Privacy Policy

Protecting your privacy is important to us; we want to be open with you on how and why we use your personal information.

We have split this policy into two sections:

  1. – this gives you an overview of how we process personal information.
  2.  – this provides a more detailed view of our processing activities.

We regularly review and update our Privacy Policy.  For an overview on the latest changes we have made in June 2026 please 

Consumer Privacy Policy Highlights

Below are some key highlights of our consumer privacy policy, however you can still view our 

Who does our Consumer Privacy Policy apply to?

Our consumer Privacy Policy covers users of our consumer websites, suppliers and potential suppliers, job applicants and journalists.

If you are a customer of Brickston Estate operating in a business to business capacity and have a professional membership with Us, please refer to our 

If you are an employee of Brickston Estate, please refer to our Employee Privacy Policy made available to you via our HRIS.

Who we are

This privacy policy covers the following companies in our group: Brickston Estate, WL2T & Technology and Consulting SL. and our address is Calle Aurora 42. Binissalem-Mallorca-Spain Our VAT number is B16471567. We operate the following websites: Brickston Estate.

We also own WL2T & Technology and Consulting SL. which operates the following site Brickston Estate.  Their privacy policy can be viewed here: Brickston Estate

We provide our platforms so that we can offer the following:

  • place to advertise properties for sale and rent.
  • tenant and landlord related services (e.g. referencing, insurance, credit checks etc.).
  • home moving services e.g. (utilities, broadband etc.).
  • financial services (mortgage in principle).
  • housing market trends and historical property data.
  • valuation and surveying tools.

Personal data we collect

We collect the following categories of personal data:

  • Property data: such as images of properties, including videos and virtual tours, property asking prices, sales history and sold prices, property addresses, floorplans, property locations and property descriptions.  Property data alone is generally not considered personal data unless it is combined with other information which relates it to an identified or identifiable individual.
  • Correspondence and enquiry data: such as name, email address, property address, content of message, telephone recordings and any transcriptions of telephone calls.
  • Technical and analytical data: such as device type, IP address, web logs, usage of our site, browser type, mobile number, operating system, GPS location data, how you interact with our marketing communications, analytical data and insights..
  • Financial services data (mortgage in principle): such as contact and identity data, applicant data, employment data, financial data, property data, lifestyle data, mortgage in principle decision.
  • Tenant and guarantor referencing data: contact and identity and verification data, employment data, education data, financial data, property data, lifestyle data, next of kins details, references.
  • Insurance and tenant related services data: such as name, email address, property address, date of birth, employment history and status, health data, race or ethnicity, disclosure of unspent criminal convictions, payment details, signatures.
  • Job applicant data: details contained in your CV and cover letter and references.
  • Supplier and potential supplier data: contact and identity data, PEPs and sanctions checks, criminal offence data, identity and verification data.

Sources of personal data

We process personal data that we receive from:

  • you when you get in touch with us, create and use your My Brickston Estate Account, make use of our websites and services, enquire about a property or request a valuation,  are or wish to become a supplier or apply for a job with us.
  • our members (e.g. estate and letting agents) when they advertise properties on our sites or wish to conduct credit and reference checks for potential tenants and mortgage broker partners when you request their assistance with a mortgage in principle.
  • third parties (e.g. Land Registry, Land Register of Scotland, credit reference agencies, identity service providers and fraud prevention agencies).
  • our partners (e.g. mortgage providers).

Purpose and lawful basis

We rely on a mixture of performance of contract, legitimate interests, consent and legal obligations to process your personal data in order to:

  • advertise properties on our sites.
  • build property databases, valuation and surveyor tools.
  • provide current and historical market and property trends.
  • provide services such as:
    • enabling you to enquire about property or request a property valuation.
    • tenant and guarantor referencing including credit checks.
    • home related services such as a tenancy agreement, facilitating payment between our members and you, insurance and utilities.
    • financial services such as mortgage calculator, to apply for and receive a mortgage in principle and to send any referrals or enquiries to mortgage broker partners.
  • resolve any queries or complaints you may have.
  • customise and enrich your experience on our sites.
  • process your job application and consider you for our vacancies.
  • help keep our site safe and secure.
  • where you are a supplier or potential supplier, to conduct supplier due diligence and to engage in services.
  • improve our sites and services and to help trouble shoot.
  • monitor for quality assurance and internal training.

How long we keep it for

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information. In some circumstances we may anonymise your personal information so that it can no longer be associated with you.

Sharing of your personal data

We may share your data with the following types of companies to provide our services to you:

  • our members/partners when you enquire with them via our website.
  • companies in the Brickston Estate group as we all provide different parts of the services.
  • law enforcement, fraud prevention agencies and credit reference agencies.
  • service providers we use to help us deliver our services and sites (e.g. telephony, customer ticketing systems, IT providers, ID and verification providers etc).
  • advertising partners if you have consented to that sharing. 

Storing your personal data

We predominantly store and process your personal data in the European Economic Area (EEA). However, in some circumstances it may be transferred to, stored or accessed outside the EEA. As such we will ensure we have appropriate safeguards and security measures in place to protect your data.

