Privacy Policy

Who we are

Curzon Property Management Limited (trading as Curzon London) ("Curzon", "we", "us", or "our") is the data controller for the personal information we process in connection with our property management, development and advisory services. We are established in the United Kingdom and process personal data in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact for privacy matters: joffe@curzonlondon.co.uk

Scope of this policy

This policy applies to personal data we collect when you use our website, enquire about or receive our services, sign contracts with us, interact with us by phone, email, or otherwise, or engage with our marketing and events. It does not cover third-party websites or services that we do not control.

Personal data we collect

We may collect and process the following categories of personal data:

Identity and contact details (e.g. name, email address, telephone number, postal address)
Property and tenancy information (e.g. property addresses, tenancy details, service preferences)
Financial and payment information (e.g. bank details, payment records, invoices)
Communications and correspondence (e.g. emails, call notes, enquiry forms)
Technical and usage data (e.g. IP address, device information, browser type, pages viewed, cookies and analytics data)
Marketing preferences and engagement (e.g. newsletter subscriptions, event responses)

We do not intentionally collect special category data (e.g. health, ethnicity, biometric data) or data relating to criminal convictions, unless strictly necessary and lawful (for example, to comply with anti-money laundering or fraud prevention obligations). If we ever need to process such data, we will inform you and identify the applicable lawful basis.

Our services are not intended for children and we do not knowingly collect data relating to children.

How we collect your data

Direct interactions: when you contact us, complete forms on our site, sign agreements, or provide information to our team.
Automated technologies: via cookies, server logs, and analytics when you use our website.
Third parties: references from partners, professional advisors, credit reference agencies, and publicly available sources where lawful.

Lawful bases for processing

We process personal data under one or more of the following lawful bases:

Contract: to enter into or perform a contract with you (e.g. managing a property, providing services, processing payments).
Legitimate interests: to operate and improve our business, communicate with clients, maintain security, prevent fraud and pursue our commercial interests, provided your rights and freedoms are not overridden.
Legal obligation: to comply with laws and regulations (e.g. tax, accounting, anti-money laundering).
Consent: for certain marketing activities or where required by law. You can withdraw consent at any time.

How we use your data

To provide and manage property management and related services
To handle enquiries, customer service and communications
To issue invoices, take payments and keep financial records
To manage suppliers and professional service providers
To administer, secure and improve our website and IT systems
To send relevant service updates and (where permitted) marketing communications
To comply with legal, regulatory and risk management obligations

Marketing

You may receive marketing communications from us if you have requested information from us, purchased services from us, or opted in. You can opt-out of marketing at any time by using unsubscribe links in emails or by contacting us at joffe@curzonlondon.co.uk.

Cookies and analytics

We use cookies and similar technologies to operate our site, understand usage, and improve performance. You can set your browser to refuse some or all cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our site may become inaccessible or not function properly. For details, please see our Cookies page when available.

Sharing your data

We may share personal data with trusted third parties where necessary for the purposes described in this policy, including:

Professional advisers (e.g. legal, tax, accounting, surveyors)
Service providers and subcontractors (e.g. maintenance, contractors, IT providers)
Payment processors and banks
Identity verification and fraud prevention providers, where lawful
Regulators, law enforcement, and authorities where required by law

We require third parties to respect the security of your personal data and to process it only in accordance with our instructions and the law.

International transfers

If we transfer personal data outside the UK, we will ensure a similar degree of protection by using approved safeguards (for example, adequacy regulations, International Data Transfer Agreements (IDTAs) or Addenda to EU SCCs, or other lawful mechanisms).

Data security

We have implemented appropriate technical and organisational measures to help prevent unauthorised access, alteration, disclosure or loss of personal data. We regularly review our security measures and restrict access to personal data to those who have a business need.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. Retention periods vary depending on the type of record and applicable regulations. We will securely delete or anonymise data when it is no longer needed.

Your rights

Under UK data protection law, you have the right to:

Request access to your personal data (a "data subject access request")
Request correction of the personal data that we hold about you
Request erasure of your personal data
Object to processing of your personal data where we rely on legitimate interests
Request restriction of processing of your personal data
Request the transfer of your personal data to you or to a third party (data portability)
Withdraw consent at any time where we are relying on consent to process your data

To exercise any of these rights, please contact us at joffe@curzonlondon.co.uk. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

Complaints

If you have concerns about how we handle your personal data, please contact us first at joffe@curzonlondon.co.uk so we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: ico.org.uk
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Automated decision-making

We do not use your personal data for automated decision-making that produces legal or similarly significant effects. If this changes, we will inform you and explain the logic involved and the potential consequences, along with your rights.

Third-party links

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

Changes to this policy

We may update this privacy policy from time to time. We will post any changes on this page and, where appropriate, we will notify you by email. Please check back frequently to see any updates or changes.