1. BACKGROUND
1.1 SEGRO plc ("we" or "the Company") is a data controller for the purposes of applicable data protection laws, including the European Data Protection Regulation (“EU GDPR”), UK General Data Protection Regulation, (the “UK GDPR”) and the Data Protection Act 2018 (the “DPA” and together the “Data Protection Legislation”). This means we make decisions about how and why we process your personal data and because of this, we are responsible for the personal information we hold about you.
1.2 In accordance with the Data Protection Legislation, personal data must be processed in a lawful, fair, and transparent manner in relation to the data subject (i.e. you). Accordingly, an important part of the protection of your privacy is to inform you about the processing of your personal data. This privacy notice sets out what information we collect about you, how we will use it and for what purpose. This notice overrides anything different previously communicated to you.
1.3 As we undertake a wide range of activities, we’ve organised information into tables, reflecting the different ways you might interact with us, in order to help you get to the information you want quickly. This notice will apply to you if you:
1.3.1 are one of our service partners, suppliers or customers;
1.3.2 visitor to one of our buildings or offices;
1.3.3 party (or potential party) to a property transaction with us such as customers and joint venture partners;
1.3.4 are a current shareholder or former shareholder;
1.3.5 are engaged with us for marketing / advertising;
1.3.6 participate in one of our community investment programmes or Responsible SEGRO initiatives;
1.3.7 all data subjects;
1.3.8 website users.
1.4 Please note more than one section may apply to you. For example, a service partner may need to read the service partner section and the visitor section.
1.5 Please take the time to read and understand this privacy notice. If you have any queries, you may contact us using the details at the end of this notice.
2. SCOPE, PURPOSES AND LAWFUL BASIS OF PERSONAL DATA PROCESSED
2.1 Set out in the table below is a list of the ways that we may use your personal data, the reasons for doing so and lawful basis we rely on to do so. This is also where we tell you what our (or a third parties’) legitimate interests are.
| Relating to | Description of personal data | Why we use your personal data | Lawful basis |
| Our service partners, suppliers or customers including contractors and any representatives of such. |
|
|
Contract Legal obligation including with respect to:
Our Legitimate Interest: |
| Our service partners, suppliers or customers including contractors and any representatives of such - in connection with our customer Intelligence Platform: Introhive. |
|
|
Our Legitimate Interests:
|
| Visitor to one of our buildings or offices |
|
|
Consent Legal Obligation Our Legitimate Interests:
|
| Party (or potential party) to a property transaction with us such as customers and joint venture partners |
|
|
Legal obligation including with respect to:
Contract Legitimate Interests of us and our third parties:
|
| Current shareholder or former shareholder |
|
|
Consent Contract Legal Obligation including in relation to UK listed company compliance, regulations and laws |
| Engaged with us for marketing / advertising |
|
|
Our Legitimate Interests:
|
| Community stakeholders, participants in community investment programmes or Responsible SEGRO initiatives; |
|
|
Legal obligation Consent Our Legitimate Interests:
|
| All data subjects |
|
|
Consent Our Legitimate Interests:
|
2.2 We do not use your personal data for automated decision making.
2.3 If you do not provide personal data then, depending on the purpose for which the data is required, we may be unable to comply with our legal or contractual obligations. This may mean we may not be able to provide you with contractual or legal entitlements and may in certain situations not be able to enter into or continue any applicable engagement with you. Where information is not mandatory, we will make this clear, for instance we will explain if any data fields in our application or survey processes are optional and can be left blank.
2.4 Generally, we will only use your personal data for the purposes for which we collected it. If over time we consider that we have a different purpose we will ensure the reason is compatible with the original purpose and where appropriate and/or permitted, generally seek your consent to any new or changed processing.
2.5 Some areas of SEGRO premises are covered by CCTV. If you would like further information on our processing via CCTV, please request to see a copy of the CCTV Policy.
