Who We Are

Menuchah Property Group Limited (“we,” “us,” “our,” or “the Company”) is a UK-based property investment group operating across serviced accommodation, strategic property investments, and thoughtful developments.

Company Details:

• Registered Name: Menuchah Property Group Limited
• Company Number:
• Registered Office: 29A Thomson Avenue, Johnstone, PA5 8ST
• Contact Email: privacy@menuchah.com
• Website: www.menuchah.com

Our Commitment to Privacy

At Menuchah Property Group, we operate on principles of integrity, transparency, and respect. These values extend to how we handle your personal information. We are committed to protecting your privacy and being transparent about what data we collect, why we collect it, and how we use it.

This Privacy Policy explains your rights and our responsibilities under UK data protection law, particularly the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our Operating Divisions

This Privacy Policy covers all entities within our group:

• Menuchah Property Group Limited (Holding Company)
• Menuchah Stays Limited (Serviced Accommodation)
• Menuchah Investments Limited (Property Portfolio)
• Menuchah Developments Limited (Property Development)

When we refer to “Menuchah,” “we,” “us,” or “our,” we mean the relevant entity within our group that collects and processes your personal data.

Who This Policy Applies To

This Privacy Policy applies to:

Guests – Individuals booking serviced accommodation through Menuchah Stays
Property Owners – Landlords partnering with us on rent-to-rent agreements
Tenants – Individuals renting our investment properties
Business Partners – Joint venture partners, suppliers, contractors, professional advisors
Website Visitors – Anyone browsing our websites or social media
Newsletter Subscribers – Individuals receiving our communications
Job Applicants – Individuals applying for positions with us
Prospective Clients – Investors, landlords, or partners considering working with us

What This Policy Covers

This Privacy Policy covers personal data we collect:

• Through our websites (menuchahpropertygroup.co.uk and division websites)
• Via booking platforms (Airbnb, Booking.com, direct bookings)
• During property viewings and negotiations
• Through email, phone, and written correspondence
• At events, workshops, and networking meetings
• Through our social media channels
• From third-party sources (booking platforms, referrals, public records)

Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at privacy@menuchahpropertygroup.co.uk.

Understanding Our Legal Basis

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following legal bases:

A. Contractual Necessity

We process your data to fulfil contracts with you, including:

• Guest bookings – Processing reservations, check-in/out, payment
• Property agreements – Managing rent-to-rent or tenancy agreements
• Service contracts – Delivering services you’ve requested
• Partnership agreements – Joint venture arrangements

Example: When you book accommodation, we need your name, contact details, and payment information to complete the booking and provide the service.

B. Legal Obligations

We process data to comply with legal requirements, including:

• Tax reporting – Providing information to HMRC
• Anti-money laundering – Identity verification for property transactions
• Health & safety – Maintaining safety certificates and compliance records
• Employment law – Processing employee/contractor information
• Property law – Landlord registration, tenancy deposit schemes
• Financial regulations – Transaction records, invoicing

Example: We must retain certain financial records for 6 years to comply with tax law.

C. Legitimate Interests

We process data when necessary for our legitimate business interests, provided these don’t override your rights:

• Property management – Managing our portfolio effectively
• Business development – Identifying opportunities and partnerships
• Marketing – Promoting our services (with easy opt-out options)
• Security – Protecting our properties and guests
• Fraud prevention – Detecting and preventing fraudulent activity
• Service improvement – Analysing feedback to enhance our offerings
• Network building – Maintaining professional relationships

Example: We keep records of landlord inquiries to follow up on potential partnerships.

Your Rights: You can object to processing based on legitimate interests. Contact us at privacy@menuchahpropertygroup.co.uk.