Profiling and automated decision making

We may profile your activity on our sites, and platforms to help us better understand your needs and home moving stage so that we can customise your experience on our sites, suggest services that may be of interest to you, tailor our communications with you and to identity opportunities to improve training and insights with us and our members and for service and product improvements . We do not make automated decisions which will have a legal or similar effect on you. The mortgage lenders we work with use automated decision making to assess your mortgage in principle applications based on the information you provided them.

You can always object to profiling by emailing us at: info@brickstonestate.com.

Use of AI

We use AI, machine learning models and other similar technology to help us analyse trends, improve our platforms and services, enhance our customer services, better understand your needs, to provide you a more customised experience on our platforms and to improve our communications with you.  We do not use AI to make any automated decisions which will have a legal or similar effect on you.

Your rights

You can exercise any of your rights (right to access, rectification, erasures object or restrict processing, request that we transfer your data to another data controller, or withdraw consent where you have given us consent in the past) by contacting us at: info@brickstonestate.com or writing to the

Direct marketing

If you have given us permission, we’ll send you marketing messages either directly from us or on behalf of our members or partners. We will customise our communications with you based on your use of our platforms. You are in control and can opt out of direct marketing at any time by contacting us or updating your preferences.

Contacting us

If you have any questions about this policy, how we use your personal data, wish to exercise any of your rights, have a data protection complaint, or want to report a suspected breach of your personal data, please contact us at info@brickstonestate.com or alternatively you can write to the

Full consumer privacy policy

Who we are

This Privacy Policy covers Brickston Estate and any of Our subsidiary companies under Section 1159 Companies Act 2006 (referred to as “We” or “Us” or “Our” or “Brickston Estate”) with the exception of WL2T & Technology and Consulting SL. These include:

  • Brickston Estate. Legal Name: WL2T & Technology and Consulting SL. and our address is Calle Aurora 42. Binissalem-Mallorca-Spain Our VAT number is B16471567.

3;

We are the providers of the Brickston Estate mobile application software (referred to as the “App”) and the websites Brickston Estate (referred to as the “Site”) (together referred to as “Our Platforms”) and any other Services We may operate in the future.

Our consumer Privacy Policy covers users of our consumer websites, suppliers and prospective suppliers, job applicants and journalists.

If you are a customer of Brickston Estate operating in a business to business capacity and have a professional membership with Us, please refer to our 

If you are an employee of Brickston Estate, please refer to our Employee Privacy Policy made available to you via our HRIS.

“Members” includes, but is not limited to estate agents, commercial agents, letting agents, managing agents, landlords, new homes developers, housing associations, overseas property owners, Build to Rent developers, surveyors, banks, building societies, insurance companies, utility providers, mortgage broker partners, other lenders and financial institutions, geo spatial platforms, Government departments, executive agencies, quangos, Acedemia institutions, utility providers, professional advisors, selected CRM software providers whom we have a commercial relationship with and other categories of Members as such emerge. We are not an estate agency.

“Partners” are selected companies whom We choose to work with, whom we have a commercial relationship with to offer complimentary Services such as financial services (e.g. mortgage in principle), currency exchange, utilities and broadband.

“Prospective Members” means businesses who have contacted Us to enquire about becoming a Member or who We have identified as a potential customer.

“Services” or “Service” include property advertising, insurance and tenant related services (which includes tenant referencing, rent guarantee insurance, landlords’ contents and/or liability insurance, tenant’s contents and/or liability insurances, utilities and broadband), stamp duty land tax calculator, valuation and surveying tools,  property price tracking tools, renovation calculator and financial services (which includes mortgage in principle decision, mortgage and re-mortgage calculator).

“Suppliers” and “Prospective Suppliers” means any external third parties whom we may engage to enable us provide the Service or Services.

“Brickston Estate” means Brickston Estate mobile and its subsidiary companies.

We provide Our Platforms so that:

  • Our Members can advertise property details for You to view;
  • We, or Our Members, can provide insurance, tenant and financial services to You;
  • We can provide You with access to housing market trends and historical property data;
  • We and Our partners can provide complimentary services to You; and
  • We can provide Our Members access to valuation and surveying tools.

References to “Users”, “You”, “Yourself” or “Your” is a reference to individuals using Our Platforms or Services.

References to “Personal Information” means information that will allow Us to identify You and is set out in more detail in the sections below.

Introduction

We are committed to protecting Your privacy. This privacy policy (referred to as the “Policy”) explains how and for what purposes We use the Personal Information collected about You when You use the Site or download and use Our App on Your mobile device (“Device”). Please read this Policy carefully.

In the tables below We set out the types of Personal Information We collect, where it comes from, why We collect it, Our lawful basis for processing the Personal Information and how long We will keep it for.

Our Platforms are not intended for anyone under the age of 18 (referred to herein as “Children” or “Child”). Except in the limited circumstances set out below in the table, We do not knowingly collect or process Personal Information relating to Children. If You become aware that Your Child has provided Us with Personal Information without Your consent, please contact Us on info@brickstonestate.com and We will, upon verification, delete such Personal Information.

