Privacy notice

Manchester Building Prime Ltd is responsible for the personal information described in this notice. We're a private limited company registered in England and Wales, company number 17522801. Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.

If you have a question about this notice or your information, please get in touch:

When you use the enquiry form on our website, we collect:

• your name and email address
• your phone number and your postcode or area, if you give them
• the type of work you're interested in, and your message
• when you sent the enquiry and which page you sent it from

If you call, email or send us a WhatsApp message instead, we keep what you choose to tell us, such as your contact details, your address and details or photos of the job.

If you become a customer, we also keep what we need to do the work and get paid, such as your address, our quote, invoices and payments.

Our website is hosted by Cloudflare. Like any website, it receives technical information when you visit, such as your IP address, your browser and the pages you ask for. Cloudflare uses it to deliver the site and to protect it from attacks and abuse.

To stop spam, our enquiry form uses Cloudflare Turnstile, which checks that the form is being sent by a person rather than a bot. It looks at information about your browser and device to do this, and Cloudflare doesn't use it for advertising.

UK data protection law says we need a lawful basis for using your personal information. We use it:

• to reply to your enquiry, visit and give you a quote: steps you've asked us to take before we agree a contract (UK GDPR Article 6(1)(b))
• to carry out the work and look after you as a customer, under our contract with you (Article 6(1)(b))
• to keep the business and accounting records the law requires (Article 6(1)(c))
• to keep our website secure and free of spam, and to deal with any complaint or claim. These are our legitimate interests (Article 6(1)(f)), and we've weighed them against your rights

We don't send marketing messages, and we never sell your information.

We use these service providers to run the business. They only use your information on our instructions, under contracts that require them to keep it safe:

• Cloudflare, which hosts our website and runs the enquiry form
• Resend, which delivers enquiries from the form to our inbox
• Microsoft, which provides our email (Outlook)

If you message us on WhatsApp, WhatsApp's own privacy policy also applies to those messages.

On kitchens and bigger projects, gas and electrical work is done by partner companies we work with. We give the partner doing that part of your job the details it needs, such as your name, address and phone number.

We may also share information when the law requires it, for example with HM Revenue & Customs, and with professional advisers such as our accountant.

Some of our service providers store or process information outside the UK, including in the United States. When they do, the transfer is protected by safeguards recognised under UK law, such as the UK–US data bridge or the ICO's International Data Transfer Agreement.

• Enquiries that don't lead to any work: for up to 12 months after we were last in touch, in case you come back to us, and then we delete them.
• Customer records: for 6 years after the end of the financial year the job finished in. Tax law requires us to keep accounting records, and we may need them if there's ever a claim about the work.
• Technical information about website visits: Cloudflare keeps it for a short time for security.

Under UK data protection law, you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct anything that's wrong or incomplete
• ask us to delete your information
• ask us to limit how we use it, or object to how we use it
• ask for the information you gave us in a format you can take elsewhere

Some of these rights only apply in certain situations. For example, we may need to keep records that the law requires. To use any of them, contact us. It's free, and we'll reply within one month.

We don't make decisions about you by automated means alone.

Our website doesn't use cookies for analytics, advertising or tracking, so we don't ask you to accept any. Cloudflare may use a strictly necessary security cookie to tell people and bots apart. It isn't used to track you.

If you're unhappy with how we've handled your information, please tell us first, so that we can put it right.

You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, on 0303 123 1113 or through its website.

We may update this notice from time to time. The date at the top shows when it last changed.