Privacy Note

At Madina Mac we are fully committed to ensuring that your data is protected and your privacy is respected.
Madina Mac is the data controller and is responsible for the personal data collected on this site (referred to as “Madina Mac”, “we” or “us” in this policy). We are registered in UK Company No: 13538415 Registered Address:Broadway City (UK) Ltd, The Future Works, 2 Brunel Way, Slough, SL1 1FQ. +44 (0) 333 444 0222. Plot #11, Civic Zone, Block G, Bahria Enclave, Islamabad, Pakistan

Madina Mac is part of the “Madina Mac Residency, more details of which can be found here:

How can you contact us?

If you have any questions about this policy or would like to exercise any of the rights mentioned, you can either:

  • Email us:
  • Write to us: Data Protection Department, Registered Address: Broadway City (UK) Ltd, The Future Works, 2 Brunel Way, Slough, SL1 1FQ. +44 (0) 333 444 0222
  • Plot #11, Civic Zone, Block G, Bahria Enclave, Islamabad, Pakistan

What is this policy for?

This policy will inform you about what personal data we collect through the website (“site”) as well as your other interactions with us. It will tell you why we collect your data, how we use it, who we share it with and what rights you have in relation to it.
It is important that you read this policy together with any other privacy notice or fair processing notice we may provide at the point of collecting or processing your personal data. This policy supplements those notices and is not intended to override them. However, it does supersede earlier versions of this policy.
This site includes links to websites which may allow third parties to collect or share your personal data. We cannot control their use of your data and are not responsible for it. Those third parties will have their own privacy policies and we encourage you to read them before sharing any of your personal data with them.
Please note this site is not intended for children. We do not knowingly collect any personal data relating to children.

What data do we collect about you?

Personal data includes any information about an individual from which that person can be identified. This does not include data where the individual’s identity has been removed. We may collect, use, store and transfer the following types of personal data:

Identity Name, title, marital status, date of birth, passport information, national insurance number, nationality, images (via CCTV systems on our sites).
Contact Email addresses, postal addresses, billing address, landline and mobile telephone numbers.
Profile Your preferences (including details about the type of property you are interested in), interests, profession, age, purchases, orders, requests, feedback, and survey responses.
Transactional Details about payments to and from you and other details of properties, products, goods or services you have purchased from us or the Galliard Group.
Financial Mortgage application details, bank account, payment card details, and any other information provided to us for anti-money laundering checks.
Technical IP address, operating system and platform, browser type and version, time zone setting, location data, device cookie and identification, and other identifying information required for your device to communicate with our site.
Usage Information about how you use our site (e.g. URL).
Marketing and Communications Your preferences in receiving marketing from us and our third party suppliers as well as your communication preferences.

How is your personal data collected?

We collect your personal data through a number of sources. For example:

  • You may give us your personal data directly when you: arrange a viewing for a property or showroom; attend one of our exhibitions, open-days or launches; correspond with us by post, phone, email or otherwise, contact us by social media, visit us in person; buy, sell, rent, let, lease, licence or reserve a property or buy a product, service or other good from us; fill in forms either on our site, at a property launch, or otherwise; request information about our properties, or related products, goods and services we may offer; subscribe to our any services or publications that we offer, or request marketing to be sent to you; and/or enter a competition, promotion or survey or provide feedback.
  • We may also get the following data about you from third parties: Contact data from property portals such as Rightmove and Zoopla where you have made an enquiry to be contacted about a Madina Mac; and Contact data from estate agencies where you have requested to be contacted by us.
  • We may get the following data about you from publicly available sources: Identity and Contact Data from publicly availably sources such as the Land Registry, Companies House, and the Electoral Register.
  • We may automatically collect data from or about you or your device: Technical data about your device and browsing; Profile data collected using cookies, online identifiers or other similar technologies. Please see our cookie policy for more information and details about how to opt-out.

We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. If you need details about the specific legal ground we are relying on to process your personal data then please contact us. If we need to process your personal data for a different purpose that is not compatible with the original purpose, then we will let you know. Please note that we may also process your personal data for a different purpose than listed above and without your consent where it is necessary for us to comply with our legal obligations.

Profiling for marketing purposes

Profiling is the automated processing of personal data to evaluate certain things about an individual. We use profiling to try to offer potential customers the properties, products and services most relevant to them. We Hubspot to assist us with such analytics.

You have the right to request that we stop profiling you, or asking third parties to use personal data we hold about you for profiling purposes. To do so, please contact us using the details in the ‘How do you contact us?’ section.

How can you opt out of marketing?

We only directly market to you by SMS and email where it is legally allowed, for example where you have consented or where you have purchased (or negotiated to purchase) from us and did not chose to opt out. When directly marketing to you we may use a combination of the data we hold about you to form a view on what we think you would be interested in.

