Introduction
Stimpsons Eves Limited is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data and sets out your rights under data protection law. Stimpsons Eves Limited is the data controller for the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018.
You may browse our website without providing personal data. However, we may need to collect personal information where it is necessary to provide services, enter into a contract with you, or comply with legal or regulatory obligations. We do not sell, rent, or trade personal data to third parties for marketing purposes.
Legal and Regulatory Framework
We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, applicable anti-money laundering and counter-terrorist financing legislation, and our professional obligations as a regulated firm under the Royal Institution of Chartered Surveyors, including record-keeping, due diligence, and professional standards requirements.
Accuracy of Information
It is important that the personal data we hold about you is accurate and up to date. You should notify us promptly of any changes to your personal data during your relationship with us.
Personal Data We Collect
We collect personal data directly from you when you engage with us or use our services. This may include your name, postal address, email address, and telephone number. Where required by law or regulation, including RICS and anti-money laundering obligations, we may also collect photographic identification such as a passport or driving licence, together with documentation confirming your residential address. Depending on the services provided, we may process financial information such as bank account details, as well as information relating to your property requirements, transaction details, and communication preferences.
When you visit our website, we may also collect limited technical data such as your IP address, browser type, and information about how you use the website.
How We Use Your Personal Data
We only process personal data where we have a lawful basis to do so. This includes processing that is necessary for the performance of a contract or to take steps at your request before entering into a contract, processing required to comply with legal or regulatory obligations, processing carried out in our legitimate business interests where these do not override your rights and freedoms, and processing based on your consent where this is required.
We use personal data to provide professional property and related services, to fulfil contractual obligations, to carry out client due diligence and compliance checks, to assess whether to establish or continue a business relationship, to manage and administer services, to respond to enquiries or requests, to maintain records in line with legal, regulatory, and RICS requirements, and to send marketing communications where permitted by law. Where processing is based on consent, you may withdraw that consent at any time.
Marketing Communications
We may contact you with information about our services where permitted by law and based on your consent or our legitimate interests. You can opt out of receiving marketing communications at any time by contacting us or by using unsubscribe options included in our communications.
Sharing Your Personal Data
We may share personal data with third parties where this is necessary to deliver our services or to meet legal or regulatory obligations. This may include professional advisers, referencing or credit agencies, financial institutions, regulatory or supervisory bodies, and IT service providers. All third parties are required to process personal data securely, lawfully, and in accordance with our instructions.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we ensure that appropriate safeguards are in place to protect the data, in accordance with UK GDPR and ICO guidance.
Data Security
We have implemented appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. Access to personal data is restricted to individuals who have a legitimate business need to know.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Client records are typically retained for six years after the end of the business relationship, although certain records may be retained for up to fifteen years where required by law, regulation, or RICS professional standards. Personal data collected in connection with enquiries that do not result in an instruction is generally retained for up to twelve months.
Your Rights
Under UK GDPR, you have the right to access your personal data, request correction of inaccurate or incomplete information, request the deletion of personal data, restrict or object to processing, request data portability where applicable, and withdraw consent at any time where processing is based on consent. You can exercise these rights by contacting us using the details below.
Automated Decision-Making
We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Children’s Data
Our services are not intended for children, and we do not knowingly collect personal data relating to children.
Complaints
You have the right to make a complaint to the Information Commissioner’s Office, the UK supervisory authority for data protection matters. We would welcome the opportunity to address your concerns before you contact the ICO and encourage you to contact us in the first instance.
Cookies Policy
Cookies are small text files placed on your device when you visit a website. They help websites operate effectively and provide information about how visitors use the site. We use strictly necessary cookies to ensure the website functions correctly and analytical cookies to help us understand website usage and improve performance. Where required by law, we will seek your consent before placing non-essential cookies on your device.
We may use Google Analytics to collect anonymised information such as the number of visitors to the website, pages visited, and time spent on pages. This information does not identify individuals, and we do not allow Google to attempt to identify website users. You can control or disable cookies through your browser settings, although doing so may affect website functionality.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on our website and, where appropriate, notified to you.