Introduction

1.Michael Graham is committed to protecting and respecting your privacy.

This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting https://michaelgraham.co.uk/ (our Site) you are accepting and consenting to the practices described in this policy.

The term Michael Graham, together with Michael Graham Lettings, are the trading names of:
Michael Graham
Michael Graham Estate Agents Ltd.
Michael Graham Estate Agents (Aylesbury) Ltd
Michael Graham Estate Agents (Bedford) Ltd
Michael Graham Estate Agents (Buckingham) Ltd
Michael Graham Estate Agents (Hitchin) Ltd
Michael Graham Estate Agents (Milton Keynes) Ltd
Michael Graham Estate Agents (Newport Pagnell) Ltd
Michael Graham Estate Agents (Northampton) Ltd
Michael Graham Estate Agents (Stony Stratford) Ltd
Michael Graham Estate Agents (Towcester) Ltd
Michael Graham Estate Agents (Princes Risborough) Ltd
Michael Graham Estate Agents (Woburn Sands) Ltd
Michael Graham Lettings
Michael Graham Surveyors Ltd

For the purposes of this policy all of the above will be collectively referred to as Michael Graham.

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, each company as described above is its own data controller, and all have a registered office address at The Pinnacle, Building A, 150 – 170 Midsummer Boulevard, Milton Keynes, Buckinghamshire, MK9 1FD.

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

Our Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or such third parties use of your personal data. Please check these policies before you submit any personal data to these websites.

Our nominated Data Protection Officer is Sanaa Tayyab.

Questions, comments and requests regarding this privacy and cookies policy are welcomed and should be addressed to Sanaa.Tayyab@michaelgraham.co.uk, or c/o 81 High Street, Stony Stratford, Milton Keynes, MK11 1AT.

Information we may collect about you

10. Our aim is to maintain your data as accurately as possible and to collect data for a specified, explicit and legitimate reason. The data should be limited to what is necessary for us to provide you with property-related information or undertake business transactions for you. Fair and transparent treatment of your data is essential.
11. We may collect and process the data about you as outlined below:

Information you give us

12. You may give us information about you by filling in forms on our Site or by corresponding with us by phone, e-mail, post or otherwise.
13. Typically, the information will require your name, address and contact details (telephone and email), but may include additional details that you provide.
14. This includes information you provide when you request a viewing for a property, request a valuation on our Site, list your own property, submit any general enquiry, enter a competition, promotion or survey, and when you report a problem with our Site.
15. For certain customers we may require additional personal data such as your bank details (e.g. for payment of rent), or your residency status (for tax purposes).

Information we collect about you

16. When you visit our Site, we may automatically collect certain technical and usage information about your device and how you interact with our Site. This may include:
    • Your Internet Protocol (IP) address
    • Browser type and version
    • Operating system and device information
    • Time zone settings
    • Browser plug-ins and versions
    • Login information (where applicable)
    • The pages you visit before, during and after using our Site (including the date and time of your visit)
    • Properties you view or search for
    • Page response times, download errors and the length of time spent on individual pages
    • Information about how you interact with our Site, such as scrolling, clicks and mouse movements
    • Where available, the telephone number used to contact us via our Site

We collect this information to help us administer and improve our Site, understand how visitors use our services, maintain the security of our systems, and enhance your browsing experience.

Information we receive from other sources

17. We may receive information about from the property portals that we use, for example, Rightmove and OnTheMarket, whenever you submit an enquiry to us via these portals. The data required will typically include your name, address and contact (telephone and email) details.
18. We also collect information for certain organisations, where appropriate and always with legal grounds to do so. These include fraud prevention agencies, credit check reference/vetting agencies and identity check providers.
19. We may also work closely with third parties (including, for example, our business partners, analytics providers and search information providers) and may receive information about you from them.

Uses made of the information

20. The GDPR provides for six lawful bases for processing your data. Of these, the most relevant ones to our business are: ‘Contractual’, ‘Legal Obligation’, ‘Legitimate Interest’ and ‘Consent’, and these are outline below. For more information on the lawful bases please see https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/

‘Contractual’ relates to the processing necessary for us to perform our obligations to you. Examples of this type of processing include providing personal details on a memorandum of sale, capturing details of potential purchasers at the point of the viewing and management of the sale/purchase of property.
‘Legal Obligation’ relates to the various laws that apply generally, such as the legal requirement to keep transactional records for a specified amount of time, and specifically to our industry, for example, the Estate Agents Act 1979 and the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. An example of this type of processing is Customer Due Diligence (checking your identity) when you enter into a contract with us, or when you have your offer on a purchase accepted.
‘Legitimate Interest’ relates to Michael Graham’s necessary processing to allow us to do business. Examples of this type of processing include fraud prevention, direct marketing (e.g. sending a weekly email containing the latest property pages we submit in the regional newspapers if you are a buyer), networking within our own group, business analysis for internal operations and improvement, and monitoring and enhancing our Site.

If we use the lawful basis of ‘Legitimate Interest’ we will always have performed a series of checks including; a purpose test, a necessity test and a balancing test, to ensure that no process we perform will cause unwarranted harm to you.

‘Consent’ relates to other processing, typically of a marketing nature, whereby we may send you information that we think may be of interest to you, based on your initial role, and later based on your own selected preferences. Examples of this type of processing include an email newsletter containing links to our latest blogs and articles, and other emails pertaining to local events that you may be interested in.

Consent relies on you agreeing that we can do this. Once you have consented (opted-in) to receive continuous communication from us, it is also easy to withdraw consent (opting-out) by unsubscribing from the communication e-mailed to you or by e-mailing our Data Protection Officer on Sanaa.Tayyab@michaelgraham.co.uk with your request.
Opting out of receiving marketing communications does not mean that you will stop receiving emails relating to the services that you have asked us to provide.

