Strettons is committed to protecting and respecting your privacy, and we value any personal data we have in our organisation. This policy, together with any other documents referred to in it, sets out the basis on how any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and the care in which it will be handled.
The Strettons website (strettons.co.uk) is owned and operated by Strettons.
WHO WE ARE
WHAT IS PERSONAL DATA?
Under the EU’s GDPR:
Personal Data is defined as “any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.
WHAT KIND OF PERSONAL DATA DO WE COLLECT?
A Data Controller is the individual or legal person who controls and is responsible to keep and use personal data in paper or electronic files. We are the data controller as defined by relevant data protection laws and regulation.
The lawful bases for processing are set out in Article 6 of the GDPR. At least one of these must apply whenever personal data is to be processed:
(a) Consent: you have given Strettons clear consent for your personal data to be processed for a specific purpose.
(b) Contract: the processing is necessary for a contract Strettons' have with the individual, or because Strettons' have asked the individual to take specific steps before entering into a contract.
(c) Legal obligation: the processing is necessary for Strettons to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e) Public task: the processing is necessary for Strettons to perform a task that is in the public interest or for its official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for Strettons’ legitimate interests, or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data that overrides those legitimate interests.
DATA SUBJECT RIGHTS
- The right of access.
- The right to rectification.
- The right to erasure or right to be forgotten.
- The right to restriction of processing.
- The right to be informed.
- The right to data portability.
- The right to object.
- The right not to be subject to a decision based solely on automated processing.
- The right to withdraw consent.
You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at firstname.lastname@example.org
WHAT KIND OF PERSONAL DATA DO WE COLLECT?
In order to provide lettings and sales services to our clients, we are required to process certain information about tenants and purchasers. We will only ask for details that are necessary to help you find or complete a transaction on a property. This includes details such as your name, email address, telephone number(s), credit records, workplace, professional specialism(s), bank statement, solicitor’s details, and other required information.
Where appropriate and in accordance with regulatory or legal requirements, we may also collect information related to your immigration status, sources of funds or details of any misconduct our clients may need to know about. We also collect your bank details to process payment of fees for other services which you contract from Strettons. We may use your email address and property requirement to send you relevant properties throughout your search, but you are free to opt-out and close your property search at any time or ask to be removed from our database.
If you are a buyer or a landlord, we need to collect and use information about you, or individuals at your organisation, in the course of providing you services such as:
- auctioning your property
- providing you with support in letting or selling your property (or assisting another organisation to do so)
- providing you with insurance services (or assisting another organisation to do so)
We will only collect what is necessary to carry out a service and for regulatory or legal requirements. We also ask for your bank details to process any fees payable or for payments for other services that you have instructed Strettons to provide.
We need a limited amount of information from our Suppliers to ensure that we can facilitate services or property transactions. To do this, we will ask for company email addresses and phone numbers of relevant individuals at your organisation so that we can communicate with you/them. We also need other information such as your bank details so that we can pay for the services you provide if this is part of the contractual arrangements between us.
HOW DO WE COLLECT YOUR PERSONAL DATA?
DIRECTLY FROM YOU
Personal data might be given to us in several ways including via:
- Entering your details on the website to subscribe to our mailing list
- Entering your details on the website to submit an enquiry about a property or service
- An application form, as part of the landlord/seller/buyer/tenant registration process
- A form to apply for a job at Strettons
- A form or other request for information about Strettons or a property(ies)
- Emailing your CV to Strettons for a job vacancy
- A form to participate in an auction
- An auction catalogue order
- A form to act as a guarantor
- A form to register for events and any hard copy registration at events
- Contacting us with enquiries or comments by telephone, email or hard copy correspondence
- Collecting your data through a contractual or commercial relationship with you
- Very rarely, but occasionally, we may obtain an email or mailing list through a reputable source in order to reach a new audience we think might be interested in our services
FROM A THIRD PARTY:
Personal data may be given to us by another organisation you have registered with and we may be required to process your data in order to complete services that you or the organisation expects of us. This could include one of the following:
- Property portals (Rightmove, Zoopla, etc.)
- Credit Reference Agencies
- Other regulatory bodies to check your financial conduct or history to comply with Anti-Money Laundering legislation or other legal regulatory instruments we are bound by.
WEBSITE USERS: We collect your data automatically through cookies when you visit our website, in line with cookie settings in your browser. We may collect information about your computer, operating system and browser type for system administration. This is statistical data about our users' browsing actions and patterns and does not identify any individual unless you choose to complete a form. More information on cookies and the data they capture on our site are below.
HOW DO WE USE YOUR PERSONAL DATA?
The personal information we record is used to communicate with you when you request information about a service or a property we are marketing. Data is processed by Strettons, and depending on which service Strettons is providing, we will have a set list of authorised suppliers that you will be made aware of before sharing your information.
No other third parties have access to your personal data unless it is specifically required to meet either contractual obligations or the legitimate interests of the company as defined under Article 5 of the General Data Protection Regulation (GDPR). If at any time you do not wish to receive further information about us and our services, all communications will provide an easy opt-out and opportunity to update preferences. If you want to be removed from all databases, please contact us: email@example.com.
HOW DO WE PROTECT YOUR PERSONAL DATA?
The data that we collect from you will be processed at our servers in the UK. It may also be processed by organisations operating in the EEA that Strettons has instructed.
If Personal Data is transferred outside the UK or EEA to a country without a designated adequacy rating Strettons will request the data subject's consent before processing the data. Consent will not be sought where the Processor's Binding Corporate Rules stipulate that the data will be processed in accordance with GDPR.
Strettons is certified for Cyber Essentials.
HOW DO WE UPHOLD YOUR RIGHTS TO USE PERSONAL DATA?
We aim to tailor our communications and ensure you are able to ‘opt-in’ to receive the information that you want. To achieve this, we will usually inform you, before collecting your data, if we intend to use your data for such purposes. You can exercise your right to prevent such processing by letting us know in writing. You will always have the right to ask us not to process your personal data for marketing purposes and you can exercise your right to erasure by contacting our Data Protection Officer, Simon Buchanan firstname.lastname@example.org.
INFORMATION WE MAY COLLECT FROM YOU
- Postal address if applicable
- Email address
- Phone number(s)
WHERE WE STORE YOUR PERSONAL DATA
Your data we collect may be transferred to and stored at our servers in the UK.
DISCLOSURE OF YOUR INFORMATION
We may disclose your personal information to third parties for reasons including the following:
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation
- In order to enforce or apply any agreements
- To protect the rights, property, or safety of Strettons or others
This includes exchanging information with other companies and organisations for the purposes of safeguarding or other statutory regulations we have to comply with.
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.
You can set your browser to not accept cookies and the above websites tell you how to remove cookies from your browser. However, some of our website features may not function as a result.
For further information on your rights and how to complain to the ICO, please refer to the ICO website https://ico.org.uk/concerns
Information Commissioner's Office
Tel: 0303 123 1113 (local rate)