Privacy Policy

Last updated: 20 May 2026

Introduction

We are committed to protecting your privacy. This Privacy Notice sets out our privacy practices and explains how we collect, process, hold and store (collectively referred to as 'handle') your personal data, and with whom we share it.

The information we handle is only that which is required to deliver the services you request. Except as set out in this Privacy Notice, we do not supply your data to any other company for marketing purposes.

We are registered as a data controller with the Information Commissioner's Office (ICO), the UK's independent body set up to uphold information rights. As a data controller, we are required to comply with UK data protection law — including the UK GDPR and the Data Protection Act 2018 — when processing personal information.

You may browse our website without identifying yourself or providing any personal information. We only collect information required to deliver site functionality, requested information, or our services.

By using our services, you consent to the handling of your data in line with this Privacy Notice. This Notice is reviewed regularly and may be updated. We will notify you by email of any changes and provide a copy of the updated Notice.

What is Personal Data?

Personal data means any information relating to an identifiable individual — someone who can be directly or indirectly identified, in particular by reference to an identifier such as a name, email address, job title, or online identifier.

What Personal Data Do We Collect?

We may collect the following categories of personal data:

Personal Details – Full name, title, date of birth, job description, National Insurance number, passport number.
Contact Details – Telephone number, mobile number, correspondence address, email address.
Financial Details – Employer, salary, bank account details.

How We Collect Your Data

We collect personal data through the following means:

Communications – We may record and store telephone, postal, email or other electronic communications you send us, to maintain accurate records of instructions and information provided.
Website Analytics – We collect anonymised statistics on pages visited, navigation paths, and search terms used to reach us, in order to improve user experience and site design.
Online Forms – We collect data entered into our online and contact forms. Appropriate technical and organisational measures are in place to protect your data. Please note that no internet transmission is entirely secure; you submit information at your own risk. Our website may link to third-party sites — we are not responsible for the privacy practices of those sites and recommend you review their own privacy notices.

Why We Collect Your Data

We process your personal data for the following purposes:

To provide you with information about our products and services;
To deliver our products and services to you;
To contact you regarding service-related matters;
To keep you informed of new features, products and services;
To comply with our legal and regulatory obligations;
To ensure our website is compatible with the browsers and operating systems used by our visitors.

Our lawful bases for processing are: performance of a contract, compliance with a legal obligation, and — where applicable — your consent.

How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements. When data is no longer required, it is securely deleted or anonymised.

Disclosing Your Data to Third Parties

We will not sell, share or rent your personal data to any third party for marketing purposes.
We may share data with trusted third parties (such as accountants, contractors and professional advisors) who assist us in delivering our services. All such parties are required to have appropriate security measures in place.
We may disclose data to your landlord where relevant to the services we provide.
We may disclose data to the police or other law enforcement bodies for the prevention or detection of crime, or the apprehension or prosecution of offenders.
We may disclose data where required to do so by law or regulation.
We may share aggregated, anonymised demographic data with partners or advisors. This will never identify any individual.

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection law.

Your Rights

Under UK data protection law, you have the following rights in relation to your personal data:

Right of access – You may request a copy of the personal data we hold about you.
Right to rectification – You may ask us to correct inaccurate or incomplete data.
Right to erasure – You may request that we delete your personal data, subject to certain conditions.
Right to portability – You may request that your data be transferred to you or another controller.
Right to restrict processing – You may ask us to limit how we use your data.
Right to object – You may object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent – Where processing is based on consent, you may withdraw it at any time (partial or complete) without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the ICO at www.ico.org.uk or by calling 0303 123 1113.

How We Store Your Data

Your data is stored securely in accordance with industry best practice. Our security measures are reviewed annually.
Your data is stored only on servers located in a UK GDPR-compliant location.

For any questions about this Privacy Notice, or to exercise your rights, please contact:

Name: Joshua Adler

Address: 19 The Grove, London, NW11 9SJ

Telephone: 0208 201 9816

Email: jadler@carltongrove.co.uk