D. Consent

For certain activities, we ask for your explicit consent:

• Marketing emails – Newsletters, property updates, offers
• Cookies – Non-essential website cookies
• Photography – Using photos of you in marketing materials
• Testimonials – Publishing your reviews or feedback
• Sensitive data – Processing special category data (rare)

Your Rights: You can withdraw consent anytime by clicking “unsubscribe” in emails or contacting privacy@menuchah.com

A. GUEST INFORMATION (Menuchah Stays)

When You Make a Booking:

• Identity Data: Full name, date of birth (if required), nationality
• Contact Data: Email address, phone number, postal address
• Booking Data: Arrival/departure dates, number of guests, special requests
• Payment Data: Payment method, billing address (card details processed by secure payment providers, not stored by us)
• Guest Preferences: Dietary requirements, accessibility needs, communication preferences
• Booking Platform Data: Information shared by Airbnb/Booking.com (profile, reviews, verification status)

During Your Stay:

• Communication Data: Messages, inquiries, requests during stay
• Access Data: Check-in/check-out times, access code usage (for security)
• Feedback Data: Reviews, ratings, complaints, compliments
• Incident Data: Reports of damages, issues, emergencies

Why We Collect This:

• Fulfil your booking contract
• Provide an excellent guest experience
• Ensure property security
• Meet legal obligations (tax, health & safety)
• Improve our services

B. PROPERTY OWNER/LANDLORD INFORMATION

When You Partner With Us:

• Identity Data: Full name, date of birth, proof of identity
• Contact Data: Email, phone, postal address
• Property Data: Address, ownership details, property characteristics
• Financial Data: Bank details (for rent payments), tax information
• Legal Data: Proof of ownership, mortgage details (if relevant), tax residency
• Correspondence: Emails, letters, meeting notes, agreements

Ongoing Relationship:

• Performance Data: Rental income, occupancy rates, property condition reports
• Maintenance Data: Repairs, inspections, compliance certificates
• Financial Data: Invoices, payment records, tax documents

Why We Collect This:

• Execute rent-to-rent or management agreements
• Make rental payments
• Maintain properties to agreed standards
• Comply with legal obligations (tax, anti-money laundering)
• Build long-term partnerships

C. TENANT INFORMATION (Investment Properties)

Application & Tenancy:

• Identity Data: Full name, date of birth, previous addresses
• Contact Data: Email, phone number, emergency contact
• Employment Data: Employer details, income verification
• References: Previous landlord references, employer references
• Financial Data: Bank details, rent payment history
• Identification: Passport/driving license copy (right to rent checks)

During Tenancy:

• Payment Data: Rent payments, arrears (if any)
• Maintenance Data: Repair requests, inspection reports
• Correspondence: Communications about tenancy matters
• Deposit Data: Tenancy deposit protection scheme details

Why We Collect This:

• Fulfil tenancy agreement obligations
• Comply with rthe ight to rent legislation
• Protect the deposit in the authorised scheme
• Maintain property and respond to issues
• Manage tenancy professionally

D. BUSINESS PARTNER INFORMATION

Joint Venture Partners, Investors:

• Identity Data: Name, business details, company information
• Contact Data: Email, phone, business address
• Financial Data: Investment capacity, bank details, tax status
• Professional Data: Experience, track record, references
• Due Diligence Data: Source of funds verification (anti-money laundering)

Suppliers, Contractors, Professional Advisors:

• Business Data: Company name, contact person, services provided
• Contact Data: Email, phone
• Financial Data: Bank details, invoices, payment terms
• Performance Data: Service quality, delivery timelines

Why We Collect This:

• Execute partnership and service agreements
• Make payments
• Manage professional relationships
• Comply with anti-money laundering regulations
• Evaluate performance and quality

E. WEBSITE VISITOR INFORMATION

When You Visit Our Websites:

• Technical Data: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, links clicked, referral source
• Cookie Data: Cookie preferences, tracking data (see Cookie Policy)
• Location Data: Approximate location based on IP address (country/city level)

When You Complete Forms:

• Contact Forms: Name, email, phone, message content
• Newsletter Signup: Email address, name, preferences
• Property Inquiry Forms: Contact details, inquiry details
• Download Forms: Email to access resources (e.g., investment guides)

Why We Collect This:

• Improve website functionality and user experience
• Respond to inquiries
• Send the requested information
• Analyse website performance
• Detect and prevent fraud

F. JOB APPLICANT INFORMATION

When You Apply for a Position:

• Application Data: CV/resume, cover letter, qualifications
• Identity Data: Name, contact details
• Professional Data: Work history, references, right to work documentation
• Assessment Data: Interview notes, skills assessments

Why We Collect This:

• Evaluate your application
• Conduct interviews and assessments
• Verify references and qualifications
• Comply with employment law
• Make hiring decisions

Retention: If unsuccessful, we retain application data for 6 months (in case similar roles arise). You can request deletion anytime.