3. SEGRO WEBSITE
3.1 In relation to the use of the www.SEGRO.com website, SEGRO plc is the data controller. For website users, we will collect, process and store personal information about you which will include:
3.1.1 your name and email address when you contact us for information or to subscribe to our alert service on our website; and
3.1.2 in relation to business contacts: organisation, name, address, email address, telephone number and information related to our business relationship with you.
3.2 Most of the information described above comes directly from you but we do obtain some from third parties, for example, personal information may be passed to us by customers who, as your employer, may have designated you as their contact person.
3.3 When you visit our website, we collect some basic information such as your internet service provider's domain name, which pages you accessed on the site, and when. We use this information only to analyse the use of our website to help guide improvements, and we do not tie this to any information that can be used to identify you.
Cookies
3.4 When you visit our website, we use cookies, which are small pieces of information that allow them to maintain your connection to the website. Our website may use cookies for detecting what kind of device you have in order to present content in the best way, for a language switch and/or for other purposes. These cookies do not collect or store any personally identifiable information. You can refuse the use of cookies. For full details of our use of Cookies, please see our Cookie Policy.
How and why do we use your personal information?
3.5 We will use your information for the purpose of legitimate interests being pursued by us in relation to the services or properties that we provide. For example, we will use your information to contact you to discuss our services and properties (and any changes to them); to respond to any questions or concerns you have raised; to deal with administrative matters such as contacting you for business purposes; and (where applicable) to prevent fraud.
3.6 We may also provide marketing information to you in relation to our services or properties where you have given your consent, or we are otherwise legally entitled to do so, and it is in our legitimate interests to provide such information to you. If you do not wish to be contacted in this way, you can tell us by contacting us using the details set out at the end of the Privacy Policy or using the “unsubscribe” option in communications sent to you.
3.7 We may also use your information in order to comply with any legal obligation that we have, in connection with any legal proceedings, or in order to establish, exercise or defend our legal rights.
The Children’s Code
3.8 Protecting the privacy of young children is important. Our website is not directed to children under the age of 16, and we do not knowingly collect personal data from children under the age of 16 without obtaining parental consent. If you are under 16 years of age, then please do not use or access our website at any time or in any manner. If we learn that personal data has been collected on our website from persons under 16 years of age and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 16 years of age has used our website, then you may notify us immediately at one of the email addresses below and request that we delete that child’s personal data from our systems.
4. SOURCES OF PERSONAL DATA
4.1 We may collect personal information about you from any of the following sources:
4.1.1 Directly from you;
4.1.2 Internal sources;
4.1.3 Third parties: referees, government bodies and departments, law enforcement agencies and our suppliers, advisers and agents;
4.1.4 Publicly available registers or platforms including social or business networking sites such as X and Facebook (company level information only), and LinkedIn.
5. SHARING OF PERSONAL DATA
5.1 SEGRO may transfer personal data to third parties. This is so that we can run our business, comply with laws and rules that apply to us, where it is necessary to administer the terms of your engagement with us, or where we have another legitimate interest in doing so.
5.2 Our suppliers, service providers and agents are only permitted to process your personal data for specified purposes, in accordance with our instructions.
5.3 This table describes our sharing of personal data including who we share with, the reasons why and if any personal data is transferred outside of the UK and EEA.
| Relating to | Third Parties | Data Sharing Purposes | Transfers out of the EEA |
| Our service partners, suppliers or customers including contractors and any representatives of such. |
|
|
We may transfer your personal data outside the EEA (see below). |
| Our service partners, suppliers or customers including contractors and any representatives of such in connection with our customer Intelligence Platform: Introhive |
|
|
We may transfer your personal data outside the EEA (see below). |
| Visitor to one of our buildings or offices |
|
|
We do not transfer any of this personal data outside the EEA. |
| Party (or potential party) to a property transaction with us such as customers and joint venture partners |
|
|
We may transfer your personal data outside the EEA (see below). |
| Current shareholder or former shareholder |
|
|
We may transfer your personal data outside the EEA (see below). |
| Engaged with us for marketing / advertising |
|
|
We do not transfer any of this personal data outside the EEA. |
| Community stakeholders, participants in community investment programmes or Responsible SEGRO initiatives |
|
|
We do not transfer any of this personal data outside the EEA. |
| All data subjects |
|
|
We do not transfer any of this personal data outside the EEA. |
| All data subjects |
|
|
We may transfer your personal data outside the EEA (see below). |
6. STORAGE OF INFORMATION
6.1 Your personal data will be stored locally by us but may also be stored and backed up on servers located outside of the UK and European Economic Area (EEA). Please see section 6 below for information on how we safeguard your data in these circumstances.
