This privacy notice explains how and why Annington Limited (“we, us, our”), part of the Annington Group of companies (each such company and all such companies together referred to as “Annington”), uses personal data collected through the Annington.co.uk website (the “Website”), about individual visitors to and users of the Website (“you, your”).
You should read this notice, so that you know what we are doing with your personal data.
This notice explains how we use your personal data when you visit or use our Website. Depending on your relationship with us, or Annington more widely, we or Annington may use your personal data for other purposes and one or more other Annington privacy notices may then also apply to such specific uses of your personal data.
Please also read any such other privacy notices from us or Annington.
“Personal data” is any information that relates to an identifiable natural person. Your name, address and contact details can be examples of your personal data, if they identify you. We use the term “Sensitive data” to mean ‘special categories of personal data’ (such as personal data revealing details of health, race, or union membership) and/or personal data which amounts to ‘criminal offence/records’ data (such as criminal allegations, charges or outcomes) both terms as being defined in data protection law.
The term “process” means any activity relating to personal data, including, by way of example, its collection, storage, use, transmission and deletion.
We are a "controller" of your personal data. This means that we make decisions about how and why we process your personal data in relation to the operation of our Website and, because of this, we are responsible for making sure it is used in accordance with data protection laws.
Annington Buyer Privacy Notice
is a controller of your personal data (and is referred to in this privacy notice as “we”, “us”, “our”).
Please refer to section entitled ‘Annington’s data protection responsibilities’ in the Website privacy notice: https://www.annington.co.uk/privacy-policy/
It is your responsibility to make sure the personal data you provide to us is complete and accurate and you must help us to keep it accurate and up to date. If you have a current or ongoing relationship with us and any of the personal information you have given to us changes, such as your contact details, please inform us without delay by contacting mailto: dataprotection@annington.co.uk.
Types of personal data |
Prospective, current and previous buyers |
|
Prospective, current or previous occupiers/those that have property access |
|
|
|
Lawful basis
|
|||
|
Purposes of processing |
Your consent |
To perform a contract with you |
To comply with a legal obligation |
For our legitimate interests |
|
Communications with you
|
||||
a) |
Responding to your requests, enquiries and/or customer complaints, including sending you details of properties you have requested
|
|
✔ |
✔ (where mandatory for us to do so by law)
|
✔ (to respond to you in relation to such matters)
|
b) |
Confirming and processing property purchases or other orders for goods or services that you may make with us
|
|
✔ (for property sales to you) |
|
✔ (to conclude property sales involving other buyers)
|
c) |
Sending you information (including direct marketing) as set out in the section “How do we communicate with you?”, below
|
✔ (direct marketing information where we need your consent) |
✔ (keeping you updated on the transaction) |
|
✔ (to keep you updated on transactions, orders and with other helpful updates and direct marketing in other cases)
|
|
Background and Identity Check Information
|
||||
d) |
Performing know your client and anti-money laundering checks in relation to transactions |
|
|
✔ |
✔ (to ensure compliance with anti-money laundering requirements and good governance)
|
e) |
Performing identity checks in relation to certain transactions |
|
|
✔ |
✔ (to ensure that the identity of our customers is verified)
|
f) |
Performing credit checks in relation to transactions
|
✔ |
|
|
(to make sure that those purchasing from us have the necessary funds and commitment to pay, to ensure we are paid)
|
|
The property
|
||||
g) |
To find the right property for you |
|
✔ (if you contract with us as an individual)
|
|
✔(where you represent your employer or organisation, or a buyer who contracts with us)
|
h) |
To deal with your requested or agreed property purchase to complete the transaction with you
|
|
✔ (if you contract with us as an individual)
|
|
✔ (where you represent your employer or organisation, or a buyer who contracts with us)
|
i) |
To deliver goods or services to you or the business you represent, to deal with any complaints or any after sales services
|
|
✔ (if you contract with us as an individual) |
|
✔ (where you represent your employer or organisation, or a buyer who contracts with us)
|
j) |
Arranging appointments and organising access to property for maintenance and repair purposes, including obtaining and using occupier details |
|
✔ (if you contract with us as an individual) |
|
✔ (where the occupier has not purchased the property from us) |