If You have a query about Personal Information relating to Your property on the Platforms, please contact Your estate agent or lettings agent directly or alternatively contact Us on info@brickstonestate.com.

Contacting us

We recommend You contact Us via email. If You prefer to correspond with Us via post, there may be a delay in Us receiving and responding to Your postal enquiries and therefore email correspondence is recommended for a quicker response.

If You would like to stop receiving direct marketing from Us please contact Us via email at info@brickstonestate.com  

If You have any questions about this Policy or Our use of Your Personal Information or would like to submit a subject access request or exercise Your other data subject rights, please contact Our Data Protection Officer/Team via email at info@brickstonestate.com or please write to The Data Protection Officer, Building 2, Caldecotte Lake Business Park, Milton Keynes, MK7 8LE. If You are located outside the UK but within the EEA, You may wish to contact our EU representative either by email at  info@brickstonestate.com or please write to: Brickston Estate EU Representative C/O Wodianka privacy legal GmbH Dockenhudener Str. 12a, 22587 Hamburg, Germany.

Personal information we collect

Properties advertised on our platforms

  • What We collect and where it comes from
  • Why We collect it
  • Our lawful basis for processing this Personal Information
  • How long We will keep it for

Historical property data

  • What We collect and where it comes from
  • Why We collect it
  • Our lawful basis for processing this Personal Information
  • How long We will keep it for

Personal information you give to us

  • What We collect and where it comes from
  • Why We collect it
  • Our lawful basis for processing this Personal Information
  • How long We will keep it for
  • Personal information we receive from third parties
  • What We collect and where it comes from
  • Why We collect it
  • Our lawful basis for processing this Personal Information
  • How long We will keep it for

Personal information we collect about you

  • What We collect and where it comes from
  • Why We collect it
  • Our lawful basis for processing this Personal Information
  • How long We will keep it for

Tenant and guarantor referencing

  • What We collect and where it comes from
  • Why We collect it
  • Our lawful basis for processing this Personal Information
  • How long We will keep it for

Financial services (e.g., mortgage in principle)

  • What We collect and where it comes from
  • Why We collect it
  • Our lawful basis for processing this Personal Information
  • How long We will keep it for

Profiling

We may from time to time profile Your activity when using Our Services or Our Platforms.

This profiling is based on telephone and email enquiries You send to Our Members, properties advertised on Our Platforms, cookies, Your activity on Our Site, information You either provide Us or We collect in the course of using Our Platforms and Services (such as living situation, property ownership, mortgage in principle decisions, Your journey with a mortgage broker partner and what Services You utilise on Our Site etc.). We may use this information both now and, in the future, to identify or indicate:

  • any properties You may have for sale or let;
  • whether You are intending to sell or let Your property or may be in the future;
  • if You have subsequently instructed one of Our Members to advertise Your property;
  • whether Your property is being advertised on Brickston Estate and its property status;
  • what stage in the home moving process You are;
  • whether You have a mortgage in principle decision;
  • whether You may require mortgage services, lending support or financial advice (such as a mortgage-in-principle) from our mortgage lender partner or mortgage broker partners.
  • whether You are a first time buyer, first time renter, re-mortgaging, investing, a seller, tenant, a landlord etc.;
  • if You may require a valuation of Your property;
  • whether You have been through Our tenant referencing.
  • actions You have taken on Our Sites; and
  • whether You are likely to require any of Our Services.

It takes place to help Us and Our Members:

  • understand what sort of properties You may be interested in;
  • identify opportunities to improve training;
  • match enquiries sent to Our Members with properties advertised on Our Platforms. This is to provide Our Members with market insights where Your property was subsequently advertised with another Member. This will be provided for training purposes only to help Our Members improve their processes for identifying where enquiries may have a property for sale or rent, either now or in the future;
  • to help Our Members identify opportunities within their enquiries, to categorise Your activity (such as usage of Our Site, whether you have a property for sale or rent, the advertising status of Your property and subsequent changes) to help determine how likely You are to require services from Our Members. Members may then contact You to offer their services, although they can only do so if they have a lawful reason to do so (known as a lawful basis of processing Your Personal Information);
  • identify whether You are a Landlord so Our Members can manage Your enquiry more effectively.
  • to customise Your experience on Our Platforms such as:
    • suggest properties that may be of interest to You;
    • suggest Our mortgages, valuations, insurance and referencing Services to You;
    • suggesting services from Our third party advertisers that may be relevant and of interest to You based on Your use of Our Platforms; and
  • send You customised emails about Our Services based on Your use of Our Sites and Your stage in the home moving process.