We use information held about you in the following ways:

Information you give to us

21. We will use this information, for example:

If you are a Seller or a Landlord:
To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information and services that you request from us

To comply with our legal obligations to carry out due diligence with regard to your identity prior to commencing a business relationship

To provide details of your property to interested parties if you ask us to provide property marketing services (which we will display on our Site, at our offices, in marketing emails and on information sheets we produce to market your property)

If you are looking to buy or rent:
To notify owners of properties that you tell us you are interested in

To store your property preferences and search criteria so that we may contact you with details of properties which may be of interest to you

If you become a Prospective Buyer:
To carry out our obligations arising from any contracts you may enter or have entered into with our sellers

To comply with our legal obligations to carry out due diligence with regard to your identity prior to commencing a business relationship, which means from appoint your offer has been accepted

If you become a Prospective Tenant:
To comply with our legal obligation to determine that you have a ‘Right to Rent’

To carry out our obligations to ensure that you can afford to rent, and to request your details for referencing purposes

To carry out our obligations arising from any contracts you may enter or have entered into with our landlords

In general:
To provide you with information about other services we offer that are similar to those that you have already purchased or enquired about.

To provide you, with information about services we feel may interest you. If you are an existing customer, we will only contact you by electronic means (e-mail or SMS or phone) with information about services similar to those which were the subject of a previous sale or negotiations of a sale to you.

To ensure that content from our Site is presented in the most effective manner for you and for your computer or mobile device.

Information we collect about you

22. We will use this information:
    To administer our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes

To improve our Site to ensure that content is presented in the most effective manner for you, for your computer and mobile devices

To allow you to participate in interactive features of our service, when you choose to do so

As part of our efforts to keep our Site safe and secure

To measure or understand the effectiveness of marketing we serve to you and others, and to deliver relevant marketing to you

To make suggestions and recommendations to you and other users of our Site about goods or services that may interest you or them.

Information we receive from other sources

23. We may combine this data with information you give to us or that we collect about you for the purposes set out above (depending on the types of information we receive)

Disclosure of your information

24. We may share your personal information with any member of our group, this being the list of companies referred to in the introduction.

We may share your information with selected third parties:

25. Members of the Public who use our services
    Individuals or organisations interested in a property you own if you ask us to provide property marketing services

Individuals or organisations who own a property if you indicate to us that you are interested in that particular property

26. Third Party companies who we work with
    Companies who are engaged to perform services for or on behalf of Michael Graham, e.g. suppliers and sub-contractors for the performance of any contract we enter into with you, or any contact we set up which relates to you, whether it be current or potential

Third parties that we use to serve you lawfully based marketing/transactional communications via email

Business partners and suppliers for the fulfilment of any legal obligations that we may have relating to you
Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others
Analytics and search engine providers that assist us in the improvement and optimisation of our Site

Property developers or new homes sites including, but not limited to, those with an ongoing agreement with Michael Graham to introduce applicants to properties subject to that arrangement and/or within the remit of your property requirements or instructions.

We may disclose your personal information to third parties:
In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets

If any of the companies referred to as Michael Graham or substantially all of any company’s assets are acquired by a third party, in which case personal data held by that company about its customers will be one of the transferred assets

If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms of Website Use and other agreements; or to protect the rights, property, or safety of Michael Graham and its staff, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Where we store your personal data

27. The data that we collect from you is stored and processed in the United Kingdom and/or the European Economic Area (EEA). Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place in accordance with the UK GDPR. By submitting your personal data, you agree to this storing and processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
28. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site (My MG), you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
29. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

How long we keep your personal data for

30. We will keep your personal data for as long as we are required to by law. Typically, where a sale or tenancy takes place then the legal requirement is to keep the records for 6 years after the end of the transaction. We will keep some personal information for a reasonable period after your transaction has completed, in case you decide to use our services again. We may contact you about our services during this time (where appropriate by using the lawful basis of Legitimate Interest) if you haven’t opted out of receiving marketing communications from us. If there’s no legal requirement, we’ll only store it for as long as we need to.

Your rights

31. We will not share your personal data with third parties for marketing purposes unless we obtain your permission to do so. We may use your personal data for our own internal marketing purposes and to contact you in accordance with the terms of this Privacy and Cookies Policy. You have the right to ask us not to process your personal data for any marketing purposes. You can exercise the right at any time by contacting us at Sanaa.Tayyab@michaelgraham.co.uk.
32. Your data protection rights are as follows:

The right to be informed

The right of access

The right of rectification

The right to erasure

The right to restrict processing

The right to data portability

The right to object

The right not to be subject to automated decision-making including profiling

33. More information on your individual rights can be seen on The Information Commissioner’s website at https://ico.org.uk/
34. You have a right to lodge a complaint with the Supervising Authority, which is The Information Commissioner who can be contacted is various ways as detailed at https://ico.org.uk/global/contact-us/

35.We would however, appreciate the opportunity to resolve any concerns you may have, by, in the first instance, contacting us as detailed in clause 9 of this policy.

Information about our use of Cookies

36. Our Site uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site. We only use non-essential cookies where you have provided your consent through our cookie consent mechanism. Essential cookies are used to enable the operation and security of the Site.
37. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
38. You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Site.

39.We use the following cookies:
Strictly necessary cookies. These are cookies that are required for the operation of our Site.

Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our Site works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies. These are used to recognise you when you return to our Site. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies. These cookies record your visit to our Site, the pages you have visited and the links you have followed. We will use this information to make our Site and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.