We only want to market to users who actually want to hear from us. You can ask us to stop sending you marketing messages at any time by:

  • Selecting the opt-out link on any marketing message sent to you;
  • Emailing with your request; or
  • Writing to the address mentioned at ‘How to contact us?’ section.

If you do opt-out of marketing from us, please note that we may still need to contact you for reasons other than direct marketing (for example to carry out anti-money laundering checks where you are buying a property from us, or to arrange aftercare services to be provided during any warranty period you may benefit from).

If you are not opted-in for marketing and would like to be, please follow this link: In certain circumstances you may have given consent for us to pass your contact details to a third party so that they can offer their products or services to you. Where you have done so but no longer want to receive communications from them, you can contact them directly to opt-out.

How do we keep your data secure?

We understand the importance of keeping your data secure. We take all reasonably necessary steps to ensure that your data is treated securely, in accordance with this policy, in order to prevent your data being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. For example, in certain situations we use encryption for the storage and transfer of data and in other situations we use password protection. If we become aware of a data breach we will notify the Information Commissioner’s Office in a timely manner. We may also notify you if we believe the breach is serious.

How long do we keep your data for?

Under data protection laws, we cannot retain your personal data in a form that identifies you for longer than is necessary to fulfil the purposes for which we collected it. This may include for the purposes of satisfying any legal, accounting or reporting requirements.
We usually store personal data for 7 years, but there may be occasions where we need to store it for longer or shorter periods. For example, where you have purchased a property from us, we will keep your name, contact details, transaction history and any information included in correspondence for up to 10 years so that we are able to carry out our aftercare obligations.
In order to determine how long we store your personal data for, we take into consideration why we need to continue to store your personal data, whether we can achieve the same result without having access to your data, and what the potential risk is if there is a data breach that affects your data.
Occasionally we may anonymise data which means that it is no longer associated with you. We do this for statistical or research purposes so we can improve the services we offer to you. We can use anonymous data indefinitely without further notice to you.

Who do we share your personal data with?

We may share your personal data with the following third parties for the purposes set out in the table above:

  • Madina Mac Residency;
  • Managing agents who provide property services in relation to Galliard Group owned or managed developments;
  • Estate agents where you have consented, for example Life Residential Ltd based in the EEA;
  • Professional advisers acting for us or the Galliard Group company that you have a contract with;
  • Financial or payment processors where you are trying to arrange a payment to or from a Galliard Group company, such as World Pay based in the USA;
  • Utility companies who provide services to a property that you have purchased or are renting;
  • Joint venture partners of Galliard branded or co-branded property developments;
  • Service providers for us or the Galliard Group company that you have a contract with who provide database, IT and system administration services, such as Salesforce which is based in the USA;
  • Marketing providers and advisers acting for us or the Galliard Group company that you have a contract with;
  • The Land Registry, HM Revenue & Customs, National Crime Agency, the National House-Building Council, local authorities, regulators and other authorities based in the EEA who require reporting of processing activities in certain circumstances; and
  • Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

These third parties are required to respect the security of your personal data and treat it in accordance with the law. We do not allow them to use your personal data for their own purposes unless it is incidental to the services they are providing to you on our request.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded, for example by ensuring that country has been deemed to provide an adequate level of protection for personal data by the European Commission, using specific contracts approved by the European Commission, or where appropriate ensuring that they are part of the Privacy Shield (in the USA).

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

What legal rights do you have?

Subject to certain legal conditions, you have the right to:

  • Request that any inaccurate information we hold about you is corrected;
  • Request that we delete the personal data we hold about you in certain situations;
  • Request that we stop using your personal data for certain purposes;
  • Request that we do not make decisions about you using completely automated means;
  • Request that personal data we hold about you is given to you, or a third party chosen by you (where technically feasible), in a commonly used, machine-readable format;
  • Request information about and/or copies of the personal data that we hold and process about you; and/or
  • Prevent the use of your personal data for marketing purposes by using any of the steps at the ‘How do I opt-out?’ section.

To exercise any of the rights set out above, please contact us. We will usually respond to a request from you to exercise your rights within 1 month of receipt, but it might take longer if your request is particularly complex or if you have made a number of requests. Please note that the rights listed above may not apply in certain circumstances or specific exemptions may apply, and so we may not always be able or required to comply with your request to exercise these rights.

For more information on these rights please see:

Please be aware that we may need to process your personal data and/or request specific information from you to help us comply with your request. You will not usually have to pay a fee to exercise these rights, but we reserve the right to if your request is clearly unfounded, repetitive or excessive, alternatively we may refuse to comply with your request.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection issues. Before exercising this right, we encourage you to contact us first to resolve any complaint you may have, although this is not legally required. More details can be found here:

What about changes to this policy?

We reserve the right to update this policy to reflect any changes to the way in which we collect, process or share your personal data, or to reflect any legal requirements. When we make any changes, we will upload the new version to our site. The new version will take effect as soon as it is uploaded.
This policy was last amended on 8 July 2021 and supersedes any earlier versions.