Use of AI

We make use of AI, machine learning, and other similar technologies (“AI”) to improve Our site, services, internal operations and communications.  We do not use AI to make any automated decisions which can have a legal or similar effect on You.  Examples of how We use AI include:

  • Helping Us better understand Your needs in order to provide You a more customised and relevant experience on Brickston Estate.
  • To help predict when You may require Our services (such as mortgages, broadband, insurance, valuation etc.) in order to provide You a timely and personalised experience on Brickston Estate and in our marketing communications with You.
  • To help identify Broadband deals based on Your requirements You tell Us when You use the Broadband tools on Our Platforms.
  • To tailor Our marketing communications with You.
  • To assist with responding to enquiries You may have with Us and improve Our communications with You.
  • Use anonymised behavioural datasets as training data to build Our own predictive models.   
  • To identify areas we can improve our services.
  • For training, monitoring and quality assurance purposes.
  • To enable You to restyle images of a property listing to help You visualise how a property could look.
  • Partners and Members who are Independent Controllers may use AI in their operations for their own purposes and will form their own lawful basis and be responsible for complying with their own obligations under Data Protection Legislation.  
  • AI Conversational Search: When You use this tool on Our site, it is designed to enhance Your property search experience. We do not use personal information to train large language models (LLMs), and We apply strict technical and organisational safeguards like pseudonymisation, redaction, data minimisation, limited retention periods, and other protective measures to ensure Your privacy when using AI. We ask that You avoid entering personal or sensitive data into Our tool, but if You do, beyond what is necessary for us to provide Our the service to you, We have legitimate reasons to process this information to ensure optimisation of our user experience.  We use analytics to help us identify how we can improve our services and for monitoring and quality assurance purposes.
  • Customer Services: when You correspond with Our customer services team via email, We use AI to triage Your query and to help Us better understand and respond to Your query.  Queries and responses will be used to help train Our models to better respond to queries. We apply appropriate technical and organisational controls to protect Your personal data, including limited retention periods.  We ask that You avoid supplying personal or sensitive data in Your correspondence with Us, but if You do, beyond what is necessary for Us to respond to Your query, We have legitimate reasons to process this information to ensure optimisation of Our user experience.  We use analytics to help us identify how we can improve Our services and for monitoring and quality assurance purposes. 
  • Recorded calls between You and Our Members:  AI is utilised to transcribe and extract insights from recorded calls in order to support training, monitoring, analytical and the enhancement of services for both Us and Our Members.  We apply appropriate technical and organisational controls to protect Your personal data, including limited retention periods.  We ask that You avoid revealing personal or sensitive data in the calls, but if You do, beyond what is necessary for Our Members to respond to Your query, We have legitimate reasons to process this information to ensure provision of the services.  We use analytics to help us identify how we can improve Our services and for monitoring and quality assurance purposes. 

Sharing of personal information between Brickston Estate and its subsidiaries

Personal Information You provide Us may be shared between Our subsidiaries in order to:

  • provide Our Platforms and Services to You;
  • improve Our Platforms and Services; and
  • customise Your experience on Our Platforms.

Use of your personal information for direct marketing and other communications

Direct Marketing

Where You have consented, We may Use Your Personal Information to provide direct marketing messages to You (which can include email, push notifications and SMS); either directly from Us or on behalf of Our Members or Partners. We will customise Our communications with You based on Your use of Our Platforms. You can opt out of direct marketing at any time from Our entities below by:

       Brickston Estate:

  • Using the unsubscribe links located at the bottom of the direct marketing emails We send You. Please ensure You click through to manage Your full marketing preferences;
  • Following the OPT out instructions on the SMS message.
  • Log into Your My Brickston Estate account to manage your marketing preferences; or
  • Contacting Us directly on info@brickstonestate.com.

     

        Brickston Estate Landlord and Tenant Services Limited:

  • Contacting Us directly on info@brickstonestate.com

It may take up to 72hours from the time You receive confirmation from Us that Your preferences are being updated to unsubscribe You from direct marketing.

The types of things that We may do include:

  • Providing direct marketing advertisements and communications to You via email, text, post or telephone;
  • Making suggestions and recommendations to You about Our Platforms, Services , Members or Partners that may be of interest to You (such as a property valuation, or mortgage services etc);
  • Tailor Our communications to You based on Your activity on Our Sites.
  • Communicating with You on third party social media platforms;
  • Monitoring the effectiveness of Our direct marketing communications and Your responses to it which can help Us improve Our Services and communications;
  • Using a clear image GIF to track results of an email campaign such as the device You use. You can turn this off for future emails by turning off images in the email itself;
  • Using tracking pixels in Our direct marketing communications which measure open rates, interactions with Our campaigns, identifies device and operating system You use.  We use tracking pixels for our own legitimate interests in order that We can analyse Our campaigns as well as to improve and tailor Our communications with You;
  • Where Your tenant reference is successful We may use Your Personal Information to contact You via text, email and/or telephone to inform You about insurance, utilities, broadband or other tenant related services (We obtain Your consent to send direct marketing to You for this processing as part of the tenant reference application form); and
  • We will retain Your marketing preferences to ensure We comply with Your instructions.

You can request the list of Our Members from whom We send marketing by contacting Our Data Protection Officer.

You can always make use of Our Platforms and Our Services without having to agree to direct marketing.

From time to time, We may review Our marketing consent wording and ensure it remains compatible with the intended purpose. We will notify You of any material changes and give You the opportunity to manage Your marketing preferences.

