Our commitment to protecting your personal data
Last updated: June 2026
meta-cliff is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we process personal data and your rights under data protection legislation.
meta-cliff is the data controller for the personal data we process in connection with our property management services and website operations. This means we determine the purposes and means of processing personal data.
Our contact details are:
meta-cliff
47 Whitmore Street
Birmingham B4 7PD
United Kingdom
Email: [email protected]
We process personal data on the following legal bases under the UK GDPR:
Under the UK GDPR, you have the following rights regarding your personal data:
You have the right to obtain confirmation that we are processing your personal data and to request a copy of that data. This is commonly known as a "subject access request." We will respond to valid requests within one month.
You have the right to request correction of inaccurate personal data and to have incomplete data completed. We will act on valid requests within one month.
You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent. This right is not absolute and may be subject to legal exceptions.
You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose.
You have rights in relation to automated decision-making and profiling. We do not currently use automated decision-making processes that produce legal or similarly significant effects.
We primarily store and process personal data within the United Kingdom and European Economic Area. Where we transfer data outside these regions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authorities.
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include:
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to individuals, we will also notify the affected individuals directly.
To exercise any of your rights under the GDPR, please contact us using the details provided above. We may need to verify your identity before processing your request. We will respond to valid requests within one month, though this period may be extended by up to two months for complex requests.
If you have concerns about how we process your personal data, we encourage you to contact us first so we can address your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk
We may update this GDPR compliance information from time to time. We encourage you to review this page periodically to stay informed about how we are protecting your personal data.