Privacy Policy

Last updated: September 2026

Westwood Leber is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and disclose
your personal data when you visit our website, contact us, register with
us, request a valuation, enquire about a property, use our sales or
lettings services, or otherwise interact with us.

For the purposes of applicable UK data protection legislation, including
the UK General Data Protection Regulation (UK GDPR) and the Data
Protection Act 2018, the data controller is Westwood Leber.

Westwood Leber

8 The Pavilion

Hoddesdon

Hertfordshire

EN11 8UB

Email: hello@westwoodleber.co.uk

1. Information we collect from you

We may collect and process the following categories of personal data.

Information you give us

This is information about you that you provide when you:

complete forms on our website;
request a property valuation;
register for property alerts;
enquire about a property;
arrange or attend a viewing;
register as a buyer, seller, landlord, tenant or prospective tenant;
contact us by telephone, email or other means;
apply for a tenancy or property-related service;
enter into an agreement with us; or
otherwise communicate with us.

Depending on the service you use, this may include:

your name;
address and previous addresses;
email address;
telephone number;
postcode;
property requirements and preferences;
information about properties you own, are selling, buying,
letting or renting;
employment and income information;
financial information;
identification and verification information;
tenancy and referencing information;
information relating to guarantors;
payment and transaction information;
correspondence and communications with us; and
other information that you choose to provide.

We may process special category personal data where this is necessary
and permitted by law and where an appropriate legal condition applies.

Information we collect automatically

When you visit our website, we may automatically collect certain
technical information, including:

your IP address;
browser type and version;
operating system;
device information;
information about how you use our website; and
information about your visit, including pages viewed and
searches performed.

Our website also uses cookies and similar technologies.
Further information is available in our Cookie Policy.

2. Information we receive from other sources

We may receive personal data about you from sources other than you.

Depending on the circumstances, these sources may include:

landlords, tenants, applicants, buyers, sellers and property owners;
guarantors and other individuals connected with a transaction;
employers or former employers;
previous landlords or letting agents;
referencing and tenant-screening providers;
credit reference agencies;
fraud-prevention organisations;
deposit protection schemes;
contractors and property service providers;
professional advisers;
insurers and insurance-related providers;
government departments, regulators and public bodies;
publicly available sources and registers; and
other parties involved in a property transaction or in providing our
services.

The information received may include identity, contact, employment,
financial, tenancy, property, reference, credit or fraud-prevention
information.

Where we obtain personal data from another source, we will provide the
privacy information required by applicable data protection law, subject
to any applicable exemption.

3. How we use your personal data

We may use personal data held about you for the following purposes:

to respond to enquiries and requests;
to arrange property viewings and valuations;
to provide sales, lettings and property-related services;
to register you as a buyer, seller, landlord, tenant or prospective
tenant;
to identify properties that may be suitable for you;
to send property alerts where you have registered for them;
to assess and process applications;
to carry out identity, referencing, affordability, right-to-rent,
credit and fraud-prevention checks where appropriate;
to prepare, enter into and administer contracts and tenancies;
to manage properties and tenancies;
to arrange repairs, maintenance, inspections and other
property services;
to administer tenancy deposits and communicate with relevant
deposit protection schemes;
to process payments and maintain financial records;
to communicate with landlords, tenants, buyers, sellers, contractors
and other relevant parties;
to comply with our legal and regulatory obligations;
to prevent and detect fraud, crime and other unlawful activity;
to protect our business, customers, properties and systems;
to deal with complaints, disputes and potential legal claims;
to obtain professional advice where necessary;
to administer and improve our website and systems;
to monitor and improve our services;
to maintain the security of our website, systems and premises; and
where permitted by law, to provide information about our services
and other services that may be of interest to you.

4. Lawful basis for processing

We will only process your personal data where we have a lawful basis
under applicable data protection law.

Depending on the circumstances, we may rely on the following lawful
bases.

Contract

We may process your personal data where this is necessary to enter into
or perform a contract with you, or to take steps at your request before
entering into a contract.

For example, this may apply when providing sales or lettings services,
administering a tenancy, arranging property-related services or
processing payments.

Legal obligation

We may process your personal data where this is necessary for us to
comply with a legal or regulatory obligation.

This may include obligations relating to property and tenancy matters,
right-to-rent checks, deposit protection, financial and tax records,
fraud prevention, regulatory requirements and responding to lawful
requests from public authorities.

