Privacy policy

Purpose of This Policy

This policy explains how we collect, use and protect your personal data when you:

• Visit our website
• Submit an enquiry
• Reserve or purchase a property
• Sign up to receive marketing communications

This website is not directed at individuals under the age of 18 and we do not knowingly collect personal data relating to children.

Personal Data We Collect

Website Enquiries

When you contact us or submit an enquiry, we may collect:

• First name and last name
• Email address
• Telephone number
• Postal address
• Budget information
• Buying position
• Preferred house type

Reservation and Purchase

If you reserve or purchase a property, we may collect:

• Date of birth
• Identification documents
• Proof of funds documentation
• Solicitor and mortgage broker details
• Reservation agreements
• Signed contracts

Payment card data is processed securely by authorised payment providers and is not stored by us.

How We Collect Data

We collect personal data directly from you when you:

• Complete website forms
• Communicate with us by email, phone or in person
• Enter into a reservation agreement
• Purchase a property
• Provide marketing consent

We also collect limited technical information automatically through cookies and similar technologies. See Section 10.

Lawful Basis for Processing

We process personal data in accordance with UK data protection law.

Website enquiries

• Pre-contract steps
• Legitimate interests

Reservation and purchase

• Performance of contract
• Legal obligation

Identity and proof of funds verification

• Legal obligation
• Legitimate interests

Marketing communications

• Consent

You may withdraw marketing consent at any time using the unsubscribe link in our communications or by contacting us.

How We Use Your Data

We use personal data to:

• Respond to enquiries
• Provide information about our properties
• Manage reservations and property sales
• Liaise with professional advisers involved in transactions
• Process payments
• Maintain business records
• Comply with legal and regulatory obligations
• Improve our website and marketing performance

We do not sell personal data.

We do not send third-party marketing communications.

Sharing Personal Data

We may share personal data where necessary with carefully selected third parties, including:

• IT and CRM service providers
• Email marketing platforms
• Payment processing providers
• Accounting and financial service providers
• Professional advisers such as solicitors and accountants
• Analytics and advertising partners

We require all third parties to respect the security of personal data and to process it only for specified purposes.

Further details of specific data processors can be provided upon reasonable request.

International Transfers

Some service providers may process data outside the United Kingdom.

Where personal data is transferred internationally, appropriate safeguards are applied in accordance with UK data protection law.

Further information regarding these safeguards is available upon request.

Data Retention

We retain personal data only for as long as necessary.

Website enquiries that do not proceed

• 5 years from last contact

Active prospects

• 5 years from last meaningful interaction

Completed purchasers

• 7 years after legal completion

Cancelled reservations

• 7 years from cancellation

Financial records

• 7 years plus the current financial year

Marketing contacts

• Until consent is withdrawn or after a period of inactivity

We may retain anonymised data for analytical or statistical purposes

Cookies and Tracking

We use cookies and similar technologies to:

• Operate and secure our website
• Analyse website performance
• Measure marketing effectiveness
• Deliver relevant advertising

A cookie consent mechanism is in place allowing you to manage your preferences for non-essential cookies.

Further details regarding the specific cookies and technologies used are available through our cookie management tool or upon request.

Data Security

We maintain appropriate technical and organisational measures designed to protect personal data from unauthorised access, disclosure, alteration or destruction.

Access to personal data is restricted to those with a legitimate business need.

We maintain internal procedures to address suspected data breaches in accordance with legal requirements.

Further details of our security framework can be provided where appropriate.

Your Rights

Under UK data protection law, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure where applicable
• Restrict processing
• Object to certain processing
• Withdraw marketing consent
• Request data portability

To exercise your rights, contact: info@burnhamwaters.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office.

Updates to This Policy

We may update this policy from time to time to reflect changes in law or our business practices.

The current version will always be published on our website.