k) |
To carry out checks to identify potential fraudulent transactions, to prevent and detect crime and protect genuine customers and our business from fraud to minimise the risk of false details being used, and abuse of card / other details by fraudsters
|
|
✔ |
|
✔ (to protect our business, other buyers and the public from fraud and crime – this is also in the public interest)
|
l) |
To administer your membership and/or status as a director/company secretary of a management company and work with you in your capacity as a member/ director/ company secretary |
|
|
|
✔ (to ensure the smooth running of management companies and our relationship with them and you)
|
All categories
|
|||||
m) |
To host Events
|
✔ (where Sensitive Information (see section 5 below) is provided by you voluntarily e.g. dietary or access requirements) |
|
|
✔ (to host prospective/current tenants/occupiers to discuss property interests) |
n) |
Establishing and enforcing our legal rights and obligations and monitoring to identify and record fraudulent activity
|
|
|
✔ |
✔ (to protect our business, other buyers and the public from fraud and crime – this is also in the public interest and may be needed to deal with legal claims)
|
o) |
Complying with requests, orders and instructions from law enforcement agencies, regulators, any court, parties to proceedings or otherwise deal with obligations required by law or regulators and to ensure good governance and compliance
|
|
|
✔ (where binding) |
✔ (where not binding but good governance and in the public interest)
|
p) |
For our general record-keeping and relationship management |
|
✔ (if you contract with us as an individual) |
|
✔ (where you represent your employer or organisation, or a buyer who contracts with us and we need this to run our business properly)
|
q) |
Managing the proposed sale, restructuring or merging of any or all part(s) of our business, including to respond to queries from the prospective buyer or merging organisation
|
|
|
|
✔ (to sell any part of our business) |
r) |
To keep records required by law or to evidence our compliance with laws, including tax laws, consumer protection laws and data protection laws.
|
|
|
✔ |
✔ (including compliance with related regulatory guidance and best practice) |
s) |
Resolving any complaints from or disputes with you |
|
✔ (if with you as an individual) |
|
✔ (to try and resolve any complaint or dispute you might raise with us and to deal with legal claims)
|
t) |
Personal safety and security and to safeguard the property
|
|
|
✔
|
✔ (CCTV in operation, for personal safety and security purposes) |
u) |
For our marketing purposes
|
|
|
✔
|
✔ (to showcase our properties and/or your experience with us) |
We may also convert your personal data into statistical or aggregated form to better protect your privacy, or so that you are not identified or identifiable from it. Anonymised data cannot be linked back to you. We may use it to conduct research and analysis, including to produce statistical research and reports.
In certain circumstances, we will also disclose your personal data to third parties who will receive it as controllers of your personal data in their own right (for the purposes set out above). Please see the section entitled ‘who do we share your personal data with, and why?’ in the Website privacy notice: https://www.annington.co.uk/privacy-policy/. In addition, we may also share your personal data with the following third parties:
Please see the section entitled ‘how long do we keep your personal data for?’ in the Website privacy notice: https://www.annington.co.uk/privacy-policy/.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and any applicable laws or regulations.
We may in the future implement retention guidelines (and include a link to them here) which will set out further details about the period for which we keep records of your personal data. Please check back here from time to time if you would like to know more about retention.
Please see the section entitled ‘how do we communicate with you’ in the Website privacy notice: https://www.annington.co.uk/privacy-policy/.
Please see the section entitled ‘what are your rights in relation to your personal data and how can you exercise them?’ in the Website privacy notice: https://www.annington.co.uk/privacy-policy/.
If you want more information about any of the subjects covered in this privacy notice or if you would like to discuss any issues or concerns with us, you can contact us in any of the following ways:
By email at: Dataprotection@annington.co.uk
By telephone at: 020 7960 7500
July 2023
We collect and process different types of personal data about you when you visit our Website, or where you otherwise communicate or engage with us.
It is your responsibility to make sure the personal data you provide to us is complete and accurate and you must help us to keep it accurate and up to date. If you have a current or ongoing relationship with us and any of the personal information you have given to us changes, such as your contact details, please inform us without delay by contacting enquiries@annington.co.uk.
