Privacy Notice
Draft for solicitor and privacy review before production use. Last updated 8 October 2026.
Status and service operator
Draft for solicitor/privacy review. The service operator’s legal name, registered address, privacy contact and applicable lawful bases must be confirmed before onboarding production customers. Use the contact form for enquiries while these details are completed.
Who is responsible
The warehouse customer determines the purposes of processing its operational records and normally acts as controller. WarehouseMargin is intended to process those records on the customer’s documented instructions. The service operator separately determines how it handles its own sales enquiries, account administration and billing; the signed agreements must confirm the respective roles.
Information processed
Company and work contact details, user identity, customer and supplier records, extra-work details, uploaded evidence, approval responses, promise history and audit events. Avoid uploading special-category data or unrelated personal information. Approval codes verify mailbox access; signing authority remains the respondent’s responsibility.
Purpose and access
Data supports the requested warehouse exception workflows, access control, approved communication and billing. Authorised workspace colleagues can access their tenant’s records according to their roles. A customer approval link exposes only its selected snapshot after email verification.
Providers and international processing
Review the Subprocessor List. Exact contracted providers, processing locations and transfer arrangements must be confirmed before production use; UK-only residency is not promised. AI review uses only approved tenant access and requires a configured service connection.
Retention and rights
The retention schedule is awaiting agreement. Workspace administrators can export records and record export/deletion requests through Readiness & data. Requests require review for identity, authority and legal retention obligations; they do not immediately delete records. Contact the service operator for access, correction, objection or other applicable rights. You may also raise a concern with the ICO.