Other Communications

When You opt out of receiving direct marketing from Us, You will still continue to receive transactional messages (which can include email, push notifications, SMS) from Us regarding Our Platforms and Services. We have a legitimate interest to send You these communications, examples of which include:

  • Important updates to Our Services, Privacy Policy and Platforms;
  • Managing Your My Brickston Estate account;
  • For security reasons;
  • To contact You about Your mortgage in principle decision;
  • Receiving Property Alerts and/or Tracked Property Alerts where You have set them up in Your My Brickston Estate Account (You can amend your Property Alerts and/or Tracked Property Alerts at any time in Your My Brickston Estate account);
  • To contact You for market research purposes;
  • Where a home hunter shares a property with You via Our Platforms;
  • Where You have successfully completed a tenant reference, to contact You about insurance and tenant related services, please refer table above for more information;
  • Where You have started or completed a quote for Home Contents and Liability Insurance, We will send You an email reminding You of the quote or to complete the quote; and
  • Where Personal Information is provided to Us where You operate as a business and it has been sourced from publicly available information, We may contact You about Our Services in a business capacity only.

We use tracking pixels in Our email communications to You which captures whether You opened an email, device and operating system, and what parts of the email you engaged with.  We rely on legitimate interests to collect and process this information in order to improve and customise Our communications with You.

If you use Our App, we may send you push notifications to keep you informed about activity relevant to you. To do this, we use information such as your push token, device and app identifiers to ensure notifications are delivered to the right device. You can turn push notifications on or off at any time in your device settings or in the app.

 

Photos, images and videos of you

Where You have agreed to participate and feature in videos, images and photos for Us, these will be used for the purpose outlined to You at the time, which can include to promote Brickston Estate or its subsidiaries. This will be retained for as long as they are required for the purposes they were obtained for.  We have a legitimate interest to use these on any of Our Platforms or 3rd party social media platforms.

Removing property data from our platforms

If You have any concerns about the properties advertised on the Platforms, please contact Us at info@brickstonestate.com and We will endeavour to resolve the issue promptly.

If You are a vendor or landlord of a property that is being actively marketed on Our Platforms and You want this removed, please contact Your estate agent or lettings agent directly in the first instance.

If You have concerns about historical property information about a property featured on Our Platforms and You can prove to Us that You have a valid association to that property, please contact Us at info@brickstonestate.com

Who has access to your personal information?

We retain access to all Personal Information that We have collected from You or about You. Once Your Personal Information has been passed to one of Our Members in the course of providing Our Services (most typically when You communicate with an estate agent through Our Platforms) then Our Member will have a copy of the Personal Information that You have provided within Your enquiry and Your contact details which they will use to get in touch with You.

Property data, it is provided to Us by Our Members (or third parties that act on their behalf). Our Members (or any third party that acts on their behalf) will be responsible for Personal Information in their possession and that Personal Information will be subject to any privacy terms or policies that the Member has in place. We are not responsible for use (or misuse) of Your Personal Information by any of Our Members.

When Our Services are available via the websites of Our partners or Members, those partners or Members may have access to Your Personal Information. We may also have links to other third party websites from Our Platforms. Clicking on those links or enabling those connections may allow third parties to collect or share Personal Information about You. We are not responsible for the content, security, privacy policies and practices of any other third party websites, even if You access them using links from Our Platforms or if You can access Our Platforms or use Our Services from them. We recommend that You check the policy of each website that You visit and make sure that You are comfortable with the terms of such policies before You visit them or provide any Personal Information to them.

If Our business is sold or merged, or if We sell or buy any business or assets, We may disclose Your Personal Information to the prospective seller or buyer of such business or assets. We will make sure that any such transfer is done in a secure way.

If We offer or supply a Service to You that is provided on Our behalf by a third party, We may have to pass Your Personal Information to them in order to deliver the service. The categories of third parties (who are acting as Data Processors which means they are responsible for processing Personal Information on behalf of Us) include:

  • Telephony providers (including call recording);
  • Our support ticketing systems;
  • SMS providers;
  • E-calendar providers;
  • E-signatory providers;
  • Payment providers;
  • AI providers;
  • Translation and transcription providers;
  • Market research agencies;
  • Call transcription providers;
  • IT providers who provide systems to Us for the purposes of hosting and supporting Our Platforms and updates to Our Members such as delivering property and valuation enquiries to Our Members; and
  • Marketing agencies and systems that allow Us to send marketing communications to You and to make sure the marketing communications are relevant.

We may also use third parties to provide Services on Our behalf which may include processing (but not using themselves) Your Personal Information; for example, to complete partial addresses or to augment the Personal Information We hold about You. In either case, We will not pass Your Personal Information to anyone who is not also subject to adequate privacy commitments in Our contract with them.

Where You are undergoing tenant referencing, obtaining a quote for or purchasing tenant and insurance related services We have to share Your Personal Information with the following external parties set out below for the purposes set out.

  • Credit reference agencies for the purpose of checking that the details You have provided Us are correct and to obtain further details (as set out above).  Your Personal Data will be shared with a credit reference agencies or fraud prevention agency, which may then retain that Personal Data and disclose it to third parties for the purposes of credit risk assessment, identity verification, fraud prevention, debt collection or such other uses as set out in the Credit Reference Agency Information Notice found here:  
  • Payment providers to set up a direct debit and/or take payment from You;
  • Insurance brokers, providers and underwriters for the purpose of arranging insurance policies;
  • Debt collection agencies, tracing companies, bailiffs and legal advisors in order to recover monies due from You, to trace Your whereabouts or in pursuit of a claim against You; and
  • Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in the Kingdom of Spain who provide consultancy, banking, legal, insurance and accounting services.

