Privacy Policy

Privacy Policy

Last updated: February 15, 2024

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You. We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Property2Lease LTD, 3 Dorset Gardens, Mitcham, England, CR4 1LX.
• Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
• Country refers to: United Kingdom
• Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Website.
• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analysing how the Service is used.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Website refers to www.Property2Lease.com, accessible from https://www.Property2Lease.com/
• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

• While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
• Names
• Address
• Phone numbers
• Email addresses
• Mailing addresses
• Contact preferences
• Contact or authentication data

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

• Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
• Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).
• Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We use both Session and Persistent Cookies for the purposes set out below:

• Necessary / Essential Cookies

Type: Session Cookies

Administered by: Us

Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

• Cookies Policy / Notice Acceptance Cookies

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

• Functionality Cookies

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.

• To deliver and facilitate the delivery of services to the user:

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To enable user-to-user communications:

Users' personal information is utilized to provide them with the services they have requested or opted for. This includes ensuring the smooth delivery of products, facilitating reservations, and enabling access to different features of our service.

Personal data may be employed to facilitate communication between users within our platform. This could involve messaging systems, forums, or other forms of interaction where users can communicate directly with each other.

• To respond to user inquiries:

Users' personal information is used to address inquiries, comments, or requests for assistance made by users. This ensures that users receive timely and relevant responses to their queries.

• To send administrative information to users:

Personal information is utilized to send important administrative messages to users, such as account notifications, updates to terms of service, or changes in policies.

• To deliver targeted advertising to users:

• To determine the effectiveness of promotional campaigns:

Users' personal information is analyzed to evaluate the effectiveness of promotional campaigns. This involves assessing factors such as user engagement, conversion rates, and overall campaign performance.

• To identify usage trends:

Personal data is analyzed to identify patterns and trends in user behavior and usage of our services. This helps us understand how users interact with our platform and enables us to make informed decisions about improvements and updates.

• To protect our Services:

Personal information may be used to safeguard the security and integrity of our services. This includes implementing measures to prevent fraud, unauthorized access, and other potential security threats.

• To request feedback:

Users' personal information may be used to solicit feedback and opinions about our services. This feedback helps us understand user satisfaction levels, identify areas for improvement, and make necessary adjustments to enhance the user experience.

• To send users marketing and promotional communications:

Personal data is utilized to send marketing and promotional communications to users. This includes notifying users about special offers, new products or services, and upcoming events that may be of interest to them. Users may have the option to opt-out of receiving such communications. We may share Your personal information in the following situations:

• Ad Networks:

Personal data may be shared with ad networks to facilitate targeted advertising campaigns and improve the relevance of advertisements displayed to users.

• Communication & Collaboration Tools:

Personal information may be shared with communication and collaboration tools to enable efficient communication and collaboration among team members or with users.

• Data Analytics Services:

Personal data may be shared with data analytics services to analyze user behavior, trends, and patterns, helping us improve our services and user experience.

• Data Storage Service Providers:

Personal information may be shared with data storage service providers to securely store and manage user data, ensuring its availability and accessibility as needed.

• Finance & Accounting Tools:

Personal data may be shared with finance and accounting tools to facilitate financial transactions, billing, and invoicing processes.

• Performance Monitoring Tools:

Personal information may be shared with performance monitoring tools to monitor and assess the performance of our services, ensuring optimal functionality and user experience.

• Retargeting Platforms:

Personal data may be shared with retargeting platforms to re-engage users who have previously visited our platform, helping to increase conversions and user engagement.

• Sales & Marketing Tools:

Personal information may be shared with sales and marketing tools to manage customer relationships, track marketing campaigns, and personalize marketing communications.

• Social Networks:

Personal data may be shared with social networks to facilitate social sharing functionalities and integration with social media platforms.

• Testing Tools:

Personal information may be shared with testing tools to conduct testing and quality assurance activities, ensuring the reliability and performance of our services.

• User Account Registration & Authentication Services:

Personal data may be shared with user account registration and authentication services to facilitate user registration, authentication, and access control processes, ensuring the security of user accounts. Retention of Your Personal Data The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You. Our Service may give You the ability to delete certain information about You from within the Service. You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy. Law enforcement Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency). Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation

• Protect and defend the rights or property of the Company

• Prevent or investigate possible wrongdoing in connection with the Service

• Protect the personal safety of Users of the Service or the public

• Protect against legal liability

Security of Your Personal Data

To ensure the security and confidentiality of users' personal data, our platform has implemented several robust measures:

• • Standard DV SSL Certificate:

We utilize a standard Domain Validation (DV) SSL Certificate to encrypt all data exchanged between users' devices and our servers. This encryption ensures that sensitive information remains secure during transmission, providing an additional layer of protection against unauthorized access and data breaches.