G. SPECIAL CATEGORY DATA (Rare)

We generally avoid collecting sensitive personal data. However, in limited circumstances, we may process:

• Health Data: Only if you voluntarily disclose accessibility needs or health requirements for accommodation
• Criminal Convictions: Only for employees/contractors where legally required (e.g., working with vulnerable people)

Legal Basis: Explicit consent or legal obligation (employment law)

Extra Protection: Special category data receives enhanced security measures and limited access.

A. SERVICE DELIVERY

Providing Our Core Services:

• Process and fulfil bookings (guest accommodation)
• Manage property agreements (landlord partnerships)
• Administer tenancies (residential lettings)
• Execute joint venture agreements (partnerships)
• Deliver contracted services (all divisions)

Customer Support:

• Respond to inquiries and requests
• Handle complaints and resolve issues
• Provide assistance during stays
• Coordinate maintenance and repairs

---

B. BUSINESS OPERATIONS

Financial Management:

• Process payments and refunds
• Issue invoices and receipts
• Manage accounts payable/receivable
• Conduct financial reporting
• Prepare tax returns

Property Management:

• Maintain property condition records
• Schedule inspections and maintenance
• Manage compliance (safety certificates, licenses)
• Track occupancy and performance
• Coordinate housekeeping and cleaning

Legal Compliance:

• Fulfil regulatory obligations (tax, health & safety)
• Conduct right to rent checks (tenants)
• Verify identities (anti-money laundering)
• Protect deposits in authorised schemes
• Respond to legal requests (court orders, regulatory inquiries)

---

C. COMMUNICATION

Transactional Communications (No Opt-Out):

• Booking confirmations and updates
• Payment receipts
• Property agreement correspondence
• Important service updates
• Legal/regulatory notices

Marketing Communications (Opt-Out Available):

• Newsletters and updates
• New property listings
• Investment opportunities
• Blog posts and resources
• Event invitations
• Special offers

How to Opt Out: Click “unsubscribe” in any marketing email or email privacy@menuchahpropertygroup.co.uk

---

D. IMPROVEMENT & ANALYSIS

Service Improvement:

• Analyse guest feedback and reviews
• Identify service enhancement opportunities
• Test new features and offerings
• Benchmark performance against industry standards

Website Analytics:

• Understand how visitors use our websites
• Identify popular content and pages
• Improve navigation and functionality
• Optimise for different devices

Market Research:

• Understand market trends and demand
• Identify expansion opportunities
• Assess competitive positioning
• Inform strategic planning

---

E. MARKETING & BUSINESS DEVELOPMENT

Promoting Our Services:

• Advertise accommodation and investment opportunities
• Showcase properties and success stories
• Build brand awareness
• Generate leads for partnerships

Relationship Management:

• Maintain contact with past guests (with consent)
• Follow up on landlord inquiries
• Nurture business relationships
• Re-engage dormant contacts

Content Marketing:

• Create case studies (with consent)
• Publish testimonials and reviews
• Share educational content
• Demonstrate expertise and thought leadership

---

F. SECURITY & FRAUD PREVENTION

Protecting Our Business & Customers:

• Verify identities to prevent fraud
• Monitor for suspicious activity
• Protect properties from damage or misuse
• Investigate incidents or complaints
• Enforce terms and conditions

Legal Protection:

• Establish, exercise, or defend legal claims
• Respond to regulatory investigations
• Maintain records for dispute resolution
• Protect intellectual property

We do not sell your personal data. We share data only when necessary for legitimate business purposes or legal obligations.

