1. Who we are
This website is operated by Premium Real Estate Investment Ltd, a company registered in England and Wales (company number [company number – to be confirmed]), whose registered office is at [registered office address – to be confirmed]. We are an estate agency and property advisory business.
For the purposes of UK data protection law we are the data controller of the personal data described in this policy. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO registration number – to be confirmed], and we are a member of [The Property Ombudsman / Property Redress Scheme – to be confirmed].
If you have any questions about this policy or how we handle your information, please email privacy@example.co.uk.
2. Information we collect
We collect personal data in the following ways.
Information you give us
- Enquiries and viewings – your name, email address, telephone number, the property or service you are interested in and any details you include in your message.
- Account registration – if you create an account: your name, email address, password (stored in encrypted form) and your saved searches or properties.
- Buying, selling, letting or renting – information needed to provide our services, such as your address, budget and property requirements, proof of identity and address, proof of funds or mortgage in principle, and details of your solicitor.
- Landlords and tenants – information needed to arrange and manage a tenancy, including referencing and Right to Rent checks.
- Valuations – details of the property to be valued and your contact information.
Information collected automatically
- Technical data – when you visit the website, our hosting provider automatically records standard server logs, such as your IP address, browser type, pages requested and the date and time of your visit. These are used to keep the website secure and working properly.
- Saved properties – if you save a property using the heart icon, that list is stored only in your own browser (see section 9). It is not sent to us.
Information from third parties
- Identity verification and anti-money-laundering check providers, credit reference and tenant referencing agencies.
- Solicitors, conveyancers, mortgage brokers and lenders involved in your transaction.
- Property portals and partners that pass your enquiry to us.
- Publicly available sources such as HM Land Registry and Companies House.
We do not intentionally collect special category data (such as health information). If you choose to share it with us – for example, to explain accessibility needs for a viewing – we will only use it for that purpose and with your explicit consent.
3. How we use your information
We only use your personal data where the law allows. The table below explains our purposes and the lawful basis we rely on.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and arranging viewings or valuations | Taking steps at your request before entering a contract; legitimate interests |
| Providing our sales, lettings, advisory and management services | Performance of a contract |
| Identity verification and anti-money-laundering checks | Legal obligation (Money Laundering Regulations 2017) |
| Right to Rent checks and tenancy deposit protection | Legal obligation |
| Managing your account and saved searches | Performance of a contract |
| Keeping records, handling complaints and defending legal claims | Legal obligation; legitimate interests |
| Keeping our website secure and improving our services | Legitimate interests |
| Sending property alerts and marketing by email | Consent (you can withdraw it at any time) |
Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
5. International transfers
Some of our service providers – including our website hosting provider – may store or process data outside the UK, for example in the European Economic Area or the United States. Whenever your data is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as a UK adequacy decision, the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework. You can ask us for more information about these safeguards.
6. How long we keep it
We keep personal data only for as long as we need it, and then delete or anonymise it securely. As a guide:
- General enquiries that do not lead to instructions – up to 2 years after our last contact.
- Identity verification and anti-money-laundering records – 5 years after the end of the transaction or business relationship, as required by law.
- Transaction, tenancy and client records – 6 years after the matter ends, so we can deal with any questions or legal claims.
- Account data – while your account is open, and for up to 30 days after you close it.
- Marketing preferences – until you unsubscribe, after which we keep a record so we do not contact you again.
- Server logs – kept by our hosting provider for a short period for security purposes.
7. Keeping your data secure
We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), access controls, secure password storage and staff confidentiality obligations. No method of transmission over the internet is completely secure, but we work hard to protect your information and will notify you and the ICO of a data breach where we are legally required to.
8. Your rights
Under UK data protection law you have the right to:
- Access – ask for a copy of the personal data we hold about you.
- Rectification – ask us to correct inaccurate or incomplete data.
- Erasure – ask us to delete your data where there is no good reason for us to keep it.
- Restriction – ask us to limit how we use your data in certain circumstances.
- Portability – ask us to transfer data you gave us to you or another organisation.
- Objection – object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent – where we rely on your consent, you can withdraw it at any time.
To exercise any of these rights, email privacy@example.co.uk. There is usually no charge, and we will respond within one month. We may need to verify your identity first. Some rights are limited by law – for example, we must keep anti-money-laundering records for the required period even if you ask us to delete them.
10. Marketing
We will only send you property alerts, newsletters or other marketing emails if you have asked us to. Every message includes an unsubscribe link, and you can also opt out at any time by contacting us. We will never pass your details to third parties for their own marketing.
11. Children
Our website and services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time to reflect changes to our services or the law. The “last updated” date at the top shows when it was last revised. Where changes are significant, we will let you know by email or through a notice on this website.
13. Contact us and complaints
If you have any questions or concerns about how we use your personal data, please contact us:
Premium Real Estate Investment Ltd
1 Placeholder Street, Mayfair, London W1K 0AA
Email: privacy@example.co.uk
Telephone: +44 (0)20 0000 0000
We hope to resolve any concern you raise with us. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: visit ico.org.uk/make-a-complaint or call 0303 123 1113.
See also our Terms of Service.