• Registration with Information Commissioner's Office (ICO):

We are registered with the Information Commissioner's Office (ICO), demonstrating our commitment to compliance with data protection regulations, including the General Data Protection Regulation (GDPR) and other relevant laws. This registration underscores our dedication to safeguarding users' privacy rights and maintaining the confidentiality of their personal data.

• Data Protection Measures:

We have implemented comprehensive data protection measures, including access controls, encryption protocols, and regular security audits, to prevent unauthorized access, disclosure, alteration, or destruction of users' personal data. These measures are designed to ensure that users' information is handled securely and in accordance with best practices.

• Employee Training and Awareness:

Our employees undergo regular training and awareness programs to educate them about the importance of data security and privacy. They are trained on proper data handling procedures, security protocols, and compliance requirements to ensure that users' personal data is handled with the utmost care and confidentiality.

• Secure Infrastructure:

We maintain a secure infrastructure with robust security mechanisms and protocols to protect against cybersecurity threats, such as malware, phishing attacks, and unauthorized access attempts. This includes firewalls, intrusion detection systems, and other security measures to safeguard our systems and users' data.

• Regular Security Audits and Testing:

We conduct regular security audits and testing to identify and address potential vulnerabilities in our systems and applications. This proactive approach helps us stay ahead of emerging threats and ensures that our security measures remain effective over time.

• Data Breach Response Plan:

We have established a comprehensive data breach response plan to mitigate the impact of any potential security incidents. This includes protocols for incident detection, response, and notification, as well as procedures for cooperating with authorities and stakeholders in the event of a breach. By implementing these measures, we prioritize the security and confidentiality of users' personal data, providing them with peace of mind knowing that their information is handled with the utmost care and always kept confidential. The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

GDPR Data Protection Rights

We want to ensure you are fully aware of all of your data protection rights provided by GDPR. Every user is entitled to the following:

Right To Access

Individuals have the right to demand confirmation from organisations as to whether or not their personal data is being processed and, if so, to access that personal data and get specific information about how it is being used. Individuals have the right to be aware of and check the legality of processing their personal data.

Here are some crucial factors to consider regarding the right to access:

• Requesting Access: Individuals have the right to request access to their personal data and information kept by organisations. This request can be given in either verbal or written form. The organisation must respond to the request in a reasonable amount of time, usually within one month.

• Confirmation and Information: The organisation must confirm whether it is processing the individual's personal data and, if so, provide a copy of the processed personal data. Furthermore, the organisation should provide information about the processing purposes, the categories of personal data that are being processed, the recipients or categories of recipients to whom the identifiable information has been or will be revealed the retention period for the personal data, and the individual's GDPR rights.

• Exemptions: In some cases, the right to access may be limited or exempted. For example, if granting access would jeopardise the rights and freedoms of others or if the material is protected by legal privilege. These exemptions are specific and must be evaluated on an individual basis.

• Fees: In most situations, the organisation should provide free access to the requested personal data. If the request is unreasonable or recurrent, the organisation may charge a reasonable price or refuse it. Any fees or refusals should be communicated to the individual in advance.

• Identity Verification: Organisations have the right to require further information to confirm the identity of the person requesting access. This is done to prevent personal information from being disclosed to unauthorised parties.

Right To Rectify

The General Data Protection Regulation (GDPR) grants individuals the right to rectify their Data. It offers individuals the right to request that an organisation correct or rectify their data if they believe it is erroneous, incomplete, or outdated. Here are some essential points about the right to correction to consider:

• Requesting Rectification: Individuals can request that an organisation correct their personal data if they believe it is inaccurate or incomplete. The request can be made either verbally or in writing, and the organisation must respond within a reasonable timeframe, usually one month.

• Verification and Evaluation: When an organisation receives a request for rectification, it must check the accuracy and completeness of the personal data. If the organisation discovers the data is erroneous or incomplete, it must correct it as soon as possible.

• Providing Supplementary Information: In addition to correcting erroneous data, the organisation should consider providing any additional information required to ensure the personal data is complete and current.

• Rectification Communication: If the organisation exposed inaccurate personal data to third parties, it shall notify those third parties of the rectification, if possible. If the individual asks it, the organisation should also tell them about the recipients of their data.

• Right to Restrictions: If an individual challenges the accuracy of their data and demands correction, they may have the right to limit the processing of that data while its accuracy is verified.