The table below sets out the different types of personal information that we collect when you visit or use our Website. The details will be collected directly from you but sometimes through the device you use to access our Website and/or your browser (such as the details of your device, its IP address and screen size) and where explained in our cookies policy below (subject, where relevant, to your prior consent), from cookies deposited on your device when you visit our Website.
Occasionally, we will use your personal data when it has been provided by a person on your behalf when using our Website, such as your spouse, partner, a relative, or your other representative e.g. your agent, solicitor or other professional adviser (your “Representative”).
Website collection of types of personal data |
|
We process your personal data for particular purposes in connection with your use of our Website and, dependent on such use and your relationship with us, to deal with your enquiry or your communication or other engagement with us, and the management and administration of our business.
We are required by law to always have a “lawful basis” (i.e. a permitted reason or justification) for processing your personal data. The table below sets out the purposes for which we process your personal data and the relevant lawful basis on which we rely for that processing.
Please note that where we have indicated below that our processing of your personal data is either:
necessary for us to comply with a legal obligation; or
necessary for us to take steps, at your request, to potentially enter into a contract with you, or to perform it,
and you choose not to provide the relevant personal data to us, we may not be able to enter into or continue our contract or engagement with you.
|
|
Lawful basis
|
|||
|
Purposes of processing |
Your consent |
To perform a contract with you |
To comply with a legal obligation |
For our legitimate interests |
|
Communications with you |
||||
a) |
Responding to your requests, enquiries and/or customer complaints, including sending you details of properties you have requested |
|
✔ |
✔ (where mandatory for us to do so by law)
|
✔ (to respond to you in relation to such matters)
|
|
|
|
|
|
|
b) |
Sending you information (including direct marketing) as set out in the section “How do we communicate with you?”, below
|
✔ (direct marketing information where we need your consent) |
✔ (keeping you updated) |
|
✔ (to keep you updated on transactions, orders and with other helpful updates and direct marketing in other cases)
|
|
|
|
|
|
|
|
Website Information |
||||
c) |
Ensure the proper operation and performance of the Website (please also see our Cookies Policy)
|
✔
|
✔ |
(to record cookie consent state) |
✔ (to ensure the Website functions correctly) |
d) |
To improve the functionality of the Website
|
|
|
|
✔ (to keep the Website up to date and improve its functionality for your benefit ) |
e) |
To enable you to create accounts and log-in to them via the Website
|
|
✔ |
|
✔ (to grant you access to a private log-in where you can securely and easily access information relevant to you)
|
|
|
||||
|
All categories |
|
|
|
|
f) |
Establishing and enforcing our legal rights and obligations and monitoring to identify and record fraudulent activity
|
|
|
✔ |
✔ (to protect our business, other buyers and the public from fraud and crime – this is also in the public interest and may be needed to deal with legal claims)
|
g) |
Complying with requests, orders and instructions from law enforcement agencies, regulators, any court, parties to proceedings or otherwise deal with obligations required by law or regulators and to ensure good governance and compliance
|
|
|
✔ (where binding) |
✔ (where not binding but good governance and in the public interest)
|
h) |
For our general record-keeping and relationship management |
|
✔ (if you contract with us as an individual) |
|
✔ (where you represent your employer or organisation, or a buyer or tenant who contracts with us and we need this to run our business properly)
|
i) |
Managing the proposed sale, restructuring or merging of any or all part(s) of our business, including to respond to queries from the prospective buyer or merging organisation
|
|
|
|
✔ (to sell any part of our business) |
j) |
To keep records required by law or to evidence our compliance with laws, including tax laws, consumer protection laws and data protection laws.
|
|
|
✔ |
✔ (including compliance with related regulatory guidance and best practice) |
k) |
Resolving any complaints from or disputes with you |
|
✔ (if with you as an individual) |
|
✔ (to try and resolve any complaint or dispute you might raise with us and to deal with legal claims)
|
We may also convert your personal data into statistical or aggregated form to better protect your privacy, or so that you are not identified or identifiable from it. Anonymised data cannot be linked back to you. We may use it to conduct research and analysis, including to produce statistical research and reports. For example, to help us understand and improve the use of our Website.
