Privacy Policy

1. Introduction

J Liddle & Co (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use and protect personal data when you use this website (“the Website”), and sets out your rights in relation to that data.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy relates to use of the Website only. If you instruct us to provide professional services, we will provide separate information about how we handle personal data in connection with those services.

2. Data controller

J Liddle & Co is the data controller responsible for personal data collected through the Website. We are regulated by RICS and registered in England under company number 16816385.

Registered office:
Hedworths 3, Bowes Offices, Lambton Park, Chester Le Street, County Durham, DH3 4AN

Head office:
Hackthorpe Hall, Hackthorpe, Penrith, Cumbria, CA10 2HX

3. Personal data we collect

We may collect the following categories of personal data:

• Enquiry data: information you provide when you submit a form on the Website, such as your name, contact details and the content of your message.
• Technical data: information collected automatically when you visit the Website, such as your IP address, browser type, device information and operating system.
• Usage data: information about how you use the Website, such as the pages you visit, how long you spend on them and how you arrived at the Website.

We do not intentionally collect any special category data (such as information about health, ethnicity, religious beliefs or political opinions) through the Website. Please do not include such information in any enquiry you submit.

4. Where we get your personal data

We collect enquiry data directly from you. Technical and usage data is collected automatically through your use of the Website, including through cookies and similar technologies, as described in our Cookie Policy.

5. How we use your personal data and our lawful basis

We only process your personal data where we have a lawful basis to do so under the UK GDPR. The table below sets out the purposes for which we use your personal data and the lawful basis we rely on for each.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms and concluded that they are not. You have the right to object to processing based on legitimate interests, as explained in section 12.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

6. Whether you have to provide your personal data

You are not under any statutory or contractual obligation to provide personal data through the Website. However, if you do not provide the information requested in an enquiry form, we may not be able to respond to your enquiry.

7. Google reCAPTCHA

Forms on the Website are protected by Google reCAPTCHA, a service provided by Google, to help distinguish genuine users from automated software. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. This information is used to provide, maintain and improve reCAPTCHA and for general security purposes.

Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

8. Google Analytics

We use Google Analytics, a web analytics service provided by Google, to understand how visitors use the Website. Google Analytics uses cookies to collect usage data, which we review in aggregate form. Google Analytics does not log or store IP addresses, and we do not use it to identify individual visitors.

Google Analytics cookies are only set if you give your consent. You can withdraw your consent at any time by changing your cookie preferences, as explained in our Cookie Policy. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

More information about how Google uses data from websites that use its services is available at policies.google.com/technologies/partner-sites.

9. Who we share your personal data with

We do not sell your personal data. We may share it with the following recipients:

• Service providers who process personal data on our behalf and in accordance with our instructions, including our website hosting provider, IT support providers and Google (for reCAPTCHA and Analytics). These providers are bound by contractual obligations to keep your data secure and use it only for the purposes we specify.
• Professional advisers, such as lawyers, accountants and insurers, where necessary for the purposes of obtaining professional advice or managing legal claims.
• Regulators, law enforcement agencies and other authorities, where we are required to do so by law or to protect our legal rights.

10. International transfers

Some of our service providers, including Google, may process personal data outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK, we ensure it is protected by appropriate safeguards in accordance with the UK GDPR. These may include:

• transfers to countries that the UK Government has recognised as providing an adequate level of protection for personal data;
• transfers to organisations in the United States certified under the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge);
• the use of the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses, issued by the Information Commissioner’s Office.

11. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet any legal, regulatory, accounting or reporting requirements. When deciding how long to keep personal data, we consider the nature and sensitivity of the data, the purposes for which we process it and any applicable legal or regulatory requirements.

Enquiries that do not lead to an instruction are deleted once they are no longer needed. Information on how long cookies remain on your device is set out in our Cookie Policy.

12. Your rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct personal data that is inaccurate or incomplete.
• Right to erasure: to ask us to delete your personal data in certain circumstances.
• Right to restriction of processing: to ask us to limit how we use your personal data in certain circumstances.
• Right to data portability: to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or to ask us to transfer it to another organisation, in certain circumstances.
• Right to object: to object to processing based on our legitimate interests.
• Right to withdraw consent: where we rely on your consent, to withdraw it at any time.

To exercise any of these rights, please contact us using the details in section 17. You will not usually need to pay a fee. We may need to ask you for information to confirm your identity before we act on your request.

We will respond to your request within one month of receiving it. If your request is complex or you have made several requests, we may extend this by up to a further two months, in which case we will let you know within the first month and explain why.

13. Automated decision-making

We do not use your personal data to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

14. Keeping your personal data secure

We have put in place appropriate technical and organisational measures to protect your personal data against accidental or unlawful loss, access, use, alteration or disclosure. Access to your personal data is limited to those who need it for the purposes set out in this Privacy Policy.

We have procedures in place to deal with any suspected personal data breach and will notify you and the Information Commissioner’s Office where we are legally required to do so.

15. Children

The Website is not intended for children, and we do not knowingly collect personal data from anyone under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

16. Complaints

If you have any concerns about how we handle your personal data, please contact us in the first instance so that we can try to resolve them.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

17. Contact us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please write to us at:

J Liddle & Co
Hackthorpe Hall, Hackthorpe, Penrith, Cumbria, CA10 2HX

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and will apply from the date they are published.