What does this Privacy Policy cover?
At RHJB Ltd (CR Real Estate) we are committed to ensuring that your personal information and privacy are protected. This privacy policy explains how we use the personal information you provide to CR Real Estate.
References to “RHJB Ltd”, “CR Real Estate”, “us”, or “we” relates to all departments, brands, and subsidiary companies of RHJB Ltd (Reg No. 10918586). This includes:
“Privacy Policy” and “Internet and Cookies Policy” links are available our website and will be regularly reviewed and updated as necessary to keep you accurately informed.
Further information about CR Real Estate can be found at: https://crrealestate.co.uk/
How we use your data
In the general course of business, CR Real Estate will process the personal information you provide to us, primarily to assist you in achieving the purpose for which you provided it to us. This includes the selling, buying and renting of property and associated services of arranging a mortgage, providing legal services and/or lettings management services, as relevant and necessary to your needs.
Any personal information that you provide to us will only be processed and/or shared in accordance with The Data Protection Act 2018 & The General Data Protection Regulations 2018 – collectively referred to here as DPA 2018. At least one of the following legal bases will always apply:
Legal Obligation – necessary for compliance with our legal obligations
This includes (but is not limited to) all laws relating to residential estate agency. In particular Estate Agents Act 1979, Consumers, Estate Agents and Redress Act 2007, DPA 2018, Competition Act 1998, Consumer Protection from Unfair Trading Regulations 2008 (CPRs), Business Protection from Misleading Marketing Regulations 2008 (BPRs), Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, Consumer Rights Act 2015, Energy Act 2011, Money Laundering Regulations 2007, Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, Bribery Act 2010 and Modern Slavery Act 2015.
From time to time we may be asked to provide your data to assist in government department investigations e.g. Police, HMRC, Local Authorities. We will always check to ensure that such requests are legitimate and have relevant DPA 2018 exemptions before sharing information.
Contractual – necessary for the performance of a contract between you and us or pre-contractual requests made by you
This includes all contracts our customers enter into with us or our business partners, including (but not limited to) all forms of marketing agreements, landlord, tenant and tenancy agreements, the arranging of mortgages and insurance products, marketing agreements etc.
Some examples of where it would be necessary to process and/or share information to perform a contract would be:
In addition, our external call centre will have access to your contact information in order to assist you when your local office is busy taking other calls.
Legitimate Interests – processing/sharing information for the benefit of you, us and other parties on which your transaction depends. It will not be processed or shared on this basis if it would be detrimental to you to do so.
This primarily involves providing you with information about additional services we offer within CR Real Estate that will help you to achieve your property aims.
Some examples of this are:
Information will only be shared by CR Real Estate where it is in the legitimate interests of both the company and its customers or where consent has been obtained. Some examples are:
Consent – where you have given your consent for us to process and/or share your information in a particular way for a specific reason.
This includes every form of data processing and/or sharing that is not included in the above sections. Where you have provided consent, you may be contacted by carefully selected and professional third parties in relation to a product or service which may be of interest to you. This may include (but is not limited to) referrals to our conveyancing panel firms. It could also include referrals for the provision of additional legal services such as Wills and consent from landlords or tenants for referrals to energy or media providers.
The data you provide may be used for any or all of the following reasons:
The information we use is normally restricted to the information you provide to us. This includes (but is not limited to) your full name, postal address, email address, telephone numbers, date of birth, demographic information and proof of funds that we are legally obligated to obtain from buyers. We also source information which is already in the public domain e.g. government, commercial and opted in marketing sources which is collated using APIs such as “Twenty CI”, “Twenty EA” and “T2A” operated by Simunix Ltd.
As with many organisations, communications by telephone may be recorded for the purposes of monitoring and improving our customer service standards.
In the case of electronic communications, CR Real Estate may use the information provided by customers in an existing business relationship or one that has ended within the last 12 months or one that is under negotiation. Otherwise, we will contact you and include a method for opting out of future contact.
We will not share your personal data outside of CR Real Estate other than as described in this Privacy Policy or without your verbal or written consent.
Should you wish to withdraw your consent at any time, please contact us using the details provided below.
Third parties
We will never sell your data to any third party.
As Data Controller, we may instruct third parties to act on our behalf as Data Processors. We will only share your data with such companies, strictly in accordance with a contractual arrangement between us and them to provide specific services on our behalf. Such contracts commit those third parties to ensuring the protection of your personal information and privacy.