• Exceptions: There are some exceptions to the right to rectification. There may be times when rectification is not possible, such as when the accuracy of the data is questioned and requires more study. In such circumstances, however, the organisation should identify the data as challenged or take appropriate steps to ensure its veracity is validated as quickly as practicable.

Right To Erasure

One of the fundamental rights provided to individuals under the General Data Protection Regulation (GDPR) is the right to erasure, commonly known as the right to be forgotten. Individuals have the right to request that an organisation delete or remove their personal data in specific circumstances.

• Here are some crucial factors to remember concerning the right to be forgotten:

• Restrictions to the Right: The right to erasure is not absolute, and certain restrictions may apply. Organisations, for example, may be exempt from erasing personal data if doing so is necessary for exercising the right to free expression and information, complying with a legal obligation, establishing, exercising, or defending legal claims, or reasons of public interest in the field of public health.

• Requesting Erasure: Individuals can request that an organisation erase their personal data. The request can be made either verbally or in writing, and the organisation must respond within a reasonable timeframe, which is usually one month.

• Erasure Grounds: There are numerous grounds on which an individual might request that their personal data be erased. These include instances in which the personal data is no longer required for the purposes for which it was acquired or processed, the individual withdraws their consent (where consent was the legitimate basis for processing), there is a legal requirement to erase the data, or the data was treated unlawfully.

• Data Backup and Archiving: Under the right to erasure, an organisation is not required to delete personal data from backup or archive systems if those systems are not actively accessed or utilised. However, the organisation should have safeguards in place to ensure that wiped data is not restored or misused.

• Balance of Rights and Obligations: The right to be forgotten must be balanced against other rights and obligations. Organisations may be required to evaluate criteria such as the public interest in the availability of certain data, the exercise or defence of legal claims, or the requirement to comply with legal obligations requiring data preservation.

Right To Restrict Processing

Individuals have the right to request that the processing of their personal data be temporarily restricted. This indicates that the organisation can store the data but not further process it while the processing is restricted.

The following are critical points about the right to restrict processing:

• Grounds for Restriction: Individuals may exercise this right in certain circumstances, such as when they contest the accuracy of their personal data (until it is verified), when the processing is unlawful, but the individual opposes erasure, or when the organisation no longer requires the data for its original purpose but the individual requires it for legal claims.

• Processing Restrictions: When processing is restricted, the organisation is often simply allowed to store the data. Further processing is only permitted in certain circumstances, such as with the consent of the subject, for legal claims, or to protect the rights of another person or organisation.

• Restriction to Communicate: The organisation shall notify the individual if and when the restriction on processing their personal data is lifted.

Right to Object Processing

Individuals have the right to object to processing their personal data in certain circumstances. Unlike the right to limit processing, which aims to limit processing temporarily, the right to object seeks to permanently halt or stop specified forms of processing. The following are critical points about the right to object to processing:

• Grounds for Objection: Individuals have the right to object if they feel their personal data is being processed for objectives such as direct marketing, scientific or historical research, or the performance of a duty carried out in the public interest or in the exercise of official authority. They can also object when personal data is processed on the basis of legitimate interests unless the organisation can show sufficient valid reasons that outweigh the individual's interests, rights, and freedoms.

• Limited Processing: Individuals have an absolute right to object to the processing of personal data for direct marketing purposes at any time, and the organisation must stop processing the data for such purposes.

• Objection Process: Organisations must tell individuals about their right to object during data collection and provide clear and explicit ways for individuals to exercise this right. Individuals should be able to submit their objections freely and simply.

• Assessment and Compliance: Organisations must examine and respond to an objection, determining whether the processing of personal data is required and permissible. If the objection is justified, the organisation should stop processing the data unless it can show compelling legitimate grounds for doing so that outweigh the individual's interests, rights, and freedoms.

If you make a request, we have one month to respond. Please contact us if you would like to exercise any of these rights.

CCPA Privacy Rights (Do Not Sell My Personal Information)

We must acknowledge the CCPA because we deliver our items worldwide. California consumers have the following rights under the CCPA, among others:

• Request that a company that collects a consumer's personal data provide the categories and specific pieces of personal data that the company has gathered about the consumer.

• Request that a business remove any personal data it has gathered about the consumer.

• Request that a company that sells a consumer's personal information not sell the consumer's personal information.

• If you submit a request, we have one month to answer. Please contact us if you wish to exercise any of these rights.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers. If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page. We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about these Terms and Conditions, You can contact us:

• By email: Contact@Property2Lease.com
• By phone number: +44 7440 241494