Manalo & White Privacy Policies

Manalo & White is committed to protecting your privacy and personal data and acting in full compliance with the current General Data Protection Regulation (EU)2016/679 (GDPR).

Under GDPR we are obliged to inform you about the ways we collect and process your personal data and how you can review, verify, correct, request erasure or object to its processing.

Accessing your data

If you would like to review, verify, correct, request erasure or object to the processing of your personal data please email

We will provide you with full details of any data we hold, and will respond within one month from the point of receiving the request and all necessary information from you.

Policy updates

Any future changes to this policy will be posted on this page.

Website Privacy Policy

What data, and how we collect it

Personal data

Personal data is information that is personally identifiable and may include your name, address, email address or phone number. This data is NOT collected via the website.

Tracking data

Tracking data is information collected via cookies. It is collected anonymously and is used to understand how people use our website and to help to improve the website. You can set your browser to refuse them, however if you choose not to accept cookies you may not be able to take full advantage of the website.

Sharing your data

M&W does not sell, rent, share or otherwise distribute any of your personal information to third parties without your consent or unless required to do so by law.

Hosting website

Our website is hosted on 1&1 Ionos. For information on their privacy policy please read: Ionos Privacy Policy Terms & Conditions.

Links to other websites

Third party sites linked on the Manalo & White website have their own privacy statements and are not covered by this policy. Manalo & White are not responsible for their privacy statements or the content on their sites.

Customers, Supplies and Contractors Privacy Policy

Please be assured that we never:

  • Ask for more information than we need or store your information for longer than necessary
  • Pass on, disclose or sell any of your personal details to any third party unrelated to the delivery of your project or the legitimate running of our business
  • Use your email address to send unsolicited mail; any emails we send will be in connection with the provision of agreed services

Please note: we reserve the right to cooperate with appropriate authorities if legally required to do so, and have no legal liability for such disclosures.

Examples of personal data we may hold:

  • Names
  • Addresses
  • Phone numbers
  • Email addresses
  • Geolocation date
  • Bank and VAT details

We obtain the data from you and it is used:

  • to take steps to enter into a contract
  • for the performance of a contract with you
  • for the purposes of purchasing supplies, materials and services for the legitimate running of the business.

Examples of ways in which we may use your data:

  • In emails and letters
  • In the project brief
  • On drawings (physical and PDF/other digital media)
  • In models on common data environments/clouds
  • In visualisations
  • In strategy documents
  • In sending and receiving payments

Examples of who we may share your data with:

  • Staff members
  • Local Authority departments
  • Customers
  • Contractors
  • Suppliers
  • Delivery companies
  • Nat West Bank

Retention Period:

We keep your personal information for the length of time we need to in order to manage and administer your project and handle any insurance claims or requests for assistance made by our Professional Indemnity insurers, and to meet any legal, statutory and regulatory obligations. In all cases our need to use your personal data will be reassessed on a regular basis and information which is no longer required will be securely disposed of.

Candidate Privacy Policy

What personal data do we collect?

The data we collect may include: name, title, address, telephone number, personal email address, date of birth, gender, employment history, qualifications, race, ethnicity or religious beliefs, health (including any medical condition and health/sickness records).

Why do we collect your data?

As you have applied to work for us it is within our legitimate interests to process your data to decide whether to appoint you to the position you are applying for, and if successful to enter into a contract with you. If you fail to provide information when requested we will not be able to process your application successfully. For example references or evidence of qualifications.

Collecting your data

We collect your data from your application, covering letter, CV, any interview with us and your named referees.

Using your data

We use your data to communicate with you, assess your skills, qualifications and suitability for the role you are applying for, carry out reference checks and keep records related to the hiring process.

Sharing your data

Your data is shared with the recruitment panel, resource manager and your named referees.

Holding your data

We have placed security measures to prevent your data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

Retention Period:

If you are unsuccessful in your application your data is kept for 6 months. This is for legitimate reasons to enable us to show we have conducted the recruitment process in a fair and transparent way and we have not discriminated against candidates on prohibited grounds. After 6 months your data will be securely destroyed.