A. SERVICE PROVIDERS (Data Processors)

We engage trusted third parties to provide services on our behalf. These partners process data under strict contracts ensuring GDPR compliance.

Professional Services:

• Accountants: Financial records, tax preparation
• Solicitors: Legal matters, property transactions
• Insurance Brokers: Policy administration, claims processing
• Property Inspectors: Compliance certificates, condition reports

Operational Services:

• Cleaning Companies: Property schedules, access arrangements
• Maintenance Contractors: Repair requests, property access
• Utility Providers: Account setup, billing
• Telecommunications: Phone and internet services

Contracts: All service providers sign Data Processing Agreements, ensuring:

• Data used only for specified purposes
• Appropriate security measures are in place
• Compliance with UK GDPR
• No unauthorised data sharing
• Data is deleted when no longer needed

---

B. REGULATORY & LEGAL AUTHORITIES

We share data when legally required:

• HMRC: Tax reporting, VAT returns, corporation tax
• Local Authorities: Licensing, planning applications, business rates
• Police/Law Enforcement: Criminal investigations (with valid legal request)
• Courts: Legal proceedings, court orders
• Regulators: Industry regulators, Information Commissioner’s Office (ICO)
• Tenancy Deposit Schemes: Deposit protection (legal requirement)

---

C. BUSINESS PARTNERS (With Consent or Legitimate Interest)

Joint Venture Partners:

• Share relevant data for partnership projects
• Financial performance data for co-owned assets
• Legal basis: Contract fulfilment, legitimate interests

Mortgage Lenders:

• Property and financial data for mortgage applications
• Tenant information (with consent) for buy-to-let applications
• Legal basis: Contract fulfilment, consent

Property Valuers:

• Property details for valuation purposes
• Legal basis: Legitimate interests (property management)

Estate Agents:

• Property and landlord data when marketing properties for rent/sale
• Legal basis: Contract fulfilment, legitimate interests

---

D. PROSPECTIVE BUYERS (Business Sale)

If we sell or reorganise our business:

• We may transfer personal data to prospective buyers
• Data will remain subject to this Privacy Policy
• We will notify you of any change in the data controller
• Legal basis: Legitimate interests (business sale)

---

E. SOCIAL MEDIA & ADVERTISING PLATFORMS

With your consent:

• Facebook/Instagram: Advertising and remarketing (anonymised where possible)
• LinkedIn: Professional networking, B2B marketing
• Google: Analytics, advertising

Your Control:

• Manage cookie preferences on our website
• Adjust privacy settings on social media platforms
• Opt out via privacy@menuchahpropertygroup.co.uk

---

F. THIRD PARTIES WE DO NOT SHARE WITH

We do NOT share your data with:

• ❌ Data brokers or list sellers
• ❌ Unrelated marketing companies
• ❌ Anyone for purposes unrelated to our services
• ❌ Any party without an appropriate legal basis or safeguards

---

Your Rights

You can request information about international transfers and safeguards by emailing privacy@menuchah.com

Security Measures

We implement robust technical and organisational measures to protect your personal data:

Technical Security:

• Encryption: Data encrypted in transit (SSL/TLS) and at rest (AES-256)
• Access Controls: Role-based access, multi-factor authentication
• Firewalls: Network security and intrusion detection
• Secure Hosting: Reputable, ISO 27001-certified providers
• Regular Backups: Encrypted backups stored securely
• Software Updates: Regular security patches and updates
• Anti-Malware: Endpoint protection and monitoring

Organisational Security:

• Staff Training: Regular data protection and security training
• Confidentiality Agreements: All staff sign NDAs
• Clear Policies: Documented data handling procedures
• Limited Access: “Need to know” principle, minimal access rights
• Incident Response Plan: Procedures for handling data breaches
• Regular Audits: Periodic security reviews and assessments
• Secure Disposal: Secure deletion of data when no longer needed

Physical Security:

