We do not sell your personal data. We may share it with:

• Housing associations and registered providers when negotiating leases on your behalf

• Building contractors and tradespeople involved in property conversions and refurbishments

• Solicitors, accountants, mortgage brokers, and other professional advisers

• IT service providers, including our website host (Wix), email provider, and CRM provider

• HMRC, Companies House, and other regulators or authorities where required by law

All third parties who process personal data on our behalf are required to do so under written agreements that protect your data.

Some of our service providers (for example, our website platform Wix) may store or process data outside the UK, including in the European Economic Area, the United States, and Israel. Where this happens we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or transfers to countries the UK has determined provide an adequate level of protection.

We retain personal data only for as long as necessary for the purposes set out in this policy. Typical retention periods are:

• Enquiry data from non-clients: up to 24 months from the last contact

• Client records: 7 years after the end of our business relationship, in line with HMRC and accounting requirements

• Marketing data: until you withdraw consent or unsubscribe

• Website analytics data: as set out in our Cookie Policy

After these periods, we will securely delete or anonymise your data unless we are legally required to keep it for longer.

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, encryption in transit, secure passwords, and regular review of our processes. While no system can be guaranteed completely secure, we take all reasonable steps to protect your information.

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access – to request a copy of the personal data we hold about you

• Right to rectification – to ask us to correct inaccurate or incomplete data

• Right to erasure – to ask us to delete your data in certain circumstances

• Right to restrict processing – to ask us to limit how we use your data in certain circumstances

• Right to data portability – to receive your data in a structured, machine-readable format

• Right to object – to object to processing based on legitimate interests, including direct marketing

• Right to withdraw consent – where we rely on consent, you can withdraw it at any time

• Rights in relation to automated decision-making – we do not currently make decisions about you based solely on automated processing

To exercise any of these rights, please email info@provesta.uk. We will respond within one calendar month. We may need to verify your identity before acting on your request.

If you are unhappy with how we have handled your personal data, please contact us first at info@provesta.uk so we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk

Helpline: 0303 123 1113

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Our website uses cookies and similar technologies. For full information, please see our Cookie Policy.

We may update this Privacy Policy from time to time. The latest version will always be available on our website with the date of the most recent update at the top of the page. Where changes are material, we will take reasonable steps to notify you (for example, by email if we hold your address).

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Provesta Properties Ltd

137 Gleblands Road

Sale

M33 6LP

Email: info@provesta.uk