Privacy Policy

3B Management Services LTD ("3B Management Services", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about a property or service, or otherwise interact with us.

When you use our website, we may collect information that you provide directly to us, including your name, email address, telephone number, the content of your enquiry and any other information you choose to provide when contacting us.

If you enquire about a property or our services, we may also collect information relating to the property or service you are interested in.

Our website and security systems may automatically process limited technical information such as your IP address, browser type, device information, request information, security tokens and information required to detect abuse, spam or malicious activity.

If you later become a landlord, tenant, purchaser, seller, contractor or other client of 3B Management Services LTD, additional personal information may be collected under the separate processes necessary to provide those services.

We may use your information to respond to enquiries; provide information about properties and services; arrange or discuss viewings; communicate with prospective or existing clients; operate, maintain and secure the website; prevent spam, fraud and unauthorised access; investigate technical or security incidents; comply with legal and regulatory requirements; and establish, exercise or defend legal claims.

We will not use personal information for purposes that are incompatible with those for which it was collected unless permitted or required by law.

The lawful basis we rely upon depends on why we are processing your information.

When you contact us about a property or service, processing may be necessary to take steps at your request before entering into a contract. In other cases, we rely on our legitimate interests in operating our property business, responding to enquiries, maintaining our website and protecting our systems.

Where processing is required to comply with a legal or regulatory requirement, we rely on legal obligation.

Where we specifically ask for your consent, such as for certain forms of electronic marketing or non-essential cookies, we rely on consent and you may withdraw that consent at any time.

UK GDPR requires organisations to identify and communicate the lawful basis for their processing.

When you submit our website contact form, we collect the information shown on the form, including your name, email address, telephone number and message.

We use this information to respond to your enquiry and, where relevant, take steps relating to the property or service you have asked about.

Our contact system uses third-party infrastructure to securely process and deliver the enquiry, including our email service provider.

Please avoid providing sensitive personal information through the general contact form unless it is necessary for your enquiry.

We use security measures designed to prevent automated abuse, unauthorised access and malicious activity.

The public contact form uses Google reCAPTCHA to help distinguish legitimate users from automated or abusive traffic. Google may receive technical information associated with the security check, such as IP address, browser/device information and interaction information, in accordance with Google's applicable privacy terms.

The Admin Portal uses Cloudflare Turnstile as an additional security check. Cloudflare may process technical and security information necessary to perform that verification.

These services are used to protect our website, forms, users and administrative systems.

We use trusted service providers to operate and secure the website. These currently include Hostinger for website hosting and deployment, Supabase for database, authentication and private file-storage infrastructure, Resend for email delivery, Google reCAPTCHA for contact-form abuse prevention and Cloudflare Turnstile for Admin security.

These providers may process limited personal or technical information on our behalf where necessary to provide their services.

We require service providers to handle personal information appropriately and only use providers where we consider appropriate data-protection and security arrangements to be in place.

Some of the technology providers we use may process information in, or make information accessible from, countries outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that an appropriate lawful transfer mechanism or safeguard is used where required, such as UK adequacy regulations or appropriate contractual safeguards.

The ICO requires organisations to explain applicable international transfers and safeguards in their privacy information.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, regulatory, accounting and security requirements.

As a working policy, general enquiries that do not progress into a business relationship may be retained for up to 12 months after the last meaningful communication, unless there is a legitimate reason to retain them for longer.

Where an enquiry develops into a contractual, property-management, tenancy, sales or other business relationship, information may need to be retained for a longer period according to the applicable legal and business-retention requirements.

Security and technical information is retained only for an appropriate period necessary for security, fraud prevention, troubleshooting and legal compliance.

If your actual internal retention periods differ, change this section before publication. UK GDPR requires you to state either the retention period or the criteria used to determine it.

Our website may use cookies and similar technologies that are necessary for security, authentication and operation of the website.

Where any cookies or similar technologies are not strictly necessary, we will seek appropriate consent before using them where required by law.

Third-party security services used by the website may also use or access device information as part of their fraud and abuse-prevention processes.

You can control cookies through your browser settings. Blocking certain essential cookies may prevent some website functions from operating correctly.

Under PECR, users must be told about cookies and their purposes. Non-essential cookies generally require consent, while strictly necessary cookies may fall within an exemption.

We do not sell your personal information.

We may disclose personal information where reasonably necessary to service providers working on our behalf; professional advisers such as accountants, solicitors or insurers; landlords, tenants or other parties involved in a property matter where appropriate; regulatory, governmental, law-enforcement or court authorities where required by law; or another organisation where disclosure is necessary to establish, exercise or defend legal rights.

We only disclose information that is reasonably necessary for the relevant purpose.

Depending on the circumstances and lawful basis involved, UK data-protection law may give you rights to request access to your personal information, correct inaccurate information, request deletion, restrict processing, object to processing, receive certain information in a portable format and withdraw consent where processing is based on consent.

Some rights are subject to exemptions and may not apply in every situation.

To exercise your rights, contact:

info@3bmanagementservices.co.uk

We may need to verify your identity before responding to a request.

The ICO confirms that privacy notices should explain applicable individual rights and the right to withdraw consent where relevant.

We use appropriate technical and organisational security measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.

Our website uses measures including encrypted HTTPS connections, restricted administrative access, authentication controls, multi-factor verification, access-control policies, private file storage, validation, rate limiting and anti-abuse protections.

No internet-based system can guarantee absolute security, but we regularly review the safeguards applicable to our systems.

Our website and property services are not intended to collect personal information directly from children. If you believe that a child has provided personal information to us inappropriately, please contact us.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of websites operated by other organisations. You should review the privacy information provided by those websites before submitting personal information to them.

We may update this Privacy Policy when our services, legal obligations or use of technology changes.

The latest version will be published on this page and the "Last updated" date will be amended accordingly.