• Locked Offices: Secure premises with access control
• Screen Locks: Automatic screen locking on devices
• Clean Desk Policy: No sensitive data left unattended
• Secure Document Destruction: Shredding of paper records

---

Data Breach Response

Despite our best efforts, no system is 100% secure. If a data breach occurs:

Our Response:

1. Contain the breach immediately
2. Assess the severity and impact
3. Notify the ICO within 72 hours (if legally required)
4. Inform affected individuals without undue delay (if high risk)
5. Remediate vulnerabilities
6. Document the incident and response

Your Protection:

• We will inform you of the nature of the breach
• We will advise on steps you can take to protect yourself
• We will provide support and answer questions

Report Concerns: If you suspect a data breach, contact security@menuchahpropertygroup.co.uk immediately.

We retain personal data only as long as necessary for the purposes for which it was collected or as required by law.

Retention Periods by Category

A. Guest Data (Menuchah Stays)

Until withdrawn or after 2 years of inactivity	Retention Period	Reason
Booking details	7 years after last stay	Tax law, contract disputes
Payment records	7 years	Tax law (HMRC requirement)
Guest preferences	Until opt-out or 3 years inactivity	Marketing, service improvement
Reviews/feedback	Indefinitely (anonymized after 2 years)	Service improvement, testimonials
Incident reports	7 years	Legal claims, insurance
Marketing consent	Until withdrawn or 2 years inactivity	Direct marketing

B. Property Owner/Landlord Data

Data Type	Retention Period	Reason
Agreement documents	7 years after termination	Contract law, tax law
Financial records	7 years	Tax law
Property inspection reports	Life of agreement + 7 years	Legal claims, disputes
Correspondence	7 years after last contact	Contract management
Performance data	Life of agreement + 2 years	Business analysis

C. Tenant Data

1 year after the end of tenancy	Retention Period	Reason
Tenancy agreements	7 years after the end of the tenancy	Contract law, tax law
Right to rent checks	1 year after end of tenancy	Legal requirement (Home Office)
Deposit records	7 years after return	Deposit scheme rules, disputes
Rent payment history	7 years	Tax law
References	7 years	Potential future references

D. Business Partner Data

Data Type	Retention Period	Reason
Partnership agreements	7 years after termination	Contract law
Due diligence records	7 years	Anti-money laundering law
Financial records	7 years	Tax law
Correspondence	7 years after last contact	Business records

E. Website Visitor Data

Until you unsubscribe or after 2 years of inactivity	Retention Period	Reason
Contact form submissions	2 years or until resolved	Inquiry management
Newsletter subscribers	Until unsubscribe or 2 years inactivity	Direct marketing
Analytics data	26 months (Google Analytics default)	Website improvement
Cookie data	See Cookie Policy	User preferences

F. Job Applicant Data

Data Type	Retention Period	Reason
Successful applicants	Moved to employee records	Employment
Unsuccessful applicants	6 months	Future opportunities
Speculative CVs	6 months	Future opportunities

---

Deletion & Anonymization

Automatic Deletion:

• Systems automatically flag data for deletion when retention periods expire
• Quarterly review and deletion process
• Secure deletion (data unrecoverable)

Anonymization:

• Some data (e.g., reviews, analytics) is anonymised after the retention period
• Anonymised data no longer considered personal data
• Used for statistical analysis and business intelligence

Early Deletion:

• You can request deletion before the retention period expires (subject to legal obligations)
• See the “Your Rights” section below

You have significant rights regarding your personal data. We respect and facilitate these rights.

A. RIGHT TO BE INFORMED

What: You have the right to know how we use your data.

How We Comply: This Privacy Policy provides comprehensive information. We also provide specific notices at the point of collection (e.g., booking forms, contact forms).

---

B. RIGHT OF ACCESS (Subject Access Request)

What: You can request a copy of the personal data we hold about you.

