Privacy Policy

We are the “controller” of your personal data. This policy explains how we collect, use and protect your information in accordance with the UK GDPR, Data Protection Act 2018 and PECR.

1. The data we collect

Provided by you: name, email, phone, address, property preferences, messages, files you upload, and any details in enquiry forms or call notes.

Automatically collected: IP address, device/browser info, pages viewed, time on page, and interactions via cookies and similar technologies (see Cookie Policy).

From third parties: lead sources/portals, referencing agencies, payment processors, analytics providers, or social platforms when you interact with us there.

2. Purposes & lawful bases

We process personal data for:

Responding to enquiries & providing services (Art. 6(1)(b) contract or steps prior to a contract).

Running and improving our website, analytics, security, and fraud prevention (Art. 6(1)(f) legitimate interests).

Marketing communications (Art. 6(1)(a) consent; you can withdraw at any time).

Legal/Regulatory obligations (Art. 6(1)(c)).
Where we rely on legitimate interests, we balance these against your rights and expectations.

3. Marketing

With your consent (or where otherwise permitted), we may send updates or property news by email/SMS. You can opt out at any time via the link in our messages or by contacting us.

4. Sharing your data

We may share data with trusted service providers acting as processors, including website hosting, CRM/lead management, analytics, email delivery, payment providers, professional advisers, and, where relevant, referencing or compliance partners. We require all processors to protect your data and use it only under our instructions. We may disclose information where required by law or in connection with a business reorganisation.

5. International transfers

Some providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards (e.g., UK adequacy regulations or International Data Transfer Agreements/Standard Contractual Clauses).

6. Data retention

We keep personal data only as long as necessary for the purposes collected—typically:

Enquiries: up to 24 months after last contact unless you become a client (then retained per client file requirements).

Marketing preferences: until you opt out.

Legal/financial records: 6–7 years per statutory requirements.

7. Your rights

You have rights to access, rectify, erase, restrict, object to processing, and data portability, as well as to withdraw consent where relied upon. You also have the right to lodge a complaint with the ICO (www.ico.org.uk).
To exercise rights, contact privacy@heuerhomes.co.uk.

8. Security

We use appropriate technical and organisational measures to protect personal data. However, no system is completely secure; transmission of data is at your own risk.

9. Children

Our services are not directed to children and we do not knowingly collect data from individuals under 13.

10. Changes

We may update this policy from time to time and will post the latest version on our website.