This Privacy Policy is provided by M&P Estates Limited, a company registered in England and Wales under company number: 03748259 with registered office address at 111 Daiglen Drive, South Ockendon, Essex, RM15 5EH ('we', 'our' or 'us') for use of our products and services including our website, and estate agency Services (Services).
We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on how and why we collect, store, use and share any information relating to you (your personal data).
It also explains your rights in relation to your personal data and how to contact us or the relevant regulator in the event you have a complaint. Our collection, storage, use and sharing of your personal data is regulated by law, including under the UK General Data Protection Regulation (UK GDPR).
We are the controller of personal data obtained via the Services, meaning we are the organisation legally responsible for deciding how and for what purposes it is used.
This privacy policy relates to your use of the Services only.
The Services may link to or rely on other apps, websites, APIs or services owned and operated by us or by certain trusted third parties to enable us to provide you with Services. These other apps, websites, APIs or services may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other apps, websites or services, please consult their privacy policies as appropriate. For more information see the section 'Who we share your personal data with' below.
The personal data we collect about you depends on the particular activities carried out through the Services.
Data you store online with us using the Services including your usage history or preferences:
Details of your location with a high degree of precision, collected when using the Maps function of the Services.
If you do not provide personal data we ask for where it is required, including the geo-localisation services, it may prevent us from providing services and/or the Services to you.
Certain Personal Data we collect is treated as a 'special category' to which additional protections apply under data protection law. This is also known as 'Sensitive Data'. Where we process such Sensitive Data, we will ensure we are permitted to do so under data protection laws. For immigration status, we collect this on the basis of your consent. For Politically Exposed Person (PEP) checks, we process this data to comply with our legal obligations under anti-money laundering regulations.
If you do not provide Personal Data we ask for where it is asked, it will prevent us from providing the Services.
The Services will request your consent to use location services to precisely identify your location each session (i.e. each time the Services is opened or has been placed in the background for more than 30 seconds). We require access to that data in order to ensure the security and proper functioning of its services, prevent fraud and abuse, and analyse usage trends to improve the user experience.
Our systems and third-party service providers (including Google Analytics) may temporarily process IP addresses as part of service delivery, security monitoring, and anonymous usage analytics. IP addresses are not stored for marketing or profiling purposes and are processed only to the extent necessary for legitimate operational requirements.
To withdraw your consent at any time you can turn off the localisation permissions for our Website. The location services in the Services will not operate unless location services/data are generally enabled on your device. You may disable such functionality at any time by turning your device's location on "off" using the device's settings app.
When you allow your device to use location services/data, data will also be collected by Google in accordance with their Privacy Policy. We exert no control over Google's Privacy Policy and we recommend that you consult their privacy policy for further information: https://policies.google.com/privacy?hl=en-US
We may also collect personal data indirectly through your activity while using the Services.
Additionally, we may receive personal data about you from third parties, including property portals, referencing agencies, solicitors and mortgage brokers, deposit protection schemes, maintenance platforms, AML providers, HM Land Registry, and regulatory authorities where required.
We use cookies and similar technologies on our website. For full details on the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy www.mpestates.co.uk/cookie-policy/
Under data protection law, we can only use your personal data if we have a proper reason, e.g.:
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own.
| What we use your data for | Our reasons |
|---|---|
| Create and manage your registration with us | To perform our contract with you or to take steps at your request before entering into a contract. |
| Providing services and/or functionalities of the Services to you | To perform our contract with you; the Maps Function will use location data based on your consent. |
| To enforce legal rights or defend/undertake legal proceedings | To comply with our legal and regulatory obligations; for our legitimate interests to protect our business and rights. |
| Communications with you not related to marketing | To comply with our legal obligations; for our legitimate interests to provide the best service to you. |
| Protect the security of systems and data | To comply with our legal obligations; for our legitimate interests to protect systems, data, and prevent criminal activity. |
| Operational reasons (efficiency, training, quality control) | For our legitimate interests to deliver the best service to you. |
| Statistical analysis to help us manage our business | For our legitimate interests to improve and develop our services. |
| Updating and enhancing user records | To perform our contract; comply with legal obligations; for our legitimate interests. |
| To comply with our legal and regulatory obligations | To perform our contract; to comply with legal obligations; for our legitimate interests. |
| Sharing data in connection with corporate transactions or restructuring | To comply with our legal obligations; for our legitimate interests to protect, realise or grow the value in our business. Information will be anonymised where possible. |
We intend to send you email marketing to inform you of our services such as promotions.
We will always ask you for your consent before sending you marketing communications, except where you have explicitly opted-in to receiving email marketing from us in the past, or except where you were given the option to opt-out when you initially registered and you did not do so.
You will have the right to opt out of receiving marketing communications at any time by:
We will always treat your personal data with the utmost respect and never sell or share it with other organisations for marketing purposes.
We retain different categories of personal data for specific periods based on legal requirements and operational necessity:
Identification documents, PEP checks, and related compliance records are retained for 5 years from the end of the business relationship to comply with Money Laundering Regulations 2017.
Financial records, tenancy agreements, sale contracts, and associated documentation are retained for up to 6 years to comply with accounting obligations and to support potential legal claims.
Prospective buyer and tenant data is retained for up to 2 years from last contact to facilitate ongoing property searches and maintain service continuity.
Marketing consent and related data is retained until you withdraw consent or unsubscribe from communications.
See our Cookie Policy for specific retention periods for different types of cookies and analytics data.
Once you have closed your account with us, we will move your personal data to a separate database so that only key stakeholders in our business on a 'need to know basis' have access to such data.
Following the end of the applicable retention period, we will delete or anonymise your personal data.
We do not store full card details unless processed securely via regulated payment providers.
Some of our service providers (including Google Analytics and Meta Pixel) may process data outside the UK, including in the USA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your personal data in accordance with UK data protection laws.
Under UK data protection laws, we can only transfer your personal data to a country outside the UK where:
If we were to start transferring your personal data from the UK:
You generally have the following rights, which you can usually exercise free of charge:
The right to be provided with a copy of your personal data. We will respond to requests within one month, though this may be extended by a further two months where requests are complex. We may require proof of identity before processing your request to ensure we protect your personal data.
The right to require us to correct any mistakes in your personal data.
The right to require us to delete your personal data — in certain situations.
The right to require us to restrict use of your personal data in certain circumstances, e.g. if you contest the accuracy of the data.
The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party — in certain situations.
The right to object:
The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. We do not make any such decisions based on data collected by the Services.
If you would like to exercise any of those rights, please email, call or write to us (see 'How to contact us' below). When contacting us, please:
We have implemented appropriate technical and organisational security measures to prevent personal data from being accidentally lost or used or accessed unlawfully. These include secure cloud-based systems (Microsoft 365), two-factor authentication (2FA), encryption, and access controls. We limit access to your personal data to those who have a genuine business need to access it.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
Please contact us if you have any queries or concerns about our use of your information (see below 'How to contact us'). We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with the Information Commissioner. The Information Commissioner can be contacted at https://ico.org.uk/make-a-complaint or telephone: 0303 123 1113.
We may change this privacy policy from time to time. When we make significant changes, we will take steps to inform you, for example via the Services or by other means, such as email.
You can contact us by email or telephone if you have any questions about this privacy policy or the information we hold about you, to exercise a right under data protection law or to make a complaint. We have appointed a Data Protection Lead who is responsible for overseeing compliance with data protection laws and handling data protection queries.
