GDPR AND PRIVACY POLICY

We comply with GDPR by ensuring that personal data is:

• Processed lawfully, fairly, and transparently
• Collected for specific, legitimate purposes
• Adequate, relevant, and limited to what is necessary
• Accurate and up-to-date, corrected where necessary
• Securely processed to prevent loss, destruction, or unauthorised access
• Protected when transferred internationally

We collect and process the following personal data:

• Personal information: name, address, telephone, email
• Identification documents: passport, driving licence, bank statements, council tax statements (as required by Money Laundering Regulations 2003 & Proceeds of Crime Act 2002)
• Collected at various stages and securely stored in our IT systems and files

We process data:

• To manage customer relationships and business transactions
• For marketing purposes (with consent)
• To comply with legal obligations and regulatory requirements

We may share personal data with trusted third parties, including:

• Software providers, contractors, debt collection agencies, legal advisors
• Local authorities, utility companies, regulatory bodies where required by law
• Third parties with explicit consent or as required for tenancy/property management contracts
• Overseas transfers: data is transferred only with adequate protection safeguards

We implement robust measures to protect your personal data, including:

• Encrypted storage and secure servers for digital records
• Physical security controls for paper files and office locations
• Access control restrictions limiting data access to authorized personnel only
• Regular security reviews, system updates, and staff GDPR training

Personal data will be retained for as long as necessary to fulfill the purposes set out in this policy, including:

• For active customer relationships and contract management
• 6 years following the end of tenancy/business relationship for statutory accounting and legal purposes
• Subject to periodic reviews to securely erase data no longer required

Under GDPR, you have rights regarding your personal data:

• Right to access, rectify, or request erasure of your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time where processing is based on consent

If you have a concern about our data processing, please contact us first. If unresolved, you may contact the Information Commissioner's Office (ICO):

• Please contact us first to resolve any privacy issues or queries
• You have the right to lodge a complaint with the ICO (Information Commissioner's Office)
• We aim to handle all inquiries promptly, fairly, and transparently