Introduction
We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.
Data controller
The data controller responsible for this website is AMCO HOUSING (MCR) LTD, who can be contacted at 67 Windsor Road, Prestwich, Manchester, England, M25 0DB. Our Data Protection Officer is Philip Corn (philip@amcomanagement.com), who can be contacted at 67 Windsor Road, Prestwich, Manchester, England, M25 0DB.
This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.
Lawful basis for processing
For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.
Individual rights
The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.
Data protection complaints
You have the right to complain to us, or to the Information Commissioner’s Office (ico.org.uk), about our processing of your data. To make a complaint to us, please contact our Data Protection Officer, Philip Corn, at philip@amcomanagement.com with your name, e-mail address, proof of identity, and the details of your complaint.
Security
The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website. Additional technical measures are described at the relevant points in this privacy policy.
Disclosures
In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.
Changes to this privacy policy
We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.
Cookies
Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site, and provide features such as password-protected areas. For more information on the cookies we use, see our cookie policy.
Data collected when you contact us
Enquiries, applications and tenancy data
When you contact us about a property, make a tenancy application, or become a tenant, we collect: identity data (name, date of birth, title); contact data (postal address, email, telephone); professional or employment data (job title, employer, business contact details); financial data (income information, payment details, bank details, references); identification documents (passport, driving licence, proof of address) where required by right-to-rent and anti-money-laundering rules; and communications data (correspondence and records of our interactions with you).
Sources: we may also collect data about you from employers, referees (where relevant and permitted), publicly available sources, credit reference agencies, and third-party providers used to support tenant vetting and compliance.
International transfers: we do not routinely transfer your personal data outside the UK or the European Economic Area; where any limited transfer is necessary to a service provider, we ensure appropriate safeguards (such as approved standard contractual clauses or transfers to countries recognised as providing adequate protection).
Statutory or contractual provision: providing this data is primarily contractual, and in some cases required to meet our legal and regulatory obligations (including right-to-rent and anti-money-laundering rules); if you do not provide it we may be unable to enter into a contract with you, grant a tenancy, or carry out the verification, compliance and fraud-prevention checks required, which means our services may be delayed, restricted, or declined.
Automated decision-making and profiling: we may use automated tools to support risk assessment, fraud prevention, affordability checks, identity verification, and record management. These tools may generate indicators, scores, or recommendations using predefined criteria, but we do not make decisions with a legal or similarly significant effect based solely on automated processing — any such decisions are subject to meaningful human review.
Lawful basis for processing: performance of a contract. We need this data to consider your application, enter into and perform a tenancy or service agreement with you, manage your tenancy, and comply with our legal obligations including right-to-rent and anti-money-laundering checks.
Website enquiry forms
When you submit an enquiry, valuation request, application, or repair report through this website, we collect the details you enter (such as your name, contact details, and message) together with your IP address, which we use for rate-limiting and abuse prevention. Submissions are stored securely and emailed to the relevant AMCO team so we can respond. E-mail delivery is handled on our behalf by Resend (see below).
Lawful basis for processing: pursuance of our legitimate interests — responding to the enquiry you have raised with us.
Data collected by third parties on our behalf
Vercel
Our site is hosted by Vercel Inc. Vercel logs requests in order to determine the causes of reported faults and to detect and block suspicious traffic. Logs record the time of the request, your IP address, the requested resource, the referring site (if specified by your browser), and your browser’s user agent string. For more information on how Vercel handles the data it collects, see Vercel’s privacy policy.
Lawful basis for processing: compliance with a legal obligation — the GDPR obligation to implement appropriate technical measures to protect data.
Resend
Form submissions are delivered to our team by the Resend e-mail service, which processes the contents of the submission and the delivery address. For more information, see Resend’s privacy policy.
Lawful basis for processing: pursuance of our legitimate interests — delivering your enquiry to the right team so we can respond.
Credit reference and affordability checks (Creditsafe and TransUnion)
To help us assess applications, prevent fraud, and meet our legal and regulatory obligations, we may obtain information about you from credit reference agencies (CRAs). We obtain this information via Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data. Creditsafe Business Solutions Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number 742313). TransUnion International UK Limited is authorised and regulated by the Financial Conduct Authority (FCA Firm Reference Number 737740). The information we receive may include data relating to your identity, credit commitments, payment history, and public record information. This data is used solely for legitimate business purposes, including creditworthiness assessment, identity verification, and fraud prevention, in accordance with applicable data protection laws.
Further information about how Creditsafe and TransUnion process your personal data can be found in their respective privacy notices: Creditsafe Transparency Notice, TransUnion CRAIN, and the TransUnion Bureau Privacy Notice.
Lawful basis for processing: pursuance of our legitimate interests — fraud prevention, identity verification, and creditworthiness assessment to support our tenant vetting process and meet our regulatory obligations.
Other data collected by third parties
OpenStreetMap maps
When you view a page containing property maps, your browser connects to OpenStreetMap tile servers to load the map imagery, which involves sending your IP address. For more information, see the OpenStreetMap Foundation privacy policy.
Postcodes.io
When you search by postcode, your browser sends the postcode you type to the postcodes.io lookup service to provide suggestions and map locations. No other personal data is sent.
OpenWidget chat
Our site includes the OpenWidget chat widget. When loaded, your browser connects to OpenWidget’s servers; any messages you send through the widget are processed by them. For more information, see OpenWidget’s privacy policy.