7. INTERNATIONAL TRANSFERS OF PERSONAL DATA OUTSDIE THE EEA
7.1 We only send your personal data outside the EEA to:
7.1.1 Follow your instructions;
7.1.2 Comply with a legal duty;
7.1.3 Work with our group companies, suppliers and service providers that are based outside the EEA; or
7.1.4 Work with financial institutions and joint venture partners that are based outside the EEA.
7.2 If we transfer your personal data outside the EEA, we will implement one of the following safeguards:
7.2.1 Transfers to a non-EEA country that has been deemed to provide an adequate level of protection for personal information by the European Commission. For further details, see European Commission: Adequacy of the protection of personal information in non-EU countries. (The UK has published “adequacy regulations” in relation to countries within the EEA and some countries outside of the EEA, which means that these countries are considered under UK data protection law, to provide an adequate level of protection for personal data. (See the ICO’s guidance on international transfers for a list of countries deemed adequate.)
7.2.2 Put in place a contract with the recipient that means they must protect it to the equivalent standards as the EEA including standard contractual clauses for data transfers between EU and non-EU countries; the UK Information Commissioner’s International Data Transfer Agreement / Addendum and any other appropriate safeguard in place from time to time.
8. DATA RETENTION
8.1 We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. In many cases, this will require us to get your express consent to use your information for such an unrelated purpose.
8.2 Your personal information will only be retained for as long as is reasonably necessary. What this means in practice will vary as between different types of information, and when we consider our approach, we take into account the following:
8.2.1 the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data,
8.2.2 the purposes for which we process your personal data and whether we can achieve those purposes through other means,
8.2.3 if you have made a request to have your personal data deleted (see section 9 of this notice);
8.2.4 guidelines issued by relevant data protection regulators; and
8.2.5 the applicable legal requirements for example in relation to tax, health and safety, employment rights and potential or actual disputes or investigations.
8.3 When we no longer need your personal information, it will be deleted.
8.4 In relation to the processing activities carried out through Introhive, please note that data and information collected through the platform will be retained as long as necessary to pursue the objectives it was collected for, and generally, for reasons including efficiency and sustaining valuable relationships, until the termination of your customer/supplier relationship with us. In some circumstances data may be retained for a longer period to maintain a business contact with you and to continue maintaining business relationships for related purposes. Where appropriate, information will be removed from SEGRO’s internal systems or anonymised.