Annington has a Twitter feed on its Website, which displays tweets posted by Annington, and tweets that Annington has retweeted. These tweets may contain individuals’ personal data.
If a tweet on the Website Twitter feed contains your personal data and you are not happy with it appearing on the Website’s Twitter feed, please contact us using the contact details at the end of this privacy notice, and we will remove the retweet (subject to any Twitter limitations that prevent us from doing so).
If volunteered by you or your Representative, some of the processing described in the above table will include the processing of Sensitive Information, which we are required to process with more care in order to meet our legal obligations.
We will only process your Sensitive Information for the reasons explained above and either with your explicit consent or for meeting our legal obligations, such as making reasonable adjustments to how we deal with you.
Sometimes we need to disclose your personal data to other people.
From time to time we may ask third parties or other Annington Group companies to carry out certain business functions for us, such as the administration of our Website and IT support. These third parties will process your personal data on our behalf (as our processor). We will disclose your personal data to these parties so that they can perform those functions. Before we disclose your personal data to these third parties, we will seek to ensure that they have appropriate security standards in place to protect your personal data. Examples of these third party service providers include our providers of IT systems software and maintenance, back up, and hosting services.
In certain circumstances, we will also disclose your personal data to third parties who will receive it as controllers of your personal data in their own right (for the purposes set out above), where the relevant disclosure is:
We have set out below a list of the categories of recipients with whom we are likely to share your personal data:
Annington is UK based and the majority of our processing of your personal data takes place within the UK. However, some of our service providers (please see above) may have processing operations in other jurisdictions and in those cases your personal data can be transferred to recipients outside the UK.
Although data protection laws in some jurisdictions may not provide the same level of protection for your personal data as is provided under the laws in the United Kingdom, we will only transfer your personal data abroad as permitted by law. This includes allowing transfers:
We will adopt security measures to provide appropriate protection for your personal data from unlawful or unauthorised processing and accidental loss, destruction or damage.
We will only retain your personal data for a limited period of time and for no longer than is necessary for the purposes for which we are processing it.
Your personal data may be retained following completion of such processing where permitted by law, including:
We may use your personal data in order to contact you in relation to your interactions with us, services, promotions and/or offers which may be of interest.
In each case, such communications will be based on our legitimate interest and you will have the right to opt-out of receiving marketing communications from us at any time.
To the extent that we send any other direct marketing to you (on a business to consumer basis), we will ensure that we have a lawful basis and provide you with the opportunity to opt-out of receiving such communications where we rely on legitimate interest, or (where necessary) obtain your explicit consent.
Please see our separate Cookies Policy.
Where our processing of your personal data is based on your consent (please see above), you have the right to withdraw your consent at any time. If you do decide to withdraw your consent we will stop processing your personal data for that purpose, unless there is another lawful basis we are relying on – in which case, we will let you know.
Where our processing of your personal data is based on the legitimate interests (please see above), you can object to this processing at any time. If you do this, we will need to show either a compelling reason why our processing should continue, which overrides your interests, rights and freedoms or that the processing is necessary for us to establish, exercise or defend a legal claim.
Where we are processing your personal data for direct marketing purposes, you have the right to object to that processing. This will not affect our need to keep in touch with you for non-marketing reasons, such as when we are dealing with a request by you or query from you.
You have the right (subject to applicable laws and certain limitations) to:
You also have the right to lodge a complaint with the Information Commissioner’s Office, the UK’s data protection regulator. More information can be found on the Information Commissioner’s Office website at https://ico.org.uk/.
We may update this notice from time to time to reflect changes to the type of personal data that we process and/or the purposes for which and/or the way in which it is processed. We encourage you to check this notice on a regular basis.
If you want more information about any of the subjects covered in this privacy notice or if you would like to discuss any issues or concerns with us, you can contact us at 1 James Street, London, W1U 1DR or via enquiries@annington.co.uk.
1 July 2022
For specific details information explaining how and why Annington Management Limited (also referred to as “Annington”, “we”, “our” and “us”) uses personal data about different type of stakeholders, please refer to the add-on privacy notices below.