02Legal

Privacy policy

How BPS Lettings collects, uses, and protects your personal data under UK GDPR.

BPS Lettings Ltd (“BPS”, “we”, “us”) is the data controller for personal data collected through this website. We are committed to handling your data responsibly and transparently.

1. Data we collect and how

1.1 Information you provide

When you submit a property requirement, list a property, or use the contact form, we collect:

  • Your name
  • Email address
  • Phone number (optional)
  • Organisation name (optional)
  • The content of your message or requirement

1.2 Automatically collected data

We may collect standard server logs including IP addresses and browser information when you visit this website. This is used solely for security and operational purposes.

2. Lawful basis for processing

We process your personal data on the following lawful bases under UK GDPR:

  • Contract — to take steps at your request prior to entering into a property transaction or sub-lease agreement.
  • Legitimate interests — to respond to enquiries, manage our business, and improve our services. Our legitimate interests do not override your rights.
  • Legal obligation — to comply with applicable laws, including anti-money laundering regulations.

We do not use consent as the primary lawful basis for processing enquiry data. Where we rely on consent for any purpose (e.g. marketing communications), we will make this clear at the point of collection.

3. How we use your data

We use your personal data to:

  • Respond to your enquiry or process your property requirement
  • Match your requirement against available properties or Landlord instructions
  • Communicate with you about the progress of a transaction
  • Comply with our legal and regulatory obligations
  • Maintain audit records for compliance purposes

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Data retention

We retain personal data for the following periods:

  • Enquiries and contact messages — 2 years from the date of enquiry, unless a transaction proceeds (in which case 7 years from completion).
  • Executed lease records — 7 years from the end of the lease term, for legal and regulatory compliance.
  • Audit logs — 5 years from the date of the event.

5. Your rights as a data subject

Under UK GDPR, you have the right to:

  • Access — request a copy of personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data where there is no compelling reason for its continued processing.
  • Restriction — request that we limit processing of your data in certain circumstances.
  • Data portability — receive your data in a structured, commonly used format where processing is based on consent or contract.
  • Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at hello@bpslettings.com. We will respond within one calendar month.

6. Cookies

We use essential cookies required for the site to function, and optional analytics cookies. Please see our cookie policy for full details.

7. Complaints

If you are unhappy with how we have handled your data, you may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated on this page with the date of last update. This policy was last reviewed: June 2025.


Related: Cookie policy · Terms of business · Contact us