Legal

Privacy Notice

What we collect, why the law lets us, who processes it, how long we keep it, and how to exercise your rights.

This notice explains how we handle personal data across this website and our advisory, lettings and management work. It is written to the standard Article 13 of the UK GDPR requires — every purpose has a stated lawful basis, every processor is named, and every retention period is stated.

Data controller: KATE.UVR LTD, trading as Prime Legacy Homes · Company No. 15384724 · Registered office: 71-75 Shelton Street, London WC2H 9JQ, United Kingdom

Last reviewed: 20 August 2026

01

Who we are and how to reach us

KATE.UVR LTD, trading as Prime Legacy Homes, is the data controller for the personal data described in this notice.

For anything in this notice, write to kate@primelegacyhomes.co.uk. Data protection queries are answered by the principal personally — there is no department to route around, and no form is required.

02

The personal data we collect

We collect only what the work in front of us requires:

  • Enquiries — your name, email address, phone number, the message you send, and the property or service it concerns.
  • Guides and newsletter — your email address, the language you browsed in, and the page you signed up from.
  • Client engagements — where we act for you in a purchase, letting or management matter: identity and address documents for anti-money-laundering checks, source-of-funds information where the law requires it, referencing information for lettings, and the correspondence and documents the engagement generates.
  • Website analytics — only if you accept analytics cookies: pages visited, approximate location at city level, device and browser type, and how you found the site.
03

Why we use it, and the lawful basis for each purpose

UK GDPR requires a lawful basis for every use of personal data. Ours are:

  • Answering your enquiry and discussing your requirements — legitimate interests (responding to people who contact us about our services).
  • Acting for you in a purchase, letting or management engagement — performance of a contract, or steps taken at your request before one.
  • Identity, anti-money-laundering and right-to-rent checks — legal obligation (the Money Laundering Regulations 2017 and the Immigration Act 2014).
  • Sending the guides or newsletter you signed up for — consent, withdrawable at any time through the unsubscribe link in every email.
  • Website analytics — consent, given or refused through the cookie banner and changeable at any time via "Cookie settings" in the footer.
  • Keeping statutory records and establishing or defending legal claims — legal obligation and legitimate interests.
04

Who processes it for us

We do not sell personal data and we do not share it with advertisers. The following providers process data on our instructions under written data-processing terms:

ProviderWhat it does for usWhere data is processed
Google FirebaseThe database, admin authentication and file storage behind this siteEEA and United States (Google Cloud)
ResendDelivers enquiry notifications and the emails you sign up forUnited States
PostHogWebsite analytics — loads only after you accept cookiesEuropean Union (EU-hosted)
VercelHosting and content deliveryUnited States and a global edge network

Beyond these processors, we disclose personal data only to professional advisers bound by confidentiality, to the other side's solicitors where a transaction requires it, and to public authorities where the law obliges us — for example HMRC or the National Crime Agency in an anti-money-laundering context.

05

International transfers

Some of the providers above process data outside the UK, including in the United States. Every such transfer relies on a safeguard recognised under UK law: an adequacy decision where one exists (including the UK Extension to the EU-US Data Privacy Framework for certified providers) or the ICO's International Data Transfer Addendum to the EU standard contractual clauses. Details of the safeguard applying to a specific provider are available on request.

06

How long we keep it

  • Enquiries that do not become engagements — deleted within two years of our last exchange.
  • Client files, including anti-money-laundering records — kept for five years after the engagement ends, as the Money Laundering Regulations 2017 require, then deleted.
  • Newsletter subscriptions — until you unsubscribe; the unsubscribe itself is kept so we do not email you again.
  • Analytics data — kept for no more than 24 months from collection.
07

Cookies and similar technologies

This site sets nothing beyond the following — no advertising cookies and no cross-site tracking of any kind:

NamePurposeTypeDuration
plh-cookie-consentRecords your accept or reject choice so the banner does not reappearStrictly necessary (browser localStorage)Until you clear it or press "Cookie settings"
ph_* (PostHog)Visit and usage analyticsConsent-based (cookies and localStorage) — set only after you acceptUp to 12 months

If you refuse, the site works identically — analytics simply never loads. You can change your mind at any time via "Cookie settings" in the footer, which brings the banner back.

08

Your rights

UK GDPR gives you the right to:

  • Access a copy of the personal data we hold about you.
  • Correct data that is inaccurate or incomplete.
  • Have your data erased where there is no continuing legal reason to keep it.
  • Restrict processing while a dispute about the data is resolved.
  • Object to any processing we base on legitimate interests.
  • Receive the data you gave us in a portable, machine-readable form.
  • Withdraw any consent at any time, without affecting what was done before.
09

Complaints

Requests under this notice are free and answered within one month — write to kate@primelegacyhomes.co.uk.

If you are unhappy with how we handle your data, tell us first and we will try to put it right. You also have the right, at no cost, to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10

Changes to this notice

When this notice changes we update the review date at the top of the page; a material change is flagged on this page itself. The current version was reviewed on 20 August 2026.

Questions about your data?

Write to us — data protection queries are answered personally, within one working day.

Contact Us