What we collect, why we hold it, who sees it and how long we keep it. Written to be read rather than to be survived.
Last updated date to confirm. This notice explains how registered company name to confirm (“AC Residential”, “we”) handles personal data under the UK GDPR and the Data Protection Act 2018.
The data controller is registered company name to confirm, company number to confirm, registered office to confirm. We are registered with the Information Commissioner’s Office under number to confirm.
Data protection enquiries: email to confirm.
If you enquire: name, email, telephone, the property or requirement you asked about, and the content of your correspondence.
If you buy, sell, let or rent through us: identity documents, proof of address, proof of funds and source of wealth, bank details, and information about your circumstances relevant to the transaction.
If you are a tenant: references, employment and income information, and the results of right-to-rent and credit checks.
Automatically, when you visit this site: IP address, browser and device type, pages viewed and time of visit.
To respond to your enquiry and provide our services — performance of a contract, or steps taken at your request before entering one.
To meet anti-money-laundering obligations — legal obligation. Estate agency businesses are supervised by HMRC and must verify identity and source of funds. We cannot act for you without this.
To carry out right-to-rent checks — legal obligation under the Immigration Act 2014.
To tell you about properties that match your requirement — legitimate interests, or your consent where the law requires it. You can stop this at any time.
To keep records, resolve disputes and defend claims — legitimate interests.
We share personal data only where it is necessary: with solicitors and conveyancers acting on the transaction; with referencing, credit and identity-verification providers; with property portals where you have asked us to market a property; with contractors attending a managed property; with our accountants and auditors; and with HMRC, the police or a court where we are required to.
We do not sell personal data, and we do not pass your details to third parties for their own marketing.
Enquiries that do not proceed: two years from last contact.
Anti-money-laundering records: five years from the end of the business relationship or the completion of the transaction, as the Money Laundering Regulations require.
Tenancy and management records: six years from the end of the tenancy.
Accounting records: six years, as required by the Companies Act.
Our clients hold property across borders and some correspondence necessarily travels internationally. Where personal data is transferred outside the UK we rely on adequacy regulations or the International Data Transfer Agreement, and we take the safeguards those require.
You may ask us for a copy of the personal data we hold about you; ask us to correct it; ask us to delete it; ask us to restrict how we use it; object to our using it on the basis of legitimate interests; and ask for it in a portable format. Where we rely on consent you may withdraw it at any time.
Some rights are limited where we are required by law to keep the data — anti-money-laundering records in particular cannot be deleted on request.
We respond within one month. Write to email to confirm.
If you are unhappy with our response you may complain to the Information Commissioner’s Office at ico.org.uk, or by telephone on 0303 123 1113. We would rather you raised it with us first.