Legal & Compliance
Privacy Policy
How Sephid Properties collects, uses, and protects your personal information.
⚠️ Staff note — complete before publishing: Replace every
[PLACEHOLDER] with real details (last updated date, contact name, email address, office address) before this page goes live. Also confirm ICO registration is in place — most businesses that process personal data must register and pay the £52/year data protection fee at
ico.org.uk/registration.
Last updated: [PLACEHOLDER — add date before publishing]
1 Who We Are
Sephid Properties is a residential lettings and property management agency based in West Yorkshire, UK. We operate the website sephid.co.uk.
We are the data controller for personal information collected through this website. This means we are responsible for deciding how your personal data is collected, stored, and used.
If you have any questions about this policy or about how we handle your data, you can contact us at:
[PLACEHOLDER — contact name or role, e.g. Data Enquiries]
Email: [PLACEHOLDER — admin email address]
Address: [PLACEHOLDER — Sephid Properties address, West Yorkshire]
2 What Personal Data We Collect
We collect personal information when you interact with our website. This includes:
- Account registration: first name, last name, email address, and phone number when you create an account.
- Contact form and enquiries: name, email address, phone number, and any message you submit through our contact or enquiry forms.
- Property enquiries: details you provide when requesting a viewing, valuation, or consultation.
- Saved properties: records of properties you save to your account.
- Website usage: standard server log data including IP address, browser type, and pages visited. This is collected automatically and used only for security and performance monitoring.
We do not collect payment card details through this website. Any payments are processed through third-party providers subject to their own privacy policies.
3 How We Use Your Information
We use the personal data we collect for the following purposes:
- To respond to your enquiries and provide the services you have requested.
- To manage your account and provide access to account features such as saved properties and booking history.
- To send you information relevant to your enquiry, such as property details, viewing confirmations, or tenancy correspondence.
- To comply with our legal obligations, including Right to Rent checks and tenancy-related record-keeping requirements.
- To maintain the security and performance of our website.
Our lawful bases for processing your data under UK GDPR are: contract (where processing is necessary to provide a service you have requested), legitimate interests (for enquiry handling and website security), and legal obligation (where the law requires us to process or retain data).
We do not use your personal data for automated decision-making or profiling.
4 How Long We Keep Your Data
We retain your account information for as long as your account remains active. If you request deletion of your account, your personal data will be removed within 30 days, except where we are required by law to retain certain records (for example, records of completed tenancy agreements).
Enquiry records submitted via the contact form are retained for up to two years for business purposes, after which they are deleted.
We take reasonable steps to protect your information from unauthorised access, including encrypted password storage and secure server configuration. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
5 Who We Share Your Information With
We do not sell your personal data to third parties.
We may share your information with:
- Our hosting provider (Zume.net) — as a data processor, for the purpose of storing and serving our website.
- Professional advisors (e.g. solicitors) where this is necessary to complete a tenancy agreement or property transaction on your behalf.
We do not transfer your data outside the United Kingdom.
6 Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of any inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict how we process your data.
- Request a copy of your data in a portable format.
To exercise any of these rights, contact us at [PLACEHOLDER — email address]. We will respond within one month.
You also have the right to complain to the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
www.ico.org.uk