Last updated: October 2026
We are committed to protecting personal data in accordance with the United Kingdom General Data Protection Regulation and Data Protection Act 2018. This page provides detailed information about how we comply with data protection principles and respect your rights as a data subject.
For the purposes of data protection legislation, we act as the data controller when processing personal information collected through our website and during the provision of property advisory services. Our contact details are available on our contact page.
We process personal data only when we have a lawful basis to do so. The specific legal basis depends on the purpose of processing:
When you engage our services, we process personal data to fulfil our contractual obligations. This includes conducting property searches, coordinating viewings, providing advisory services, and maintaining records of our professional engagement. Processing for contract performance does not require your separate consent as it is necessary to deliver the services you have requested.
We may process data based on legitimate business interests, such as improving our services, maintaining business records, and ensuring website security. Before relying on legitimate interests, we conduct assessments to ensure such processing does not override your fundamental rights and freedoms.
In certain situations, we request your explicit consent before processing personal data. This includes sharing your information with property owners or representatives, sending marketing communications, or processing data for purposes beyond our core service delivery. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.
We process personal data when required to comply with legal obligations, such as maintaining records for tax purposes, responding to lawful requests from authorities, or fulfilling regulatory requirements applicable to property advisory services.
Under data protection legislation, you have several rights concerning your personal information. These rights are detailed below along with how to exercise them.
You may request confirmation of whether we process your personal data and, if so, access to that data along with information about how it is processed. We provide one copy of your data free of charge. Subsequent requests may incur a reasonable administrative fee.
If personal data we hold is inaccurate or incomplete, you may request correction or completion. We will make requested amendments within one month unless the request is particularly complex.
You may request deletion of personal data in certain circumstances, including when data is no longer necessary for the purposes for which it was collected, when you withdraw consent upon which processing is based, or when data has been processed unlawfully. This right is not absolute and may be limited by legal obligations requiring us to retain certain records.
You may request restriction of processing in specific situations, such as when you contest the accuracy of data, when processing is unlawful but you prefer restriction over erasure, or when you have objected to processing pending verification of legitimate grounds.
Where processing is based on consent or contract performance and is carried out by automated means, you may request to receive your data in a structured, commonly used, machine-readable format. You may also request direct transmission of this data to another controller where technically feasible.
You may object to processing based on legitimate interests or for direct marketing purposes. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
We do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects concerning you.
To exercise any of these rights, please contact us using the details on our contact page. We will respond to requests within one month of receipt. If the request is particularly complex or you have made multiple requests, we may extend this period by two additional months, in which case we will inform you of the extension and the reasons for delay.
We may request additional information to verify your identity before fulfilling requests, particularly for access or erasure requests. This verification protects against unauthorised disclosure or deletion of personal data.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include:
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay. Notification will include the nature of the breach, likely consequences, and measures taken to address the breach and mitigate potential adverse effects. Where required by law, we will also notify the relevant supervisory authority within seventy-two hours of becoming aware of the breach.
When we engage third-party service providers to process personal data on our behalf, we ensure they provide sufficient guarantees regarding security and confidentiality. We maintain written agreements with processors specifying their obligations and ensuring they process data only according to our documented instructions and in compliance with data protection requirements.
Personal data is primarily processed within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses approved by relevant authorities, or other legally recognised transfer mechanisms. You may request information about specific safeguards applied to international transfers of your data.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. Specific retention periods vary depending on the type of information and purpose of processing:
After retention periods expire, personal data is securely deleted or anonymised such that it can no longer identify individuals.
We do not knowingly process personal data of individuals under sixteen years of age. Our services are directed to adults, and we do not intentionally collect information from children. If we become aware of inadvertent collection of children's data, we will delete it promptly.
You have the right to lodge a complaint with the Information Commissioner's Office, the supervisory authority for data protection in the United Kingdom, if you believe we have processed your personal data in violation of applicable data protection requirements. Contact details for the ICO are available at ico.org.uk.
We may update this GDPR compliance information periodically to reflect changes in our data processing practices or applicable legal requirements. Significant updates will be communicated through our website, and the revision date will be updated accordingly. We encourage periodic review of this page to stay informed about how we protect your personal data.
For questions, concerns, or requests related to data protection and your rights under GDPR, please contact us using the details provided on our contact page. We are committed to addressing data protection enquiries promptly and transparently.