Corford Properties Ltd
Legal

Privacy Policy

Last updated: 12 June 2026

Corford Properties Ltd ("Corford", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and disclose personal data and your rights in relation to it, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are (Data Controller)

Corford Properties Ltd is the "data controller" responsible for your personal data.

  • Company: Corford Properties Ltd
  • Company number: 17083908
  • Registered office: 61 Bridge Street, Kington, Herefordshire, HR5 3DJ
  • ICO registration: ICO: 00013812010
  • Email: admin@corfordproperties.co.uk

2. Personal data we collect

We may collect and process the following categories of personal data:

  • Identity and contact data: name, company name, job title, email address, telephone number, postal address.
  • Investor enquiry data: indicative investment capital, timescales, investment goals and any information you choose to share via our forms.
  • Correspondence data: messages, attachments and records of communications between you and us.
  • Technical and usage data: IP address, browser type and version, device information, pages visited, referring URL, and similar analytics data collected via cookies and similar technologies (see our Cookie Policy).

We do not knowingly collect special category data (such as health, racial or ethnic origin, religious beliefs or biometric data) and ask that you do not provide such information unless specifically requested.

3. How we collect your data

  • Directly from you when you complete a form, email us or correspond with us.
  • Automatically through cookies and analytics when you use our website.
  • From third parties such as professional advisers, referrers, identity-verification providers, Companies House, the Land Registry and publicly available sources.

4. Why we use your data (purposes & legal bases)

We process your personal data on the following lawful bases under Article 6 UK GDPR:

  • Legitimate interests — to respond to enquiries, manage investor relationships, provide and improve our services, ensure the security of our website and prevent fraud.
  • Performance of a contract — to take steps at your request prior to entering into a contract, and to perform any contract we have with you.
  • Legal obligation — to comply with anti-money laundering (AML), know-your-customer (KYC), tax, accounting and other regulatory requirements.
  • Consent — for non-essential cookies and any direct marketing where consent is required. You may withdraw consent at any time.

5. Sharing your data

We may share your personal data with:

  • Professional advisers (solicitors, accountants, surveyors, consultants).
  • Joint venture partners, lenders and co-investors where relevant to a project.
  • IT, hosting, email, CRM and analytics service providers acting as processors.
  • Regulators, government bodies and law-enforcement agencies where required by law.
  • Prospective purchasers in the event of a sale of our business or assets.

We require all third parties to respect the security of your personal data and to process it in accordance with the law.

6. International transfers

Where personal data is transferred outside the UK, we ensure an adequate level of protection by transferring only to countries deemed adequate by the UK Government, or by using the International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting or reporting requirements. Enquiry records are typically held for up to 24 months, and investor and contractual records for at least 7 years to comply with HMRC, AML and Limitation Act 1980 obligations.

8. Data security

We have appropriate technical and organisational measures in place to protect your personal data against accidental loss, unauthorised access, alteration or disclosure. Access to your information is limited to those with a legitimate business need.

9. Your rights under UK GDPR

You have the right to:

  • Be informed about how your personal data is used.
  • Access a copy of the personal data we hold about you.
  • Have inaccurate personal data corrected.
  • Request erasure of your personal data ("right to be forgotten").
  • Restrict or object to the processing of your personal data.
  • Data portability.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, please contact us at admin@corfordproperties.co.uk. We will respond within one month.

10. Marketing

We will only send you marketing communications where you have opted in or where permitted under the "soft opt-in" rules in PECR. You can unsubscribe at any time via the link in any marketing email or by contacting us directly.

11. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for further details.

12. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the revised "Last updated" date.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at admin@corfordproperties.co.uk or write to us at the registered office above.