1.Who this policy describes
This policy explains how WFSC MALL DRIVE HOLDINGS, LLC handles personal information whenever anyone uses the WFSC Mall website, writes to the dispatch desk, visits the concourse, or opens a conversation about a retail unit. It is written for tenants, prospective retailers, staff who work on the property, visitors to the centre, and members of the public who submit an enquiry through this site. The developer of the website is WFSC Mall, and this policy sits beside the Terms of Service to give every person a clear and honest account of how their details are treated.
The language in this policy is kept plain so that a person with no legal training can follow it. Nothing in this policy is meant to hide detail behind technical terms. Where a technical word is unavoidable, an explanation is added in the same sentence.
2.Who we are
The organisation responsible for the information described in this policy is WFSC MALL DRIVE HOLDINGS, LLC. The registered business centre and postal address is 9045 S 1300 E Ste 101, Sandy - 84094-3134, United States (US).
For any question about this policy, or about how personal information is used, the first place to write is the dispatch desk at 9045 S 1300 E Ste 101, Sandy - 84094-3134, United States (US). The desk can also be reached by email at dispatch@wfscmall.lat or by telephone on +18145813730. Where this policy speaks of the Company, it means WFSC MALL DRIVE HOLDINGS, LLC and any party acting on its behalf under contract.
3.What personal information means
Personal information is any piece of data that can be used, on its own or with other data, to identify a living person. A name on its own is personal information. An email address is personal information. A telephone number, a postal address, or a set of records about a single enquiry can all become personal information once they point back to one individual.
This policy treats the term broadly and carefully. It covers information that a person gives on purpose, information that is observed as they use the site, and information that arrives with an enquiry by email, telephone, form, or letter. Information that cannot identify a person, and which is stored in a form that can never be tied back to a person, falls outside the reach of this policy.
4.Information we collect
The Company collects only the detail that a genuine conversation about the mall requires. The categories are kept narrow and are listed here so nothing takes a person by surprise.
Information a person provides
- Names, including a first name and surname, offered through the contact form or in correspondence.
- Email addresses and telephone numbers provided so the desk can reply.
- The subject and message of any enquiry, together with any files a person chooses to attach.
- Billing and lease details for tenants, supplied under a separate tenancy agreement.
- Details given in person at the dispatch counter or over the duty line.
No one is required to provide personal information. Anyone who prefers not to share details can still browse this site, read the services, and view the atrium plan without logging in or identifying themselves. The choice to stay anonymous is respected completely; the desk never insists that a person supply a name merely to ask a general question about the building or the events calendar.
When a person does choose to share detail, the record is matched to the reason it was shared. An enquiry sent for a fit-out works its way through the tenant run, while a note about a lost item in the food terrace stays firmly within the small circle of staff who can help reunite it. Every record carries within it the memory of why it was created, so it can be reviewed, corrected, or retired at the right time without guesswork.
5.How we use the information
Personal information is used only for the purposes that a reasonable person would expect from the moment they share it. The main purposes are set out below.
- To answer enquiries about leasing, fit-out, maintenance, events, and property operations.
- To keep the tenant roster and the service history that keeps each suite trading.
- To coordinate the tenant run, from the first report to the signed off inspection.
- To manage access to the building for contractors and visiting trades.
- To respond to enquiries about events and to send confirmations for a booking.
- To communicate urgent building notices relevant to the safety of occupants.
- To meet legal, accounting, and insurance obligations placed on the landlord.
The Company does not sell personal information and does not rent it to advertisers. There is no practice of swapping contact lists with outside brands so that mail can be sent to tenants by third parties.
6.Lawful basis for processing
Any handling of personal information is anchored to a lawful reason. The Company relies on the grounds that follow, choosing whichever fits the situation at hand.
- Consent, where a person chooses to send the desk an enquiry or to receive a reply.
- Performance of a contract, where the details belong to a tenant or a supplier under a signed agreement and are needed to run the tenancy.
- Legal obligation, where records must be kept to satisfy law, tax, or insurance rules.
- Legitimate interest, where the use is fair, limited, and balanced against the rights of the individual, such as keeping the building secure or maintaining the tenant service history.
Where consent is the basis, consent can be withdrawn at any time without penalty by writing to the dispatch desk, and any lawful processing already completed will not be undone.
7.Privacy for children
This website and the concourse services it describes are aimed at responsible adults who run or rent retail space. The site is not designed to attract children, and the Company does not knowingly collect personal information from children under a certain age.
If a parent or guardian believes that a child has sent personal information to the desk through the mailto form or any other channel, the parent should write to the dispatch desk at 9045 S 1300 E Ste 101, Sandy - 84094-3134, United States (US) without delay. The Company will take reasonable steps to remove the information from active records and to confirm that removal in writing.
10.Service providers and contractors
The dispatch desk works with a set of trusted service providers to keep the building running. These parties may handle small amounts of personal information on the instruction of the Company and under a written duty of care. Examples are the firms that run the security patrol, the trades that attend maintenance jobs, and the hosts that keep the website online.
Each provider is expected to process information only for the task agreed, to protect it with reasonable safeguards, and to return or delete it when the task is finished. The Company reviews these arrangements as part of its normal housekeeping and will not approve a provider that cannot show a fitting standard of care.
11.Retention of information
Personal information is held only as long as it is genuinely needed for the purpose for which it was collected, and no longer. That period varies by purpose.
