Privacy Policy (UK)

Last updated: 1 September 2025

This Privacy Policy explains how CARR Property (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you use our website at [https://carrproperty.co.uk] (“Site”) or work with us as a landowner, developer or partner (our “Services”).

We are the data controller for the personal data we process.
Contact: CARR Property, 1 London Road, Ipswich, IP1 2HA, [email protected].

If you have any questions about this notice or your rights, contact us at [email protected].

1) What data we collect

Identity & contact: name, email, phone, address.
Property & project: property address, title/ownership details, photographs, drawings, planning history, constraints, access and utilities, price/valuation expectations, correspondence.
Business details (for developers/partners): company name, role, areas of interest, deal criteria, capacity, proof of funds (where supplied).
Marketing preferences: opt-in/opt-out status.
Technical data: IP address, device/browser type, pages viewed, referral source, cookies and similar technologies (see “Cookies”).
KYC/Compliance (only if needed): identity checks and sanctions screening necessary to meet our legal obligations.

Sources: information you give us; public sources (e.g., HM Land Registry, local planning portals), professional referrers, and service providers who help us deliver our Services.

2) How we use your data (lawful bases)

We process your data only where permitted by law:

- To provide our Services (performing a contract or steps at your request): responding to enquiries, carrying out site assessments, introducing parties, coordinating planning/legals, preparing heads of terms.

- Legitimate interests: running and improving our business and Site, due diligence on opportunities, preventing fraud/abuse, keeping records, client relationship management. We balance these interests with your rights.

- Legal obligations: maintaining accurate records, tax and accounting, anti-money-laundering and sanctions checks where applicable.

- Consent: sending direct marketing by email/SMS where required by PECR. You can withdraw consent at any time.

We do not sell your personal data.

3) Sharing your data

We share data only as needed:

- Professional advisers and service providers: planning consultants, surveyors, architects, valuers, solicitors, conveyancers, environmental specialists, insurers, IT/hosting, CRM and analytics vendors, subject to contracts and confidentiality.

- Counterparties: potential buyers, developers and funders where you have asked us to progress an opportunity or where disclosure is necessary to evaluate or complete a transaction.

- Authorities and regulators: where required by law or to protect our legal rights (e.g., HMRC, law enforcement, the courts, the ICO).

Corporate events: if we undergo a reorganisation, merger or sale.

4) International transfers

Your data is generally stored in the UK/EEA. If we use suppliers outside the UK/EEA, we will ensure appropriate safeguards (e.g., the UK International Data Transfer Agreement or EU Standard Contractual Clauses plus UK addendum).

5) Data retention

We keep data only as long as necessary for the purposes above. Typical periods are:

- Enquiries/leads (no ongoing engagement): 24 months from last contact.

- Projects/transactions: 6–10 years after completion to meet legal, tax and record-keeping requirements.

- Compliance (KYC/AML): as required by law (commonly 5 years).

- Marketing lists: until you unsubscribe or we detect inactivity (usually 24 months of no engagement).

We will securely delete or anonymise data when it is no longer needed.

6) Your rights

Under UK data protection law, you have the right to:

- access your data and receive a copy;

- correct incomplete or inaccurate data;

- erase your data (where applicable);

- restrict processing (temporarily limit use);

- object to processing based on our legitimate interests or to direct marketing;

data portability (where applicable);

- withdraw consent at any time (where processing relies on consent).

To exercise your rights, email [email protected]. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office (ICO). See ico.org.uk for details. We would appreciate the chance to resolve your concerns first.

7) Marketing

We will only send you marketing where permitted by law. You can opt out at any time by using the “unsubscribe” link in our emails or by emailing [email protected].

8) Cookies and analytics

We use cookies and similar technologies to run the Site, remember preferences, and understand performance. Where legally required, we ask for your consent before setting non-essential cookies.

You can manage cookies via your browser settings and (if implemented) our on-site cookie banner. For full details of the cookies we use, their purposes and lifetimes, please see our Cookie Policy.

9) Security

We apply appropriate technical and organisational measures to protect your data (access controls, encryption in transit, least-privilege access, staff confidentiality, supplier due diligence). No system is completely secure; if we become aware of a data breach that affects you, we will contact you and, where required, notify regulators.

10) Children

Our Services are not intended for children under 18 and we do not knowingly collect children’s personal data.

11) Changes to this policy

We may update this notice from time to time. We will post the new version on this page and change the “Last updated” date. Significant changes may be notified by email or Site notice.

Contact us: [email protected] | 1 London Road, Ipswich, IP1 2HA