We may be required to share Your Personal Information with the following external parties:

  • HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the Kingdom of Spain who require reporting of processing activities in certain circumstances;
  • Police or other such regulatory authority as part of an investigation or otherwise for legal or regulatory purposes;
  • Competent authorities as part of an investigation they may be conducting and where there is a valid lawful basis to do so.
  • Dispute Resolution agencies for the purposes of dealing with any complaints;
  • Spain law enforcement agencies and third party security companies for the purposes of ensuring that We comply with the law and have adequate security measures in place;
  • We will disclose Your Personal Information to other third parties if We are under a duty to disclose or share Your Personal Information in order to comply with any legal or regulatory obligation or request. This includes exchanging Personal Information with other companies for the purposes of fraud prevention and credit risk reduction; and
  • Personal Information You have provided to Brickston Estate either directly or via Our Partners or Members, may be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering. If fraud is detected, You could be refused certain services, finance or employment. For further details of how Your information will be used by Brickston Estate and these fraud prevention agencies, and Your data protection rights can be found by visiting.

We require all Our third party service providers to respect the security of Your Personal Information and to treat it in accordance with the law. We do not allow Our third party service providers to use Your Personal Information for their own purposes and only permit them to process Your Personal Information for specified purposes and in accordance with Our instructions.

You can request a list of Our third party partners and affiliates by contacting Our Data Protection Officer.

Where do we store your personal information?

Where possible we aim to store and process personal data in the UK and EEA.   

The Personal Information that We collect from You may be transferred to, processed and/or stored at, a destination outside the UK and European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for Us or for one of Our suppliers or contractors. Territories outside of the EEA may not have equivalent legal protections to those that apply within the EEA, but We are under a duty to make sure that Our suppliers and contractors located outside of the EEA continue to take all steps reasonably necessary to ensure that Your Personal Information is treated securely and in accordance with this Policy. We will use Standard Contractual Clauses and/or the UK-US Data Bridge for transfers to the United States of America.  By submitting Your Personal Information to Us, You agree to this transfer, storing or processing.

Unfortunately, the transmission of Personal Information via the internet is not completely secure. Although We will do Our best to protect Your Personal Information, We cannot guarantee the security of Your Personal Information transmitted to Our Platforms; any transmission is at Your own risk. Once We have received Your Personal Information, We will use strict procedures and security features to try to prevent unauthorised access.

We follow strict security procedures to ensure that Your Personal Information is not damaged, destroyed or disclosed to a third party without Your permission and to prevent unauthorised access to it. The servers and cloud based technology that store the Personal Information are kept in a secure facility with restricted physical access and We use secure firewalls and other measures to restrict electronic access. If We are working with third parties, We will require them to have in place similar measures to protect Your Personal Information.

Only employees who need access to Your Personal Information to perform a specific job are granted access to personally identifiable Personal Information. In addition, We limit access to Your Personal Information to those agents, contractors and other third parties who have a business need to know. They will only process Your Personal Information on Our instructions and they are subject to a duty of confidentiality.

We may require You to co-operate with Our security checks and provide identification before We disclose Personal Information to You. If You are a registered User, You can update the Personal Information held in Your My Brickston Estate account (that You give Us) at any time by viewing Your.

Where We have given You (or where You have chosen) a password which enables You to access certain parts of the Platforms, You are responsible for ensuring Your password is unique and for keeping this password confidential. We ask You not to share Your password with anyone.

We have procedures in place to deal with any suspected Personal Information breach and will notify You and any applicable regulator of a breach where We are legally required to do so.

We recommend You do not use public or shared devices where You are providing Your Personal Data to Us (such as mortgage in principle applications, sending enquiries about properties, requesting a quote etc) and take appropriate steps to ensure You have removed any local storage or session-based data from your shared/public Device.

Your rights

You have the right to ask Us not to process Your Personal Information at any time.

You have the right to use Our Platforms without consenting to direct marketing and the communication services that We provide. We will inform You (before collecting Your Personal Information) if We intend to Use Your Personal Information for such purposes or if We intend to disclose Your Personal Information to any third party for such purposes. We always use the most recently submitted form to be Your current consent status. If You are a registered User, but not signed in when You submit a form, We will not be able to Use Your saved settings so will deem Your consent choice to be as per the form You submit at the time. You can exercise Your right to prevent such processing by selecting the specific options in the fields or forms when You become a registered User.

You also have a right to:

  • Request access to or rectification of the Personal Information which We hold about You;
  • Request erasure of Your Personal Information in certain circumstances;
  • Restrict the processing of Your Personal Information;
  • Receive Your Personal Information that You have provided to Us;
  • Object to or restrict Our processing of Your Personal Information in certain circumstances; and
  • Request that We transmit Your Personal Information to another data controller.

Where We process Your Personal Information because You have given Us Your consent to do so, You have the right to withdraw Your consent at any time.

