PRIVACY POLICY
1. Introduction
Good Neighbours Estates is a company registered in England and Wales with company registration number 4511465, whose registered office is at 28 Plumstead High Street SE18 1SL.
We are committed to protecting your personal data. This privacy policy gives you detailed information on when and why we collect your personal data, how we use it and how we keep it secure. Please read this policy carefully and our Data Retention Policy to understand our views and practices regarding your personal data and how we will treat it.
2. Our responsibilities
For the purposes of the applicable Data Protection Legislation, we are the data controller of any personal data we process. As a data controller, we are responsible for ensuring our systems, processes, suppliers and People comply with Data Protection Legislation in relation to the personal data we handle.
We provide our People with training and require our People to comply with this privacy policy and our Data Retention Policy when dealing with personal data.
We take Personal Data Breaches very seriously and are required to notify the Information Commissioner’s Office in the event of such a breach.
When using, collecting and disclosing personal data, we follow the core data protection Principles underlying the Data Protection Legislation.
We have policies, procedures and records to demonstrate compliance with the Principles. Please contact us for further information on these policies, procedures and records.
3. How we collect, use and disclose your personal data
Generally, we collect your personal data when you interact with us (for example, when entering into a relationship with us as Customer, a third-party service provider or one of our People). However, from time to time we also need to collect personal data from other third parties in connection with our relationship with you. We also look at how our users access and use our Website, so we can offer the best possible experience.
4. Transfers of personal data
Personal data may be transferred to one of our Associated Agents for the purposes of fulfilling our obligations to our Customers.
We also use a number of suppliers in connection with the operation of our business and they may have access to the personal data we process. For example, an IT supplier may collect data on our behalf and/or see our personal data when providing software support, or a company which we use for a marketing campaign may process contacts’ personal data for us.
When contracting with suppliers and/or transferring personal data to a different jurisdiction, we take appropriate steps to ensure that there is adequate protection in place and that the Principles are adhered to.
5. Your rights
Personal data must be processed in line with an individual’s rights, including the right to:
• request a copy of their personal data;
• request that their inaccurate personal data is corrected;
• request that their personal data is deleted and destroyed when causing damage or distress; and
• opt out of receiving electronic communications from us.
Should you wish to make a request in line with your rights as an individual, please contact us as follows:
By Post: Good Neighbours Estates 28 Plumstead High Street SE18 1SL
By Email: info @goodneighboursestates.com or admin @goodneighboursestates.com
Our Website:www.goodneighboursestates.com
The Data Protection Legislation gives you the right to access information held about you. Your right of access can be exercised in accordance with the Data Protection Legislation (as applicable).
6. Security
Information security is a key element of data protection. We take appropriate measures to ensure our systems, processes, suppliers and People secure personal data and protect it from loss or unauthorised disclosure or damage. Please contact us if you require further information regarding our policy and approach to information security.
7. Computer Security
We keep our keep our system safe from malware and viruses with adequate, up to date security software.
8. Consent to marketing
Where we wish to transfer your personal data to third parties who are not involved in the provision of our services (for example, mortgage providers and providers of legal services) but who we consider might interest you, we will always ask you to give your consent. Where you give us such consent (e.g. you tick the relevant consent box when registering in person at one of our offices), but you then decide/omit to provide consent at a subsequent opportunity (e.g. you later re-register online and do not tick the relevant consent box, having previously ticked an equivalent consent box in our office) you will be deemed to continue to consent until you contact us to formally confirm you wish to withdraw your initial consent (which you can do at any time).
10. Changes to our privacy policy
We keep our privacy policy under regular review. If we make changes to our Privacy Policy that affect how we handle your data, we will let you know by email. Minor changes will not be notified. You can check our Privacy Policy at this page at any time.
11. Questions, comments and complaints
Questions, comments and complaints regarding this privacy policy should be addressed to:
The Data Protection Officer
Good Neighbours Estates
28 Plumstead High Street
London SE18 1SL
Our Staff must inform our Data Protection Office immediately if they receive a complaint relating to how we have processed personal data so our complaints procedure can be followed.
Consent: means the freely given, specific, informed and unambiguous consent given by a data subject in relation to his/her personal data being processed.
Controller: a personal/organisation who determines the purpose for which, and the manner in which, any personal data is processed.
Customer: a current or prospective customer being a vendor, buyer, landlord or tenant.
Data Protection Legislation: the Data Protection Act 1998 and any other applicable laws relating to the processing of personal data including the Privacy and Electronic Communications (EC Directive) Regulations 2003 and all related regulations, regulatory codes of practice, opinions and guidance issued from time to time, including by the Information Commissioner, and in each case any amending, superseding or replacement applicable law including (from and including 25 May 2018, where applicable) the General Data Protection Regulation 2016/679/EU.
People: all people providing services to or working for us, including but not limited to our employees, directors, members, Franchisees and contractors.
Personal data: information (including opinions) which relates to an individual and from which he or she can be identified either directly or indirectly through other data which we have or are likely to have in our possession. These individuals are sometimes referred to as data subjects.
Personal Data Breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed by an organisation electronically. A personal data breach may mean someone outside the organisation gets unauthorised access to personal data, but a breach can occur if there is unauthorised access within the organisation or if an employee accidentally alters or deletes personal data.
Principles: these core principles specify personal data should be: processed lawfully, fairly and in a transparent manner; collected for specified, explicit and legitimate purposes; adequate, relevant and limited to what is necessary; accurate and, where necessary, kept up to date; kept for no longer than is necessary; processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. Additionally, organisations must adhere to the principle of accountability.
Process: the ‘processing’ of personal data captures a wide range of activities, and includes obtaining, recording and holding personal data and performing any operation of the personal data (including erasure/destruction).
Processor: any person (other than an employee of the data controller) who processes the data on behalf of the data controller.
Purpose: the purposes identified in the “Purpose” column of the tables in section 3 of this privacy policy (How we collect, use and disclose your personal data), as applicable.
Sensitive personal data: data consisting of racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Third party: a person, organisation or other body other than the data subject, controller or processor.