Examples of this are:
These include; BoostOnline UK Group Ltd, Computer Software & Peripherals Limited, Mortgage Advice Bureau Limited and Mortgage Advice Bureau (Derby) Limited, Vebra Solutions Limited. IT service providers may operate inside or outside of the UK but are contractually bound to uphold the obligations of DPA 2018.
We may also share your data with third parties to assist you with your property related needs across sales, lettings, conveyancing and mortgage services.
In order to comply with our legal obligations, we utilise online search providers to verify the identity of our customers. This includes Sanction Search and Experian, who retain a record of the search data which may be used to assist their other customers. Such searches leave a soft trace only and do not affect our customer’s credit rating.
Outside of these scenarios, the information we share with third parties offering support services will be restricted to property details only and will not include personal data. Examples of this are the companies who operate the ‘live chat’ facility on our website and those who handle our ‘out of hours’ telephone calls.
We may use your data for internal analysis to monitor and improve the services we provide.
In the event of you escalating a complaint to The Property Ombudsman redress scheme, they may utilise your contact information for their compliance mornitoring/survey processes.
Security of Your Data
We will securely retain all paper files containing your data in cabinets and offices which will be locked when unattended.
Electronic data is securely held and protected by anti-virus software and firewalls. Our servers are subjected to regular penetration tests to check that they are securely protecting your data. Data held on laptops is password protected and subject to the same anti-virus software and firewalls. No personal data is held on iPads or mobile telephones.
As with any company, we are unable to provide absolute guarantees due to the ever-increasing sophistication of criminal activity. However, we will do everything reasonably possible to ensure that your data is protected.
How long we will keep your information for?
CR Real Estate will retain your data for as long as is necessary to provide you with the services requested until your property needs are met and to comply with our internal and regulatory requirements. This will vary according to the extent of your relationship with us. For example:
Data relating to an inactive customer e.g. a person whose property is not currently on the market (whether appraised by us or not), or who is not actively viewing properties will be retained for a period of up to 2 years from the time we last had communications with you, depending on whether your property needs have been met or not.
Data relating to a prospective buyer/tenant e.g. a person who has been introduced to one or more properties, either by way of a viewing appointment or by giving verbal/written property information, but who is not involved in a transaction or any other business activity through us, will be retained for 2 years after the last related property has been withdrawn. This is in order to ensure a complete record of activity against each corresponding property.
Data relating to a seller/buyer/landlord/tenant who has entered into a contract or is involved in any business transaction with us will be retained for a maximum period of 7 years from the end of the business relationship.
Data relating to mortgage customers will be retained for between 6 years and the lifetime of the mortgage, depending on our retention policy when the mortgage was arranged.
Data provided by customers raising service concerns will be retained for a minimum of 12 months and a maximum of 6 years, depending on the nature of those concerns.
Your rights
You have the right to tell us not to use your personal information for marketing purposes. You can exercise this right by unsubscribing using the link in any of the marketing emails we send you.
UK data protection law also gives you the right to access your personal information, to object to the use of your personal information for certain purposes, and the right to erase, restrict or receive a machine-readable copy of your personal information. You can exercise any of these rights by contacting us at the address below.
We will comply with the law in responding to your requests. That means that there may be some legal reasons why we cannot comply with all requests.
How to contact us if you have concerns
Should you have any queries in respect of this Privacy Policy or our use of your data, we would welcome the opportunity to resolve your concerns directly in the first instance. Please email us at: enquiries@crrealestate.co.uk or telephone on 01634 570057. The Data Controller is RHJB Ltd.
If we are unable to resolve your concerns, The Information Commissioners Office (ICO) are the appointed regulators for DPA 2018 and can be contacted by email at: www.ico.org.uk or by telephone on 0303 123 1113.
Do We Use ‘Cookies?’
A ‘cookie’ is a text file which is allocated by our server to your personal computer when you visit our website.
Cookies help us analyse how visitors use our website, allowing us to continually improve to best meet our visitor’s needs. The information generated by the cookie about your use of the website (including your time and duration of visit, which pages you visited, browser used, IP address etc) will be stored on our server and will not be shared with third parties.
You may refuse the use of cookies at any time by selecting the appropriate settings on your browser. More information regarding our cookie policy can be viewed at: https://crrealestate.co.uk/cookie-policy/