Where We process Your Personal Information under legitimate interests, if You object to processing, this will not affect any processing which has already taken place. In some limited instances, objecting to processing of all Your Personal Information may mean You are not able to use some of Our Services or Platforms.

To exercise any of these rights, please contact the Data Protection Officer whose contact details are provided earlier in this Policy. We will need to request specific information and identification documents (such as passport, driver’s license, title deeds etc.) from You to help Us confirm Your identity. This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it and to ensure we are only acting on the instructions of the data subject.  We will delete this ID within 7 days receiving it. We may also contact You to ask You for further information in relation to Your request to speed up Our response.

We try to respond to all legitimate requests within one month. Occasionally it may take Us longer than a month if Your request is particularly complex or You have made a number of requests. In this case, We will notify You and keep You updated.

As part of Our Data Protection obligations and to help Us improve Our Service, We maintain a register of Data Subject Right Requests which contains limited Personal Information (email address, type of request, reason for request, resolution, reference number, application number etc.). These records are only available to Our Data Protection Team or those with a need to know and would only be made available to the Information Commissioner’s Office upon request. We will retain these records for up to 6 years from the conclusion of the Data Subject Right Request, after which any Personal Information will be anonymised.

You have the right to complain to the Information Commissioner’s Office if You feel unhappy with the way We process Your Personal Information. Please visit www.ico.org.uk for more information.

 Complaints (Data Protection)

If You have concerns about how We handle Your personal information, We encourage You to contact us first so We can try to resolve the issue. You can raise a data protection complaint by emailing Our Data Protection Officer/Team at info@brickstonestate.com  or writing to the address set out in the “Your rights” section above. We will acknowledge Your complaint within 30 days.  We will then investigate Your complaint in line with our and inform You of the outcome in line with applicable data protection law, including the Data (Use and Access) Act 2025 (DUAA) and the UK GDPR.

How to report a suspected breach of Personal Information

We take the security and privacy of Your Personal Information seriously and have implemented appropriate technological and organisational measures to protect your Personal Information.  If you suspect Your Personal Information may have been breached, misused, or are concerned about the security of Your Personal Information please contact us on  info@brickstonestate.com.

Your duty to inform us of changes

It is important that the Personal Information We hold about You is accurate and current. Please keep Us informed if Your Personal Information changes during Your relationship with Us.

Cookies and tracking

Like many website and App providers, We use “cookies” to enable Us to personalise Your visits to Our Platforms, simplify the signing-in procedure, keep track of Your preferences and to track the usage of Our Platforms. We use a mixture of third and first party cookies. Our lawful basis for using cookies are as follows:

  • Strictly Necessary Cookies: We rely on legitimate interests as Our lawful basis for collecting and processing this data;
  • Functional Cookies: We rely on consent as Our lawful basis for collecting and processing this data; and
  • Personalisation (Targeting and Tracking) Cookies: We rely on consent as Our lawful basis for collecting and processing this data.

Some web browsers incorporate a “Do Not Track” feature. Currently, as there is not yet an accepted industry standard for how to respond to Do Not Track signals, Our Services and Our Platforms do not currently respond to such signals, however You can:

  • manage Your Cookie settings
  • if You want to restrict ads in general on Your Devices You may opt out from ad tracking by enabling “Limit Ad Tracking” or “Opt Out of Ads Personalisation” (as applicable to Your Device) in Your Device settings.

We may share certain personal information, such as hashed email addresses, with Google Ads to improve the accuracy of conversion tracking and advertising effectiveness. This data is processed securely and is only used for the purpose of matching conversions to advertising campaigns. You retain full control over your data and can manage your preferences or opt out at any time using our cookie consent mechanism

For full details about what cookies We set and why We use them, please see Our Cookie Policy available.  Whilst Our Apps do not use cookies, We do use similar technologies to collect information via Our App, for more information about data We collect which is stored on Your device and how We use it, please view Our App Data Storage Policy available.

We use Google Ads conversion measurement tools (including Google Ads Enhanced Conversions) to help us understand how effective our advertising is and to improve it. When you submit certain forms on our site (for example, when you send an enquiry/lead), we may use the email address you provide to create a one‑way hashed value (using SHA‑256) and share that hashed value with Google. Google uses it to try to match you to a Google account (if you are logged in) so that Google can attribute the conversion to the relevant advert and provide us with reporting and measurement. We do not send your email address in plain text for this purpose. Our lawful basis under data protection law is legitimate interests (to measure and improve the effectiveness of our advertising). We only activate Enhanced Conversions (and any related advertising cookies/tags) where you have consented to advertising/marketing cookies via our cookie banner (you can withdraw your consent at any time via our cookie preferences).  You can opt out by declining advertising/marketing cookies or updating your cookie preferences at any time; this will prevent future sharing of the hashed value with Google for Enhanced Conversions. 

When You visit Our commercial property pages or listings on Brickston Estate and provide consent via the cookie banner, We will collect Your IP address and share this with a third-party service to help Us identify the company domain and company name linked to that IP address. We use this information to help Us and our commercial Member agents understand which organisations are viewing commercial property listings and to help assess advertising performance.

