Privacy Notice.

Who we are

Mandersley Ltd is the organisation responsible for the personal information described in this notice. Mandersley Ltd is registered in England and Wales, Company No. 17395917. Registered office: Unit 29 Highcroft Industrial Estate, Enterprise Road, Horndean, Waterlooville, PO8 0BT.

For privacy enquiries, email privacy@mandersley.co.uk.

Information we may collect

We may collect information that you choose to provide when you contact Mandersley, including your name, organisation, contact details and the content of your enquiry or correspondence.

We may also hold information created as part of an ongoing business relationship, such as records of conversations, agreed actions and relevant correspondence.

The website contact form is intended for ordinary business enquiries. Please do not use it to send identifiable information about people receiving care, health information or other sensitive personal information.

Prospective business contacts and customer discovery

We may hold limited professional information about people who are relevant to Mandersley's work with independent care providers. This may include a person's name, professional role, organisation, business contact details, relevant publicly available professional information and the source from which the information was obtained.

Where someone takes part in a customer-discovery conversation, we may also keep proportionate business-focused notes about the conversation, any agreed follow-up and relevant contact preferences.

Mandersley does not deliberately seek identifiable information about people receiving care, health information, safeguarding case details or other unnecessary sensitive personal information as part of prospecting or customer discovery.

How we use personal information

We use personal information to respond to enquiries, communicate with people and organisations, consider or provide Mandersley services, maintain appropriate business records and meet legal or regulatory requirements.

We only use personal information where there is an appropriate lawful basis for doing so. Depending on the circumstances, this may include taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation or pursuing legitimate business interests in a proportionate way.

We may also use limited professional contact information to identify and communicate with a small number of relevant organisations and professional stakeholders, conduct customer-discovery activity, understand whether Mandersley's services address genuine provider needs, administer appropriate follow-up and maintain records needed to respect contact preferences and objections.

Where we rely on legitimate interests for this activity, our interests are in developing and validating Mandersley's services, communicating proportionately with relevant professional stakeholders and maintaining appropriate business and suppression records. We consider the necessity and impact of this processing and apply safeguards including targeted rather than mass contact, data minimisation, transparency, easy objection and suppression controls.

Where separate rules apply to a particular marketing or communication channel, including the Privacy and Electronic Communications Regulations, we comply with those requirements as well.

How we receive your information

We receive personal information directly from you when you complete the website contact form, email us, speak with us or otherwise contact Mandersley.

We may also obtain limited professional information from publicly available or legitimate business sources. These may include the Care Quality Commission, Companies House, provider or organisation websites, professional networking profiles such as LinkedIn, business or professional directories and information supplied through a genuine professional introduction.

Where we obtain personal information from another source, we record and use only information that is reasonably relevant to our purpose. Where required, we will tell you about our use of the information and make this Privacy Notice available within the applicable period and, if we contact you, no later than our first communication with you.

Website forms, email and service providers

We use trusted service providers to operate the website, email and related business systems. Netlify provides website hosting and processes website contact-form submissions on our behalf. Netlify's form service also uses automated spam filtering. Microsoft provides Mandersley's business email and related cloud services.

These providers may use their own approved subprocessors to deliver their services. We do not sell personal information.

International transfers

Some service providers may process personal information outside the United Kingdom. Where this involves a restricted international transfer, appropriate transfer mechanisms and safeguards are used in accordance with UK data-protection law. Netlify states that it participates in the UK Extension to the EU-US Data Privacy Framework and also uses contractual transfer safeguards where applicable.

You can contact privacy@mandersley.co.uk if you would like more information about the safeguards relevant to your information.

How long we keep information

Website contact-form submissions held in Netlify will normally be deleted within 30 days after receipt, once the enquiry has been dealt with and any information that needs to form part of Mandersley's business correspondence has been transferred to the appropriate business record.

Other personal information is kept only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, managing business relationships and meeting legal or regulatory requirements.

Prospect and customer-discovery information is reviewed periodically and retained only for as long as reasonably necessary for the relevant prospecting, customer-discovery, follow-up or business-relationship purpose.

If you ask Mandersley not to contact you for direct marketing, we may retain the minimum information necessary on a suppression or do-not-contact record so that we can continue to respect your preference and avoid inadvertently contacting you again.

Your data protection rights

Depending on the circumstances, you may have rights relating to your personal information, including rights to request access, correction, deletion or restriction of its use, and to object to certain processing or ask for your information to be transferred. These rights are subject to legal conditions and exemptions.

If you want to exercise a data protection right or raise a privacy concern, contact privacy@mandersley.co.uk.

Direct-marketing objections

You have the right to object at any time to the use of your personal information for direct marketing. You can do this by replying to a communication from us or by contacting privacy@mandersley.co.uk.

If you ask us not to contact you for direct marketing, we will respect the scope of your request. We may retain the minimum information needed on a suppression or do-not-contact record so that we do not inadvertently contact you again.

Data protection complaints

If you wish to complain about how Mandersley has handled your personal information, please contact privacy@mandersley.co.uk.

We will acknowledge a data-protection complaint within 30 days of receiving it. We will take appropriate steps to investigate and respond without undue delay, keep you appropriately informed while the complaint is being considered, and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO). Further information is available at ico.org.uk.

Cookies and website data

Mandersley's website does not currently use non-essential analytics, advertising or tracking cookies. Essential technical services may process limited technical information needed to deliver, secure and operate the website and contact form.

If non-essential cookies, analytics or similar technologies are introduced later, this notice will be updated and appropriate information and consent controls will be added before they are enabled where required.

Changes to this notice

This notice may be updated if the way Mandersley uses personal information or website technology changes.

Last updated: 18 August 2026.