Privacy Policy

Contact Information

ROC REAL ESTATE LTD

90 Walworth Rd
London SE1 6SW
United Kingdom

Get in Touch

Phone: +44 207 277 4415
Visit our contact page

At ROC Real Estate, we are deeply committed to protecting your privacy and maintaining the confidentiality of your personal information. As heritage property specialists serving discerning clients across Britain, we understand that trust is paramount in our professional relationships.

This privacy policy explains how we collect, use, store, and protect your personal data when you use our website or engage with our heritage property services. We are committed to transparency and compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Last Updated: July 20, 2025

This policy applies to all personal data processed by ROC Real Estate Ltd in connection with our heritage property services.

Data Collection Information

Personal Data We Collect

We collect personal data that you provide directly to us and data that is collected automatically when you use our services:

  • Contact Information: Name, email address, telephone number, postal address
  • Property Information: Property details, location, heritage status, requirements
  • Professional Details: Professional background, investment capacity, property portfolio information
  • Communication Records: Correspondence, meeting notes, consultation records
  • Technical Data: IP address, browser type, device information, website usage data

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

  • Avoid filling out contact forms, account registrations, or any data-submitting features.
  • Disable cookies through your browser settings (see our Cookie Policy for more details).
  • Contact us directly to request the deletion of any previously shared personal data.
  • We respect your privacy choices.

    If you would like us to delete your data, please reach out to us at the contact details provided on our [Contact] page. We will process your request promptly.

How Data is Collected

  • Direct Collection: Contact forms, consultation requests, telephone inquiries, email correspondence
  • Website Analytics: Google Analytics and similar tools to understand website usage patterns
  • Cookies and Tracking: Website cookies for functionality, analytics, and marketing purposes
  • Professional Networks: Industry contacts, referrals, and professional introductions
  • Public Sources: Property registers, planning applications, and publicly available heritage databases

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: Marketing communications and non-essential website features
  • Contractual Necessity: Providing heritage property services and fulfilling professional obligations
  • Legitimate Interests: Business development, service improvement, and professional networking
  • Legal Compliance: Regulatory requirements, anti-money laundering, and professional standards

Data Retention Periods

  • Active Client Records: Retained for the duration of our professional relationship plus 7 years
  • Marketing Data: Retained until consent is withdrawn or 3 years of inactivity
  • Website Analytics: Anonymized data retained for 26 months
  • Legal and Regulatory Records: Retained as required by professional and legal obligations

How We Use Your Personal Data

Primary Service Purposes

  • Providing heritage property consultations, valuations, and professional advice
  • Managing estate planning and succession planning services
  • Coordinating property restoration projects and heritage compliance
  • Facilitating property transactions and professional introductions
  • Maintaining professional records and client relationship management

Communication and Marketing

  • Responding to inquiries and providing requested information
  • Sending heritage property market updates and industry insights
  • Inviting clients to exclusive property viewings and heritage events
  • Sharing relevant regulatory updates and conservation opportunities
  • Professional networking and industry relationship management

Website and Service Improvement

  • Analyzing website usage patterns to improve user experience
  • Optimizing our heritage property service offerings
  • Developing new tools and resources for heritage property owners
  • Ensuring website security and preventing fraudulent activity
  • Personalizing content and service recommendations

Third-Party Data Sharing

We may share your personal data with trusted third parties in the following circumstances:

  • Professional Partners: Heritage consultants, conservation specialists, legal advisors
  • Service Providers: IT support, marketing agencies, professional indemnity insurers
  • Regulatory Bodies: RICS, HM Revenue & Customs, Financial Conduct Authority
  • Legal Requirements: Court orders, legal proceedings, law enforcement requests

Data Protection Measures

Technical Security Measures

  • Encryption: All sensitive data is encrypted both in transit and at rest using industry-standard protocols
  • Access Controls: Role-based access systems with multi-factor authentication for all staff
  • Network Security: Firewalls, intrusion detection systems, and regular security monitoring
  • Data Backup: Secure, encrypted backup systems with regular recovery testing
  • Software Updates: Regular security patches and system updates to maintain protection levels

Organizational Security Measures

  • Staff Training: Regular data protection training for all team members
  • Confidentiality Agreements: All staff and contractors sign comprehensive data protection agreements
  • Physical Security: Secure office premises with controlled access and CCTV monitoring
  • Document Management: Secure storage and controlled access to physical and digital records
  • Incident Response: Established procedures for data breach detection, reporting, and resolution

Data Breach Procedures

In the unlikely event of a data breach, we will:

  • Contain and assess the breach within 24 hours of detection
  • Notify the Information Commissioner's Office within 72 hours if required
  • Inform affected individuals without undue delay if there is a high risk to their rights
  • Take immediate steps to prevent further unauthorized access
  • Conduct a thorough investigation and implement additional safeguards

Your Rights and Data Management

Your Data Protection Rights

Under GDPR and UK data protection law, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete personal data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation on how we use your personal data
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent for marketing communications at any time

How to Exercise Your Rights

To exercise any of your data protection rights, please contact our Data Protection Officer:

Data Protection Officer
ROC Real Estate Ltd
90 Walworth Rd, London SE1 6SW
Telephone: +44 207 277 4415
Email: [email protected]

We will respond to your request within one month, or within three months for complex requests. We may require proof of identity before processing your request.

Complaints and Regulatory Contact

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

International Data Transfers

We primarily store and process your data within the United Kingdom. Where we need to transfer data internationally, we ensure adequate protection through:

  • Adequacy decisions recognized by the UK government
  • Standard contractual clauses approved by the ICO
  • Binding corporate rules for multinational service providers
  • Specific derogations where legally permitted

Questions About This Privacy Policy?

Our Data Protection Officer is available to address any concerns or questions about how we handle your personal data.

Contact Our Team

Last updated: July 20, 2025 | We review this policy annually and will notify you of any significant changes.