If You use the platform, a separate Cookie Policy is in place which can be viewed 

 

Third party advertising

As well as providing the Services on Our Platforms, We also feature advertising from third parties. We use a range of advertising partners and technologies to help deliver third party advertisements on Our Platforms which may be relevant to You. To help ensure the advertisements are relevant, We match property listings data, information from cookies and clickstream data to create audience segments. We share Our audience segments with Our advertising partners and only allow certain companies to purchase advertising space on Our Platforms. For example third parties may wish to display advertisements to Users of Our Platforms which We deem as being renters and therefore We will offer space On Our Platforms where renters visit.

We use different technologies and practices for advertisers to purchase advertising space on Our Platforms. This includes Us selecting advertisements through a bidding process from selected companies which allows real-time advertising on Our Platforms, working with digital agencies or directly with third party advertisers.

We also use universal ID solutions if you have consented to them. These allow advertisers to link you with their advertising profiles and deliver personalised adverts on Our Platforms, they work by either: 

  • providing a hashed (one-way encrypted) version of your email address (if you have provided this to us) to an advertising partner working on our behalf. This does not involve any third party being able to read your email address, but allows advertisers who already have your email address to link your visit to Our Platforms with the information they already hold about you.

We partner with Publift, a programmatic advertising platform, to help manage and optimise advertising displayed on our website. Through this partnership, advertising technology (including tags and cookies) may be used to collect information about your device and interactions with our site. This information can include identifiers such as your IP address, device information, browser type, approximate location, and browsing behaviour. These technologies enable advertising to be delivered, measured, and, where applicable, personalised.  Publift works with a number of third-party advertising partners (such as ad networks and demand partners) who may also collect and process data via these technologies for similar purposes.  You can view a full and up-to-date list of Publift’s partners, along with details of their roles(e.g. controller or processor) and data processing activities, here: We recommend reviewing Publift’s privacy information to understand how your data is handled by these partners and what rights you may have in relation to such processing. 

You can request a list of the partners with whom We work by contacting Our Data Protection Officer.

To help Us deliver third party advertisements on Our Platforms We do use Cookies. For more information, please see Our Cookie Policy available

Special category data and criminal offence data

For Our tenant referencing, insurance, tenant and financial Services (mortgages – Mortgage in Principle and Mortgage Broker partners), We may collect special categories of Personal Information about You (this may include Your race or ethnicity, information about Your health, whether You appear on politically exposed persons or sanctions list, and any criminal convictions, whether You are in receipt of benefits or Your gender which could infer special category data). We rely on explicit consent to collect and process this data, however for some information being for insurance products We may rely on ‘insurance’ as Our condition of processing.

We may collect data on vulnerabilities You disclose to Us. This is on order to support You and improve Our Services to You and We will share this with insurance providers where an insurance sale is made and where Your consent is obtained. We only keep this information for as long as is necessary. We employ appropriate technical and organisational measures to ensure Your Personal Information is secure.

For financial services (mortgages – Mortgage in Principle and Mortgage Broker partners) where You correspond with Us and You identify You have a vulnerability, we may record that You are a vulnerable customer in Our ticketing system.  This is collected as part of Our consumer duty requirements.  We rely on Legitimate Interests and rely on the condition of ‘equality of opportunity and treatment’ to process this data.

Where You are undertaking PEPs and Sanctions checks as part of tenant referencing this may infer special category data and criminal offence data. We rely on substantial public interest, preventing or detecting unlawful acts and regulatory requirements relating to unlawful acts and dishonesty to process this data.

If You are a supplier or prospective supplier and You are a person of significant control we undertake PEPS and Sanction Checks and supplier due diligence checks which may infer special category data or criminal offence data. We rely on substantial public interest, preventing or detecting unlawful acts and regulatory requirements relating to unlawful acts and dishonest to process this data.

Aggregated data

We also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from Your Personal Information but is not considered Personal Information in law as this data does not directly or indirectly reveal Your identity. For example, We may aggregate Your usage data to calculate the percentage of users accessing a specific feature on Our Platforms. However, if We combine or connect aggregated data with Your Personal Information so that it can directly or indirectly identify You, We treat the combined data as Personal Information which will be used in accordance with this Policy.

Change of purpose

We will only use Your Personal Information for the purposes for which We collected it, unless We reasonably consider that We need to use it for another reason and that reason is compatible with the original purpose. If You wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact Us. If We need to use Your Personal Information for an unrelated purpose, We will notify You and We will explain the legal basis which allows Us to do so. Please note that We may process Your Personal Information without Your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Changes to this policy

We regularly review and update Our Privacy Policy.  For an overview on the latest changes We have made please.

We may change the terms of this Policy at any time. Any changes We may make to this Policy in the future will be posted on Our Platforms and displayed on-screen when You use Our App.

You may be required to read and accept any revised Policy to continue Your use of Our Platforms. The amended terms will be made available with new uploads or updates of the App and will be displayed in the Privacy Policy section of the App.

Please check back frequently to see any updates or changes to this Policy, as You will be deemed to accept such changes from Your continued use of Our Platforms.