Privacy Policy Content
Last updated: 28 April 2025. This policy applies to personal data collected by Crowborough Surveyor via this website (crowboroughsurveyor.co.uk) and in the course of providing our building surveying services.
1. Who We Are
Crowborough Surveyor is an independent firm of building surveyors based in Crowborough, East Sussex. We are the data controller for personal data collected via this website. We are registered in England and Wales.
For any data protection queries, please contact us via our website.
2. What Personal Data We Collect
We may collect the following categories of personal data from you:
- Contact information — name, email address, telephone number and postal address when you submit an enquiry via our contact form or HubSpot form
- Property information — the address and details of the property you are enquiring about
- Communication records — records of correspondence between us, including emails and form submissions
- Technical data — IP address, browser type, device information, pages visited and referring URL, collected automatically when you visit our website via cookies and analytics tools
We do not collect special category data (such as health data, financial data or biometric data) via this website.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- To respond to your enquiry — when you submit a contact form or request a quote, we use your name, email and contact details to respond to you
- To provide our surveying services — if you instruct us, we use your contact and property data to carry out the service and deliver reports
- To send relevant marketing communications — with your consent, we may send you information about our services, guides and property advice. You can unsubscribe at any time.
- To improve our website — we use anonymised analytics data to understand how visitors use our site and to improve content and user experience
- To comply with legal obligations — we retain certain data as required by RICS professional standards, HMRC and applicable law
4. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), our legal basis for processing your personal data is:
- Legitimate interests — for responding to enquiries and improving our services
- Contract performance — when you instruct us to carry out a survey or valuation
- Consent — for marketing communications (you can withdraw consent at any time)
- Legal obligation — where we are required to retain data by law or professional regulation
5. Cookies
Our website uses the following types of cookies:
- Essential cookies — necessary for the website to function correctly (e.g., session management, cookie consent preference)
- Analytics cookies — we use anonymised analytics to understand how our website is used. These cookies do not identify you personally.
- Marketing cookies — if you consent, HubSpot may place cookies to track interactions with our forms and marketing communications. You can manage your HubSpot cookie preferences via the cookie banner on our homepage.
You can control cookies via your browser settings. Disabling certain cookies may affect website functionality.
6. HubSpot
We use HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA) to manage contact forms and customer relationship management. When you submit a form on our website, your data is transmitted to and stored on HubSpot's servers. HubSpot's privacy policy is available at legal.hubspot.com/privacy-policy.
Data transfers to the US are protected by the EU-US Data Privacy Framework and HubSpot's standard contractual clauses.
7. Who We Share Your Data With
We do not sell your personal data to third parties. We may share your data with:
- HubSpot — our CRM and form platform (see section 6 above)
- IT service providers — companies that support our website hosting and technical infrastructure, who process data only on our instructions
- Professional advisers — solicitors, accountants or insurers where necessary for legal or regulatory purposes
- RICS — as required by our professional regulatory obligations
- Regulatory authorities — the Information Commissioner's Office (ICO) or other authorities where we are legally required to do so
8. How Long We Keep Your Data
We retain your personal data for as long as necessary for the purposes described in this policy:
- Enquiries that do not become instructions: 12 months from last contact
- Client data (instructions, survey reports, correspondence): 7 years from completion of the service, in accordance with RICS guidance and professional indemnity insurance requirements
- Marketing consent records: Until you withdraw consent
- Website analytics data: Anonymised; retained for up to 26 months
9. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to have inaccurate data corrected
- Right to erasure — to request deletion of your data in certain circumstances
- Right to restrict processing — to limit how we use your data in certain circumstances
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our website uses HTTPS encryption for all data transmission. Access to personal data within our organisation is restricted to those who need it to carry out their responsibilities.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available at this URL. Material changes will be notified via the website. The "Last updated" date at the top of this page shows when the policy was most recently revised.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us via our website. We take privacy seriously and will respond to all enquiries promptly.