8.5 In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.
9. YOUR DATA ACCESS RIGHTS
9.1 You have certain additional rights, beyond receiving this notice, in relation to your personal data as summarised in the table below
| Rights | What does this mean? |
| The right to be informed | You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This notice is an example of this right. |
| The right of access | You have the right to obtain a copy of personal data relating to you (and other information) from us where we are processing it. This is so you are aware and can check that we are using your information in accordance with data protection law. |
| The right to rectification | You are entitled to have your information corrected if it is inaccurate or incomplete. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us. |
| The right to object | Under certain circumstances individuals have the right to stop or prevent the processing of their personal data by SEGRO. Individuals also have an absolute right to stop their data being used for direct marketing. |
| The right to erasure | This enables you to request the deletion or removal of your personal data where there is no compelling reason for us to keep using it. |
| The right to restrict processing |
You have the right to ‘block’ or suppress further use of your personal data that we process. This means that it can only be used for certain things, such as legal claims or to exercise legal rights. You can ask us to restrict the use of your personal data if it is not accurate; it has been used unlawfully but you don’t want us to delete it; it is not relevant any more, but you want us to keep it for use in legal claims; or you have already asked us to stop using your data but you are waiting for us to tell you if we are allowed to keep on using it. If we do restrict your information in this way, we will not use or share it in other ways while it is restricted. |
| The right to data portability | You have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that this data is transmitted to another party/controller where this is technically feasible. This right only applies to personal data you have directly provided to us (not any other information). |
| The right to lodge a complaint | You have the right to lodge a complaint about our handling or processing of your personal data to data protection regulators. (See section 9 for further details). |
| The right to withdraw consent | Where you have given your consent to us for the processing of any personal data, you have the right to withdraw your consent at any time (although this does not mean that any processing of personal data carried out by us with your consent up to that point is unlawful). |
10. CONTACTING US AND MAKING A COMPLAINT
10.1 To exercise your rights, raise any complaints or to contact us with any questions regarding the processing of your personal data, please contact us by dataprotection@segro.com.
10.2 If you are not satisfied with our response or you believe our use of your information does not comply with data protection law, you can make a complaint to the supervisory authority responsible for the territory in which your Controller operates. Contact details for the Supervisory Authorities are given below:
10.2.1 SEGRO plc, SEGRO Administration Limited, SEGRO Overseas Holdings Limited, SEGRO Properties Limited, Slough Trading Estate Limited, – please contact The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Phone: 44 1625 545 745
Email: international.team@ico.org.uk
10.2.2 SEGRO BV – please contact Autoriteit Persoonsgegevens, Prins Clauslaan 60 / P.O. Box 93374. 2509 AJ Den Haag/The Hague
Phone: 31 70 888 8500
Email: info@autoriteitpersoonsgegevens.nl
10.2.3 SEGRO Czech Republic s.r.o. – please contact The Office for Personal Data Protection, Urad pro ochranu osobnich udaju Pplk. Sochora 27, 170 00 Prague 7
Phone: 420 234 665 111
Email: posta@uoou.cz
10.2.4 SEGRO France SA – please contact Commission Nationale de l'Informatique et des Libertés – CNIL, 8 rue Vivienne, CS 30223, F-75002 Paris, Cedex 02
Phone: 33 1 53 73 22 22
10.2.5 SEGRO Germany GmbH – please contact Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit, Husarenstraße 30. 53117 Bonn
Phone: 49 228 997799 0
Email: poststelle@bfdi.bund.de
10.2.6 SEGRO Luxembourg S.á r.l. – please contact Commission Nationale pour la Protection des Données. 1, avenue du Rock’n’Roll, L-4361 Esch-sur-Alzette
Phone: 352 2610 60 1
Email: info@cnpd.lu
10.2.7 SEGRO Poland Sp zoo – please contact Office for Personal Data Protection, ul. Stawki 2, 00-193 Warszawa
Phone: 22 531 03 00
Email: kancelaria@uodo.gov.pl
10.2.8 SEGRO Spain Management S.L – please contact Agencia de Protección de Datos, C/Jorge Juan, 6, 28001 Madrid
Phone: 34 91399 6200
Email: internacional@agpd.es
10.2.9 SEGRO Italy S.r.l. – please contact Garante per la protezione dei dati personal, Piazza di Monte Citorio, 121, 00186 Roma
Phone: 39 06 69677 1
Email: garante@garanteprivacy.it
11. CHANGES TO THIS PRIVACY POLICY
11.1 The current version of the External Privacy Notice is 1.00.
11.2 We reserve the right to modify and/or update this privacy notice at any time. We may modify this notice to ensure it is accurate and up to date and to reflect changes in the law, the practice of the competent data protection authority, business needs and any new activity involving personal data processing. We will notify you when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
This policy was last updated on 1 May 2026.