- Simple website enquiries are normally kept for a short window and then removed once the matter is closed and no further correspondence is expected.
- Tenant and contractor records follow the terms of the relevant tenancy or contract, plus any period required by tax or accounting law.
- Security and access logs are kept only for the short operational window that lets the team investigate an incident, then overwritten.
- Records that exist only to meet a legal obligation are deleted as soon as that obligation lapses.
When a retention period ends, the information is deleted or rendered anonymous so it can no longer identify a person. Nothing is kept on the chance that it may become useful later.
A habit of prompt deletion also protects the people who send enquiries. A maintenance request that is closed and signed off does not need to sit in a drawer for years, so it does not. The desk treats every record the way it would want its own contact details treated, which is to say it holds them only for the working conversation and lets them go cleanly when the conversation is over. Where law asks a record to remain longer, as with tenancy accounting, that longer life is enforced by the rule rather than by convenience.
12.Protecting the information
The Company applies sensible safeguards to match the sensitivity of what is held. Physical files sit in a locked office behind the security layer of the building. Digital records sit behind access controls that are given only to staff who need them for the work. Access to the tenant service history is limited to the coordination team that runs the tenant run.
Storage in transit uses the ordinary protections of the hosting layer, and messages sent to the dispatch desk travel over the standard secure channel that the site uses. No method of transmission is ever guaranteed to be completely safe, but the Company applies reasonable and proportionate controls and reviews them as part of its ordinary routine, and asks staff and providers to do the same.
13.Your rights over personal information
Depending on where a person lives and the law that applies to them, the Company offers the rights commonly attached to personal information. Each right is respected in full and answered without unreasonable delay.
- The right to access a copy of the personal information held about them.
- The right to ask for details to be corrected where they are incomplete or wrong.
- The right to ask for deletion where the information is no longer needed.
- The right to object to a use grounded only in legitimate interest.
- The right to ask for the processing to be limited while a dispute is checked.
- The right to request the information in a machine-readable form where it is held electronically.
- The right to raise a concern with the relevant supervisory authority.
To exercise any of these rights, write to the dispatch desk with enough detail to confirm identity, and the matter will be handled fairly and promptly. The Company may ask for a little extra detail only where it needs to be sure it is answering the right person.
14.Email and the mailto form
The contact form on this site opens an email draft addressed to dispatch@wfscmall.lat using the mail window of the visitor. The visitor chooses what to send and when to send it, so nothing leaves a computer unless the visitor presses send in the mail client.
An email to the duty address is treated as correspondence with the dispatch desk. The message, the subject, and the return address are used to answer the enquiry and are held under the retention and security rules set out earlier in this policy. Anyone writing should not place sensitive files or financial account numbers in the body of a message if a more secure channel can be agreed with the desk.
15.Transfers across borders
The registered address of the Company is in the United States, and the day to day handling of personal information happens in the country where the building and the desk are located. Where information is received from a person based in another country, or where a hosting service stores data in a location different from the enquirer, the information may cross a national border.
Where such a transfer happens, the Company relies on channels that carry a recognised level of protection, and applies the same care to the record once it crosses. The overall standard is that information should be kept no less safe by being held in one country rather than another.
The effect for the reader is simple. Anyone writing to the desk from overseas should know that a reply may originate from the United States and that the governing rules of the Company sit there, while the practical safeguards described across this document travel with the record wherever the hosting vendor holds it. A person who is uneasy about a cross border reply is welcome to ask for correspondence to be handled in writing by post instead, and the desk will do what it reasonably can to accommodate that request.
16.Automated decisions
The dispatch desk does not use personal information to make significant decisions about people by automated means alone. No computer chooses whether a person can rent a unit, sets a rent figure, or decides an outcome of an enquiry without a human being reviewing the case.
Where small automated tools help with housekeeping, such as sorting an enquiry into an inbox or flagging an overdue inspection, a staff member always stands behind the decision that matters to the individual. This policy confirms that meaningful choices about people are made by people.
17.Links to other places
This site may from time to time link to a government authority, a professional body, or a service that a tenant relies on. Once a person leaves the WFSC Mall site, the reading behaviour and any details they share fall under the policy of that other site, not under this one.
The Company encourages each visitor to read the policy of any linked site before sharing personal information there. A link on this page is not an endorsement that the other site is subject to this policy, and the Company does not control how outside pages handle the details sent to them.
18.Changes to this policy
This policy may be revised from time to time as the site, the building, or the law evolves. When a revision is made, the date at the top of the page is updated so that returning visitors can see at a glance how recently the text was reviewed. Material changes are noted clearly rather than buried in a long page of small print.
A continuing use of the site after a revision appears counts as acceptance of the updated policy. Anyone who would rather not be bound by the new text is free to stop using the site and to ask the desk how the previous position applied to any standing enquiry. The most recent version of this policy will always be the version shown on this page.
19.How to contact the desk
WFSC MALL DRIVE HOLDINGS, LLC
9045 S 1300 E Ste 101, Sandy - 84094-3134, United States (US)
Email: dispatch@wfscmall.lat
Telephone: +18145813730
Developer of the website: WFSC Mall
Write to the desk about this policy, about a request to see, correct, or delete personal information, or about any concern at all that touches privacy. The desk confirms receipt of a data request and works through it fairly and without unnecessary delay. A visitor who remains unsatisfied after a reply may take the matter to the supervisory authority that applies to the place they live.