Data Protection Policy
McDowall Young Property Management Ltd is committed to protecting the rights and freedoms of individuals in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
​
We recognise the importance of safeguarding personal data and ensuring it is collected, stored, processed, and disposed of securely and transparently.
​
McDowall Young Property Management Ltd follows the data protection principles by ensuring that personal data is:
​
- Processed lawfully, fairly, and transparently
- Collected for specified, explicit, and legitimate purposes
- Adequate, relevant, and limited to what is necessary
- Accurate and kept up to date
- Stored only as long as necessary
- Handled securely, including protection against unauthorised or unlawful processing, loss, destruction, or damage
​
What Data We Collect:
We may collect and process the following types of personal data:
- Names, addresses, Passport or Identification documents and contact details.
- Payment and invoicing information
​
Personal data is used to:
- Administer billing
- Contact clients when services are requested.
-Confirm ownership of property
​
We only share data when requested and with trusted third parties (e.g., insurance providers) — and only if:
- There is a lawful basis for doing so, and
- Data security standards are maintained
We never sell personal data.
​
We keep personal data:
- On secure, password-protected systems
- Only for as long as necessary, based on legal and operational needs.
When data is no longer needed, it is securely deleted or shredded.
​
Your Rights:
​
Individuals have the following rights under data protection law:
- Right to access the personal data we hold
- Right to correct inaccurate or incomplete data
- Right to request erasure ("right to be forgotten")
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time (where applicable)
Requests should be made in writing to our Data Protection Officer (details below).
​
In the event of a data breach that risks the rights and freedoms of individuals, McDowall Young Property Management Ltd will:
- Notify the Information Commissioner's Office (ICO) within 72 hours (where required)
- Inform affected individuals without undue delay
​
The Company Director and appointed Data Protection Officer oversee the implementation and monitoring of this policy.
Data Protection Officer Contact:
Annaka McDowall Young
​