legal Entity Name: M.P BUILD MAINTAIN LIMITED (Company Number: 16844557)
• Registered Office Address: 372 Smithdown Road, Liverpool, England, L15 5AN
• Data Protection Contact Email: info@mp-build.co.uk

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we group as follows:

• Identity Data: First name, last name, title, date of birth, and gender.
• Contact Data: Billing address, project/site delivery addresses, email address, and telephone numbers.
• Financial Data: Bank account and payment card details (processed securely for invoices, client balances, or subcontractor trade payments).
• Transaction Data: Details about payments to and from you, and other specific details of products, asset maintenance, new builds, or construction services you have purchased or requested from us.
• Technical Data: Internet Protocol (IP) address, your login data, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access this website.
• Profile Data: Usernames, passwords, project preferences, feedback, and survey responses.

We also collect Aggregated Data (such as statistical or demographic website traffic numbers). While derived from personal data, it is anonymised and does not legally reveal your identity. We do not collect any Special Categories of Personal Data (e.g., race, religious beliefs, health data) unless explicitly required and consented to for designated welfare, property adaptation, or statutory obligations.

3. How We Collect Your Personal Data

We collect data from and about you through different methods:

• Directly Obtained: You give us your details by filling out our online notification or inquiry forms, interacting with our digital management systems, or corresponding with us by phone, email, or post.
• Third Parties or Publicly Available Sources: We may receive personal data about you from third parties (such as landlords, local authorities, or housing associations instructing us to perform maintenance or reconfigurations), or from joint Data Controllers within the Marshall Property Group framework.

4. Our Lawful Basis for Processing

We only process your data when permitted by law. Most commonly, we rely on the following lawful bases:

• Performance of a Contract: Where we need to process data to deliver construction, maintenance, or fire protection solutions under an agreement with you.
• Compliance with a Legal Obligation: Where we must maintain records to comply with UK Building Regulations, CDM 2015 safety files, or HMRC tax rules.
• Our Legitimate Interests: For business administration, managing payments, protecting against fraud (including sharing information with credit reference agencies if payments are cancelled without cause), and expanding our services. If you make a purchase or contract with us, we may add you to our marketing list to send information on similar services, which you can opt out of at any time.
• Your Consent: Where you explicitly agree to receive specific digital marketing or communications.

5. Disclosures of Your Personal Data

We do not sell or rent your personal data to unauthorized third parties. To deliver our services safely and efficiently, we may share your information with:

• Internal entities within the M.P BUILD MAINTAIN LIMITED.
• Vetted subcontractors, Gas Safe engineers, NICEIC specialists, or passive fire protection operatives assigned to your project or property address.
• Professional advisors, including insurers, auditors, and legal experts.
• Public authorities, law enforcement, or regulatory bodies (such as the Health & Safety Executive or HMRC) where required by UK statutory frameworks.

6. International Data Transfers

We store and process your data inside the United Kingdom. We do not transfer your personal data outside of the UK or the European Economic Area (EEA) unless your data is processed by standard cloud software providers (such as Microsoft 365 or Google Workspace) operating under strictly approved UK International Data Transfer Agreements (IDTAs).

7. Data Security

We implement appropriate technical and organisational safeguards to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Access to personal data is strictly limited to employees and subcontractors who have a verified operational “need to know” to complete their specific development, refurbishment, or maintenance tasks.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for. By law, basic customer, financial, and transaction logs must be kept for six to seven years for tax, corporate auditing, and latent structural defect/warranty liabilities.

9. Your UK Legal Rights

Under UK data protection laws, you have comprehensive rights regarding your personal data:

• The Right of Access: You can request a copy of the personal data we hold about you (commonly known as a “Subject Access Request”).
• The Right to Correction: You can request that we update or correct any incomplete or inaccurate data we hold about you.
• The Right to Erasure: You can ask us to delete your personal data where there is no valid legal or operational reason for us continuing to process it.
• The Right to Object: You can object to us processing your data if we are relying on a legitimate interest or using it for direct marketing.

If you wish to exercise any of these rights, please contact us via the email address listed in Section 1. We do not charge a fee to access your data, and we aim to respond to all legitimate requests within one calendar month.

How to Submit a Subject Access Request (SAR)

To exercise your right to access your data, please contact our Data Protection Lead at info@mp-build.co.uk with the subject line “Subject Access Request”.

• Identity Verification Note: To protect your security and follow our parent group’s compliance guidelines, when you submit a Subject Access Request, you will need to provide confirmation of your identity by including a photocopy of your valid driver’s license or passport.

This service is provided free of charge, and our response will be issued within 30 days, unless our Data Protection Lead deems the request to be unfounded, excessive, or structurally complex, in which case we will notify you of an extension.

10. How to Complain

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the opportunity to resolve any concerns or data queries directly with you first, so please contact our Data Protection Lead in the first instance.