cypress-estate-logo-white-green-350

Privacy Policy

1. Who are we?

Cypress Estate is the trading name of Cypress Estate Limited. Cypress Estate is committed to ensuring that your privacy is protected. This privacy notice aims to give you information on how Cypress Estate collects and processes your personal data, including any data you may provide through this website when you use our services, and/or request marketing to be sent to you.

By using Cypress Estate website and mobile website or otherwise providing your personal information to Cypress Estate, you agree to the collection, use and sharing of your information in accordance with this statement. Please read this privacy policy carefully.

2. How do we disclose and transfer your personal data?

We may transfer or otherwise process your personal information:

  • As part of the sale of Cypress Estate to another company.
  • When we have received your instruction to pass the sale of your property to another agent
  • To protect, defend or exercise the rights and property of Cypress Estate (including enforcing our Terms and Conditions).
  • When required by law and/or government authorities.

We will retain Personal Information for the period necessary to fulfil the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law.

You can stop receiving email messages from Cypress Estate by replying opt-out in any such message you receive or by writing to Cypress Estate, 130 Wood Street, EC2V 6DL, London, UK.

3. What personal data do we collect and how is it collected?

Personal data is information, or any combination of separate pieces of information, that could be used to identify you. We may collect information about you from a variety of sources. This includes information we collect directly from you, information we collect when you visit our sites, a local branch, other property portals or, when you create an account on our website, view our online content, use our mobile applications or other services; and information we collect about you from other third-party sources.

The data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

  • Identity Data includes first name, maiden name, last name, username or similar identifier, title, date of birth and gender.
  • Client Due Diligence Data includes company information, copies of proof of ID e.g. passport and copies of proof of address e.g. utility bill.
  • Contact Data includes delivery address, billing address, email address and telephone numbers.
  • Financial Data includes bank account and payment card details.
  • Transaction Data includes details about payments to and from you and other details of services we provide to you.
  • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
  • Profile Data includes your username and password, preferences, interests and any other related information.
  • Usage Data includes information about how you use our website and services.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

4. Why do we collect your personal data and how do we use it?

We gather this information to allow us to process your registration and provide you with the information, service or advice you have requested. We may also use the information you provide to us to improve the content and appearance of our website or catalogues. With a view to understanding our customers better, and where you have indicated that you would like us to, we will retain the information you provide us about yourself and details of any services which we have provided to you, to enable us to offer future services that are likely to interest you.

5. How long do we keep your personal data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

In particular, we will retain:

  • Identity Data and Contact Data:
    • Where we are marketing a property, until it is sold or let or we cease to have the instruction;
    • Where instructed by applicants, until a property is bought via Cypress Estate or until applicants inform us that they have purchased or rented a property elsewhere;
    • Where instructed by a vendor/landlord, we may write and confirm terms of business, keep them informed of the progress of the marketing and sale or let of their property.
  • Financial Data:
    • Landlord bank account details, which is used to pay rent into, refund fees or deposit allocated.
    • Tenant bank account details until we return the deposit at the end of the tenancy.

We are required by law and/or by our insurers to keep certain information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers.

In some circumstances you can ask us to delete your data: see Request erasure below for further information*.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

6. How do we protect your personal data?

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we ensure access to personal information is restricted to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to provide a training any of those Cypress Estate employees and workers who need access to personal information.

7. What rights do you have on your personal data?

Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. Please click on the links below to find out more about these rights:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact Cypress Estate for Subject Access Rights.

8. Changes to our Privacy Policy

We will post changes to this Privacy Policy and indicate the effective date when this Privacy Statement is updated. If we make any material changes to this Privacy Statement, we will notify you by sending an e-mail to the e-mail address you most recently provided us or by posting notice of the changes on this site.