How to Exercise:

1. Email privacy@menuchah.com with subject “Subject Access Request”
2. Provide proof of identity (to prevent unauthorised disclosure)
3. Specify what data you want (optional – we’ll provide all if unspecified)

Our Response:

• We will respond within one month (extendable by two months if complex)
• Free of charge (unless the request is manifestly unfounded or excessive)
• We will provide data in a commonly used electronic format (PDF, Excel)

What You’ll Receive:

• Copy of your personal data
• Information about how we use it
• Who we share it with
• How long do we keep it
• Your rights regarding this data

---

C. RIGHT TO RECTIFICATION

What: You can ask us to correct inaccurate or incomplete data.

How to Exercise:

• Email privacy@menuchah.com with corrected information
• For minor updates (address, phone), you can update directly via your account/profile (where available)

Our Response:

• We will respond within one month
• We will correct inaccuracies without undue delay
• We will notify third parties if we’ve shared incorrect data

Examples:

• Incorrect name spelling in the booking
• Outdated contact details
• Inaccurate property information

---

D. RIGHT TO ERASURE (“Right to be Forgotten”)

What: You can request the deletion of your personal data in certain circumstances.

When This Applies:

• ✅ Data no longer necessary for original purpose
• ✅ You withdraw consent (where consent was the legal basis)
• ✅ You object to processing, and we have no overriding legitimate grounds
• ✅ Data processed unlawfully
• ✅ Legal obligation requires deletion

When We Can Refuse:

• ❌ We have a legal obligation to retain data (e.g., tax records)
• ❌ Data needed to establish, exercise, or defend legal claims
• ❌ Data necessary for contract fulfilment (e.g., ongoing tenancy)

How to Exercise:

• Email privacy@menuchah.com with da eletion request
• Specify what data you want deleted

Our Response:

• We will assess your request within one month
• If approved, we will delete the data and confirm
• If refused, we will explain why

---

E. RIGHT TO RESTRICT PROCESSING

What: You can ask us to limit how we use your data while issues are resolved.

When This Applies:

• ✅ You contest data accuracy (restriction during verification)
• ✅ Processing is unlawful, but you don’t want data deleted
• ✅ We no longer need data, but you need it for legal claims
• ✅ You’ve objected to processing (pending our verification)

Effect of Restriction:

• We can still store data
• We cannot use or share data (except with your consent, for legal claims, or public interest)

How to Exercise:

• Email privacy@menuchah.com explaining the grounds for restriction

---

F. RIGHT TO DATA PORTABILITY

What: You can receive your data in a structured, commonly used format and transmit it to another controller.

When This Applies:

• ✅ Processing based on consent or contract
• ✅ Processing is automated

What You’ll Receive:

• Data in CSV, JSON, or Excel format
• Only data you provided (not derived or inferred data)

How to Exercise:

• Email privacy@menuchah.com requesting portable data
• Specify format preference (if any)

Our Response:

• Provide data within one month
• Free of charge

---

G. RIGHT TO OBJECT

What: You can object to processing based on legitimate interests or for direct marketing.

Direct Marketing (Absolute Right):

• How to Object: Click “unsubscribe” in any marketing email or email privacy@menuchah.com
• Effect: We will stop all marketing immediately
• No Exceptions: We must comply

Processing Based on Legitimate Interests:

• How to Object: Email privacy@menuchah.com explaining your objection
• Effect: We will assess and stop processing unless we have compelling, legitimate grounds
• Examples: Objecting to profiling, analytics, and certain uses of data

---

H. RIGHTS RELATED TO AUTOMATED DECISION-MAKING

What: Protection from decisions based solely on automated processing (including profiling) that significantly affect you.

Our Position:

• We do not currently use automated decision-making or profiling
• If we introduce such processing, we will update this policy and notify affected individuals
• You would have the right to human intervention, express your view, and contest decisions

---

I. RIGHT TO WITHDRAW CONSENT

What: Where processing is based on consent, you can withdraw it at any time.