Legitimate interests

We may process your personal data where this is necessary for our
legitimate interests, or those of a third party, provided those
interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

operating and managing our business;
providing and improving our services;
managing properties and tenancies;
communicating with customers and prospective customers;
arranging property viewings and valuations;
matching prospective buyers and tenants with suitable properties;
preventing fraud and protecting our business and customers;
maintaining website and system security;
managing debts and enforcing contractual rights;
handling complaints and disputes; and
marketing our services where permitted by law.

Where we rely on legitimate interests, we will consider and balance
those interests against your rights and freedoms.

Consent

Where required, we may process your personal data based on your consent.

Where we rely on consent, you may withdraw your consent at any time.
Withdrawal will not affect the lawfulness of processing carried out
before your consent was withdrawn.

5. Marketing and property alerts

Where you register for property alerts, we will use the information you
provide, such as your contact details and property requirements, to
identify and communicate information about properties that may be
relevant to your stated requirements.

Our website currently provides a property-alert registration facility
which collects information including your name, email address, postcode,
contact number and property
preferences. Wimage (file:///C:/Users/TOMJAC~1/AppData/Local/Temp/msohtmlclip1/01/clip_image001.gif)Westwood
Leber

We may also contact you about our services where permitted by applicable
law.

Where consent is required for direct electronic marketing, we will
obtain that consent.

You can opt out of marketing communications at any time by using the
unsubscribe facility in the relevant communication or by contacting us.

6. Who we share your personal data with

We may disclose your personal data to third parties where this is
necessary for the purposes described in this Privacy Policy and where we
have a lawful basis to do so.

The categories of recipients may include:

Deposit protection schemes

Where you are a landlord or tenant, we may share relevant information
with an authorised tenancy deposit protection scheme in order to
register, administer or manage a tenancy deposit.

Referencing and screening providers

We may share relevant information with referencing, tenant-screening,
identity-verification, affordability and right-to-rent providers to
carry out appropriate checks.

Credit reference and fraud-prevention agencies

Where appropriate and permitted by law, we may provide or obtain
information from credit reference agencies and fraud-prevention
organisations.

Contractors and property service providers

We may share relevant contact and property information with contractors
and service providers, including plumbers, electricians, builders,
cleaners, gardeners, surveyors, inventory providers and other
professionals involved in providing property services.

Landlords and property owners

Where necessary to provide our services, we may share relevant
information with landlords, property owners and their authorised
representatives.

Buyers, sellers, tenants, applicants and guarantors

Where necessary for a property transaction or tenancy, we may share
relevant information with other parties involved in that transaction.

Professional advisers

This may include solicitors, accountants, surveyors, insurers and other
professional advisers.

IT and technology providers

We may share information with website hosting providers, CRM and
property-management software providers, email and communications
providers, cloud-storage providers, IT support providers and other
technology suppliers that help us operate our business.

Payment and financial service providers

Where necessary, we may share information with payment providers, banks
and other financial institutions to process payments or transactions.

Government bodies and regulators

We may disclose personal data to government departments, local
authorities, regulators, law enforcement agencies, courts or other
public bodies where we are legally required or permitted to do so.

Debt recovery and dispute-resolution providers

Where necessary, we may share information with debt recovery agencies,
dispute-resolution services and other providers involved in
establishing, exercising or defending legal rights.

Business purchasers or sellers

If Westwood Leber sells, transfers or acquires a business or assets,
personal data may be disclosed to prospective buyers, sellers, advisers
or other parties involved in the transaction where legally permitted.

7. Information obtained indirectly

If we receive information about you from another person or organisation,
we may use that information for the purposes described in this Privacy
Policy.

For example, information may be provided by a landlord, tenant,
applicant, guarantor, employer, previous landlord, letting agent,
referencing provider, credit reference agency, deposit protection
scheme, contractor, professional adviser, public authority or another
party involved in a property transaction.

Where required by law, we will provide you with information about the
source of your personal data and the categories of personal data
concerned.

8. Automated decision-making and profiling

We may use third-party systems that involve automated or partially
automated processing for purposes such as identity verification, fraud
prevention, credit checks, affordability assessments or tenant
referencing.

Information generated by these systems may be used as part of our
assessment of an application or transaction.

Westwood Leber does not intend to make decisions about individuals
that have legal or similarly significant effects based solely on
automated processing without appropriate safeguards.

Where applicable law requires safeguards in relation to automated
decision-making, we will comply with those requirements.

Where you have the relevant legal right, you may request information
about automated decision-making or profiling involving your personal
data and may request appropriate human intervention or review.

