Search Let’s talk
Close
Menu

Privacy policy

At MAPP, we are committed to protecting your personal information and being transparent about how we use it. This privacy notice explains what data we may collect about you, why we need it, and what we do with it. We keep things straightforward because your trust matters to us.

MAPP (Property Management) Limited is registered with the Information Commissioner’s Office with registration number Z2215738 and processes data on behalf of their clients.

If you have any questions in relation to this policy, please email [email protected].

 

Clients and related parties

If you are an existing client of MAPP Ltd or MAPP Retail LLP are an officer or employee of one of our clients or are a third party related to a client (for example an occupier, a service provider or supplier) then please email us [email protected] to find out more information about how we use your data.

 

Job applicants

If you are applying or have previously applied for a role at MAPP then please click here to find out more about how we use your data.

 

Others

If you do not fall into any of the above two categories the information set out below tells you who we are, what data we may collect, and what we may do with that data. This notice applies if you are a visitor to our website, a contact of ours or are involved in providing services to us.

If you have a Subject Access Request then please contact us.

 

Introduction

MAPP is a specialist manager of mixed commercial real estate portfolios, large office buildings, and mixed-use and retail schemes operating solely in the UK.

This Privacy Policy and our Cookie Policy, sets out the basis upon which any personal data we collect from you or that you provide to us, may be processed MAPP.

Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data.

We only use your personal data where we have a lawful reason to do so. This will be one (or more) of the following: to fulfil a contract with you or your organisation, to comply with our legal obligations, where it is necessary for our legitimate business interests (such as developing relationships, improving our website and services) and these interests are not overridden by your rights, where we have your consent (for example, for certain marketing communications), or to protect someone’s vital interests.

You may withdraw your consent for a particular activity at any time, provided it does not impact on any other lawful basis. This can be done by contacting [email protected].

 

Collection and use of your personal data

Your personal data may be collected by MAPP through our website, occupier portals or meetings with and emails and telephone calls to us.

Your personal data may be processed by (or on behalf of) MAPP for any of the following purposes:

  • To communicate with you, such as in the course of developing a commercial relationship between us and your employer;
  • To send you marketing communications via email or post;
  • To create and manage records of your involvement with us;
  • To comply with our legal and regulatory obligations;
  • To use data analytics to improve our website, products/services, marketing, customer relationships and experiences;
  • For the Security and wellbeing of our staff and visitors and for the purposes of managing our properties.

The legal basis for our use of data about you is one of the following:

  • The performance of a contract to which you are a party;
  • Compliance with a legal obligation to which we are subject; or
  • A legitimate business interest that is not overridden by your interests, rights and freedoms which require protection.
  • Where processing is required to protect the vital interests of an individual/s.

 

Where none of the above conditions apply, we will ask for your consent to process the data.

For a list of the type of personal data that we may collect please click here.

 

Who do we share your data with and for what purposes?

We will only share your data with anyone outside of MAPP where it is justifiable (under UK GDPR) to do so.

 

Changing your preferences

We want to make sure that you are happy with the ways in which we hold and use your personal data. If at any time you wish to check, update or amend your personal data or preferences, please email us at [email protected].

 

The use of ‘Cookies’

Please see our Cookie Policy for details of how to disable cookies in use on the Website.

 

Security measures and possibility of international transfer

We are professional about security and we follow appropriate technical and organisational measures in the storage and disclosure of personal data so as to prevent unauthorised disclosure, use, alteration or destruction. We primarily keep your data in the UK. Where we use service providers outside the UK, we ensure strong protections are in place (such as UK-approved transfer mechanisms).

 

How long will data about you be kept?

We only keep your personal data for as long as we need it. The exact retention periods vary depending on the type of data and our relationship with you. Please email us at [email protected] if you’d like a copy of our Data Retention Policy, which includes a clear table setting out the different periods. Once we no longer need your information, we securely delete or anonymise it.

 

What rights and options do you have?

You may have the following rights in respect of data about you that we hold:

  • Request us to give you access to it;
  • Request us to rectify it, update it, or erase it;
  • Request us to restrict our using it, in certain circumstances;
  • Object to our using it, in certain circumstances;
  • Withdraw your consent to our using it;
  • Data portability, in certain circumstances;
  • Opt out from our using it for direct marketing;
  • Lodge a complaint with the supervisory authority in your country (if there is one).

You are able to exercise these rights by contacting us using the details set out below.

If you have a Subject Access Request then please click here.

 

Time limit to respond

We will aim to all respond to all legitimate requests within one month. If your request is particularly complex or you have made a number of requests, it is likely to take us longer than a month to respond. We will notify you of that and keep you updated as to progress.

 

Your right to make a complaint

In addition to your legal rights set out above, you can also complain to the ICO at any time: www.ico.org.uk. We’d much rather you contacted us first so we can try to put things right.

 

Links and third-party advertising

Any links on the website may take you to third-party sites over which we have no control. When linking to another website, you should read the privacy policy stated on that website. This Privacy Policy does not cover the use of your personal data on any third-party websites.

 

Changes to Privacy Policy and queries

We review this policy regularly and will update it as needed. The current version is dated May 2026. We’ll let you know about any significant changes.

If anything isn’t clear or you’d like more information, please get in touch at c[email protected] — we’re here to help.

Charles Maybanks