How to Exercise:

• Click “unsubscribe” in marketing emails
• Email privacy@menuchah.com
• Adjust cookie preferences on our website

Effect:

• We will stop processing immediately (except where another legal basis applies)
• Withdrawal doesn’t affect processing before withdrawal
• Your rights under existing contracts remain unaffected

---

How to Exercise Your Rights

Contact Us:

• Email: privacy@menuchah.com
• Post: Data Protection Officer, Menuchah Property Group Limited, Registered Address
• Subject Line: Specify the right (e.g., “Subject Access Request,” “Right to Erasure”)

What We Need:

• Proof of identity (to prevent unauthorised disclosure)
• Clear description of your request
• Any specific details (date ranges, data types, etc.)

Our Response Times:

• Standard: One month from receipt of a valid request
• Complex Requests: Up to three months (we’ll explain why)
• Free of Charge: Unless manifestly unfounded or excessive

If You’re Unhappy:

• Contact us first at privacy@menuchah.com
• We aim to resolve issues informally
• If unresolved, you can complain to the ICO (see Section 13)

What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and understand how you use the site.

Our Cookie Policy

For detailed information about cookies we use, see our full Cookie Policy at [menuchahpropertygroup.co.uk/cookies].

Types of Cookies We Use

Strictly Necessary Cookies (No Consent Required):

• Essential for website functionality
• Cannot be disabled
• Examples: Session cookies, security cookies

Performance/Analytics Cookies (Consent Required):

• Google Analytics: Website traffic and behaviour
• Help us improve user experience
• Anonymised where possible

Functional Cookies (Consent Required):

• Remember your preferences
• Examples: Language selection, cookie consent choices

Marketing/Advertising Cookies (Consent Required):

• Track you across websites
• Deliver targeted advertising
• Examples: Facebook Pixel, Google Ads

Your Cookie Choices

Managing Cookies:

• Cookie Banner: Manage preferences when you first visit
• Cookie Settings: https://menuchah.com/cookies
• Browser Settings: Disable cookies entirely (may affect functionality)

Third-Party Cookies:

• Booking platforms (Airbnb, Booking.com) may set their own cookies
• Social media platforms may track you via embedded content
• Manage via those platforms’ privacy settings

Do Not Track (DNT)

Some browsers send “Do Not Track” signals. We respect these signals for non-essential cookies.

External Websites

Our websites may contain links to third-party websites, including:

• Booking platforms (Airbnb, Booking.com)
• Social media platforms (LinkedIn, Facebook, Instagram)
• Property portals
• Partner websites
• Resource providers

Our Responsibility

• We are not responsible for third-party privacy practices
• Third-party sites have their own privacy policies
• We encourage you to read their policies before providing data

Trusted Partners

While we link to reputable platforms, we cannot guarantee their data protection standards. Exercise caution when sharing personal information externally.

Contact Us First

If you have concerns about how we handle your data:

Email: privacy@menuchah.com
Post: Data Protection Officer, Menuchah Property Group Limited, Registered Address

We aim to resolve complaints informally and quickly.

---

Information Commissioner’s Office (ICO)

You have the right to complain to the UK data protection authority:

Information Commissioner’s Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

When to Contact ICO:

• You believe we’ve violated data protection law
• You’re unsatisfied with our response to your complaint
• You want independent advice on data protection

ICO Powers:

• Investigate complaints
• Issue fines for non-compliance
• Order corrective actions
• Provide guidance and mediation

Updates

We may update this Privacy Policy periodically to reflect:

• Changes in our business practices
• New legal requirements
• Technological developments
• Feedback from users or regulators

How We Notify You

Significant Changes:

• Prominent notice on our website
• Email notification to registered users
• Updated “Last Updated” date at the top of the policy

Minor Changes:

• Updated policy published on the website
• Updated “Last Updated” date

Your Acceptance

Continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

Exception: If changes require new consent, we will explicitly seek it before implementing them.

Version History

Version 1.0 – February 2026: Initial publication

General Privacy Inquiries

Email: privacy@menuchah.com
Post: Data Protection Officer, Menuchah Property Group Limited, Registered Address

• Privacy Requests: Within one month
• General Inquiries: Within 5 business days
• Urgent Matters: Within 48 hours

---