Privacy Policy

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

9.1 Right of Access (Subject Access Request)

You have the right to request a copy of the personal data we hold about you. This enables you to receive a copy of your data and check that we are processing it lawfully.

How to exercise: Submit a request to [email protected]. We will respond within one month of receiving your request.

9.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

How to exercise: Contact us at [email protected] with details of the information you believe is inaccurate.

9.3 Right to Erasure ("Right to be Forgotten")

In certain circumstances, you have the right to request that we delete your personal data, including where:

The data is no longer necessary for the purposes it was collected

You withdraw consent and there is no other legal basis for processing

You object to processing and there are no overriding legitimate grounds

The data has been unlawfully processed

Limitations: This right does not apply where we need to retain data to comply with legal obligations (e.g., money laundering records) or establish, exercise, or defend legal claims.

9.4 Right to Restriction of Processing

You have the right to request that we restrict how we use your personal data in certain circumstances, such as where:

You contest the accuracy of the data

Processing is unlawful but you don't want the data erased

We no longer need the data but you need it to establish, exercise, or defend legal claims

You have objected to processing pending verification of our legitimate grounds

9.5 Right to Data Portability

Where we process your data based on your consent or for contract performance, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

9.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Direct Marketing: You can object at any time, and we will stop processing your data for marketing purposes immediately

Legitimate Interests: You can object to processing based on legitimate interests, and we will stop unless we can demonstrate compelling legitimate grounds that override your interests

9.7 Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

However, this will not affect the lawfulness of processing carried out before consent was withdrawn.

9.8 Right Not to be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal effects or similarly significantly affect you. We do not currently engage in automated decision-making that would trigger this right.

9.9 How to Exercise Your Rights

To exercise any of these rights, please contact us:

Email: [email protected]

Post: HERITAGE PROPERTY PARTNERS LTD, 21 Downland Way, Durrington, Salisbury, England, SP4 8BX

We will respond to your request within one month, although this may be extended by two months for complex requests. We will inform you if we need to extend the response time.

Proof of Identity: To protect your privacy, we may ask you to verify your identity before responding to data subject requests.

No Fee Usually Required: You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive, or we may refuse to comply with the request in such circumstances.