9. How long we keep your personal data

We will retain your personal data only for as long as reasonably
necessary for the purposes for which it was collected, including where
necessary to satisfy legal, regulatory, accounting, contractual,
insurance or reporting requirements.

The exact retention period will depend on the type of information and
the circumstances in which it was collected.

We consider the following when determining how long information should
be retained:

the purpose for which the information was collected;
whether we continue to have a relationship with you;
applicable legal and regulatory requirements;
accounting and tax requirements;
limitation periods for potential legal claims;
the nature and sensitivity of the information;
the likelihood of disputes or claims;
our contractual obligations; and
whether the purpose can be achieved without retaining
the information.

As a general guide:

Enquiry information will normally be retained for as long as
necessary to deal with the enquiry and for a reasonable period
afterwards.
Property-alert information will generally be retained while
you remain registered for the service and for an appropriate period
after you unsubscribe or cease using the service.
Valuation information will generally be retained for as long as
reasonably necessary to manage the valuation and any resulting
relationship or transaction.
Sales and purchase records will generally be retained for
the duration of the transaction and for an appropriate
period afterwards.
Lettings and tenancy records will generally be retained for
the duration of the tenancy and for an appropriate
period afterwards.
Referencing and application information will generally
be retained for as long as necessary to complete the application and
for an appropriate period afterwards.
Financial and accounting records will be retained for the
period required by applicable law.
Complaint, dispute and legal-claim records may be retained for
as long as necessary to establish, exercise or defend legal claims.
Marketing information will generally be retained until you opt
out or until it is no longer necessary for the relevant marketing
purpose.

Where a specific statutory retention period applies, we will retain
information for at least that period.

When personal data is no longer required, we will securely delete,
destroy or anonymise it where appropriate.

10. Where we store your personal data

Personal data may be processed or stored by us or by our service
providers in the United Kingdom or in other countries.

Where personal data is transferred outside the UK, we will ensure that
the transfer is carried out in accordance with applicable UK data
protection law and that appropriate safeguards are used where required.

These safeguards may include an adequacy decision, appropriate
contractual safeguards or another lawful transfer mechanism.

11. Security

Unfortunately, transmission of information over the internet is not
completely secure.

Although we take appropriate technical and organisational measures to
protect your personal data, we cannot guarantee the security of
information transmitted to our website. Any transmission is at your own
risk.

Once we have received your information, we use appropriate procedures
and security measures designed to prevent unauthorised access, loss,
misuse, alteration or disclosure.

12. Cookies

Our website uses cookies and similar technologies.

These cookies may be used to provide website functionality, remember
searches and preferences, support property-saving and alert features,
and analyse website usage.

Our current Cookie Policy identifies session, persistent and Google
Analytics cookies used on the
website. Wimage (file:///C:/Users/TOMJAC~1/AppData/Local/Temp/msohtmlclip1/01/clip_image002.gif)Westwood
Leber

For further information about the cookies we use, their purposes and how
they can be managed, please see our Cookie Policy.

13. Your data protection rights

Depending on the circumstances and subject to applicable legal
exemptions, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing, including processing based on
legitimate interests;
object to direct marketing;
request portability of certain personal data;
withdraw consent where processing is based on consent; and
request information about certain automated decision-making and
profiling.

These rights are not absolute and may not apply in every circumstance.

For example, we may need to retain or continue processing certain
information to comply with a legal obligation or to establish, exercise
or defend legal claims.

14. How to exercise your rights

If you wish to exercise any of your data protection rights, or have a
question about how we process your personal data, please contact
Westwood Leber using the contact details provided in the Contact
Us section of our website.

Our registered office/contact address shown on our website is:

8 The Pavilion ** Hoddesdon** ** Hertfordshire** ** EN11 8UB**

We may need to verify your identity before responding to a request.

We will respond within the time period required by applicable data
protection law.

15. Complaints

If you have concerns about how we have handled your personal data,
please contact us first so that we have an opportunity to address your
concern.

You also have the right to complain to the Information Commissioner's
Office (ICO), the UK's data protection supervisory authority.

The ICO can be contacted at:

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Further information about making a complaint is available from the ICO.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes
to our services, the law, regulatory requirements or the way in which we
process personal data.

Any changes will be posted on this page and, where appropriate, we may
notify you by email or another appropriate method.

We recommend checking this page periodically to ensure that you are
aware of any updates.

17. Contacting us

If you have any questions about this Privacy Policy or the way we handle
your personal data, please contact Westwood Leber using the contact
details provided in the Contact Us section of our website.