At White & Sons, we’re committed to respecting and protecting your privacy.
We have a Data Protection Officer who is responsible for matters relating to privacy and data protection. The Data Protection Officer is Stephen Cullens who can be reached at firstname.lastname@example.org
How do we collect personal information about you?
We obtain personal information about you that you provide to us through our website, emails, phone conversations, documents you provide to us or when you visit one of our branches, for example when you:
- Enquire about specific properties for sale or for rent
- Ask us to value your property
- Register for our email newsletters
- Participate in one of our surveys
- Interact with us on our social media sites
We also obtain personal information relating to you using automated technical means when you visit our website.
What type of personal information is collected?
The information we collect from you might include (but is not limited to) your name, address, email address, phone number, date of birth and financial details and any other information you choose to provide to us.
The information we collect through our website using automated technical means includes: the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, identification number, online identifier and location data. We also collect information about your website visit including which website pages are accessed, page response times and length of visits to pages.
How long do we retain your personal information?
We review our retention periods for personal data on a regular basis. We are legally required to hold some types of information for certain prescribed periods to fulfil our statutory obligations. Outside of specific statutory obligations, we will hold your personal data on our systems for as long as is necessary for the relevant purposes for which we use it, or in accordance with any retention periods set out in any relevant contract you hold with us.
We will retain relevant personal information for a maximum period of ten years following the end of your relationship with us.
In some cases it is not possible for us to specify in advance the period for which we will retain your personal information. In such cases, we will determine the period of retention based on the nature and type of information held.
How do we use your personal information?
We may use the information that you directly provide to us in the following ways – please refer to our departmental matrix
We may use the information that we automatically collect using technical means through our website to:
- Administer our site and for troubleshooting, testing, research and statistical purposes. We use Google Analytics, a third-party website monitoring tool. Our legal basis for this is our legitimate interests, namely monitoring the use of our software and IT systems, improving our website
- Measure or understand the effectiveness of our own advertising activity. Our legal basis for this use is our legitimate interests, namely improving the relevancy of our advertising;
- The Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, identification number, online identifier and location data. We also collect information about your website visit including which website pages are accessed, page response times and length of visits to pages
- Measure or understand the effectiveness of our marketing emails. We use marketing software to track when individuals open emails and click on email links and to analyse subsequent behaviour on our website.. Our legal basis for this use is consent
- White & Sons are committed to providing a high level of customer service and therefore please be aware that incoming and outgoing calls may be recorded for training and monitoring purposes
We may also use any of your personal information that we collect from you directly and additional information about you from external sources where necessary to detect and reduce fraud and credit risk. These sources include referencing agencies and or previous landlords Our legal basis for this use of your personal information is our legitimate interests in preventing our business being subject to fraud or credit risk.
Who has access to information?
We will not sell or rent your information to third parties.
We may pass your information to third party service providers, including but not limited to:
- Business partners, suppliers and sub-contractors working on our behalf for the purposes of completing tasks and providing services to you.
- Please refer to our departmental matrix
When we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and otherwise use your information in accordance with applicable data protection law.
We may disclose your personal information to our insurers and /or professional advisers insofar as reasonably necessary for the purposes of obtaining and maintaining insurance coverage, managing risks, obtaining professional advice and managing legal disputes.
In addition to the specific disclosures set out in this section, we may disclose your personal information where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person, or for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative out-of-court procedure.
In this section we have summarised the rights that you have under data protection law. Some of the rights are complex, applying only in certain circumstances and subject to certain exceptions, and in the interests of keeping this policy concise, not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
You have the right:
- To object to us processing your personal information for marketing purposes. If you object, we will stop processing your personal information for this purpose. When we collect your data, you can choose whether you wish to receive marketing communications from us. If you wish to stop receiving marketing communications, you can opt out at any time by clicking an ‘unsubscribe’ link at the bottom of one of our emails.
- To access the information we hold about you and certain information about our processing of it and your rights in relation to it.
- In certain circumstances, to obtain erasure of the personal information we hold about you, subject to certain exceptions.
- To rectification of the information we hold about you.
- In certain circumstances, to restrict our processing of your personal information or object to us processing it. If you object, we will stop processing your personal information unless certain exceptions apply.
- Where our legal basis for processing your personal information is your consent or the performance of a contract and we process it by automated means, to be provided with the personal information we hold about you in structured, commonly used and machine-readable format and to transmit the information to another controller.
- To not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly affecting you, subject to certain exceptions.
- Where our processing of your personal information is based on your consent, to withdraw that consent at any time. If you withdraw your consent, we will stop the relevant processing, but it will not affect the lawfulness of our processing before the withdrawal.
To exercise any of these rights, email us at email@example.com or write to us at White and Sons, Reeve House, Parsonage Square, Dorking RH4 1UP. In addition, you can exercise your right to object to direct marketing at any time by clicking an ‘unsubscribe’ link at the bottom of one of our emails.
If you consider that our processing of your personal information infringes data protection laws, you have the right to lodge a complaint to a supervisory authority responsible for data protection. You may do this in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. More information about lodging a complaint with the Information Commissioner’s Office (the relevant UK supervisory authority) can be found at https://ico.org.uk/concerns/.
Security precautions in place to protect your information
We take appropriate technical and organisational precautions to secure your personal information and prevent its loss, misuse or alteration. All information you provide to us is stored on our secure servers. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
The transmission of unencrypted (or inadequately encrypted) data over the internet is inherently insecure, and for this reason we cannot guarantee the security of data sent between us over the internet.
Cookies allow us to provide important site functionality so you don’t have to re-enter lots of information. They also allow us to remember what links and pages you have been or viewed during a session. This helps us deliver a better, more personalised service to you.
It is possible to switch off cookies by setting your browser preferences. For more information on the Cookies we use, visit our Cookies Policy.
Links to other websites
Our website may contain links to other websites run by other organisations. We are not responsible for the privacy practices of those organisations or the content of their websites. You should read the privacy policies of these organisations before providing them with any personal information.
Transferring your information outside of European Economic Area (“EEA”)
We do not transfer information outside of the EEA.
If you use our services while you are outside the EEA, your information may be transferred outside the EEA in order to provide you with those services.
Review of this Policy
We keep this Policy under regular review. This Policy was last updated on 5th September 2023.
You can obtain further information about data protection laws by visiting the Information Commissioner's Office website at www.ico.org.uk.