Privacy Policy

Our Privacy Policy

 

 

At Galliard we are fully committed to ensuring that your data is protected and your privacy is respected.

Galliard Homes Limited is the data controller and is responsible for the personal data collected on this site (referred to as "Galliard", "we" or "us" in this policy). We are registered in England and Wales with company number 02158998 and a registered office at 3rd Floor, Sterling House Langston Road, Loughton, Essex, IG10 3TS.

Galliard is part of the "Galliard Group" of companies, more details of which can be found here: https://www.galliardhomes.com/about-us/the-galliard-group and here https://www.galliardhomes.com/galliard-group-companies.

 

HOW CAN YOU CONTACT US?

If you have any questions about this policy or would like to exercise any of the rights mentioned, you can either:

  • Email us: compliance@galliardhomes.com; or
  • Write to us: Data Protection Department, Galliard Homes Limited, 3rd Floor, Sterling House Langston Road, Loughton, Essex, IG10 3TS

What is this policy for?

This policy will inform you about what personal data we collect through the www.galliardhomes.com website ("site") as well as your other interactions with us. It will tell you why we collect your data, how we use it, who we share it with and what rights you have in relation to it.

It is important that you read this policy together with any other privacy notice or fair processing notice we may provide at the point of collecting or processing your personal data. This policy supplements those notices and is not intended to override them. However, it does supersede earlier versions of this policy.

This site includes links to websites which may allow third parties to collect or share your personal data.  We cannot control their use of your data and are not responsible for it. Those third parties will have their own privacy policies and we encourage you to read them before sharing any of your personal data with them.

Please note this site is not intended for children. We do not knowingly collect any personal data relating to children.

What data do we collect about you?

Personal data includes any information about an individual from which that person can be identified. This does not include data where the individual's identity has been removed. We may collect, use, store and transfer the following types of personal data:

Identity

Name, title, marital status, date of birth, passport information, national insurance number, nationality, images (via CCTV systems on our sites). 

Contact

Email addresses, postal addresses, billing address, landline and mobile telephone numbers.  

Profile

Your preferences (including details about the type of property you are interested in), interests, profession, age, purchases, orders, requests, feedback, and survey responses.

Transactional

Details about payments to and from you and other details of properties, products, goods or services you have purchased from us or the Galliard Group.

Financial

Mortgage application details, bank account, payment card details, and any other information provided to us for anti-money laundering checks.

Technical

IP address, operating system and platform, browser type and version, time zone setting, location data, device cookie and identification, and other identifying information required for your device to communicate with our site.

Usage

Information about how you use our site (e.g. URL).

Marketing and Communications

Your preferences in receiving marketing from us and our third party suppliers as well as your communication preferences.

 

 

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. You can ask us to update or rectify your personal data at any time by contacting us using the details outlined in the 'How can you contact us?' section.

 

How is your personal data collected?

We collect your personal data through a number of sources. For example: 

  • You may give us your personal data directly when you: arrange a viewing for a property or showroom; attend one of our exhibitions, open-days or launches; correspond with us by post, phone, email or otherwise, contact us by social media, visit us in person; buy, sell, rent, let, lease, licence or reserve a property or buy a product, service or other good from us; fill in forms either on our site, at a property launch, or otherwise; request information about our properties, or related products, goods and services we may offer; subscribe to our any services or publications that we offer, or request marketing to be sent to you; and/or enter a competition, promotion or survey or provide feedback.
  • We may also get the following data about you from third parties: Contact data from property portals such as Rightmove and Zoopla where you have made an enquiry to be contacted about a Galliard Group property; and Contact data from estate agencies where you have requested to be contacted by us.
  • We may get the following data about you from publicly available sources: Identity and Contact Data from publicly availably sources such as the Land Registry, Companies House, and the Electoral Register.
  • We may automatically collect data from or about you or your device: Technical data about your device and browsing; Profile data collected using cookies, online identifiers or other similar technologies. Please see our cookie policy [https://www.galliardhomes.com/cookie-policy] for more information and details about how to opt-out. 

How DO WE use your personal data?

We will only use your information where we have a lawful basis to do so. Below we have set out how we plan to use the personal data we hold about you and explained the lawful basis for each:

What's the purpose?

Which types of data are processed?

What's the lawful basis?

Assisting you with your property search.

Contact, Identity and Profile data.

It is necessary for our legitimate interest of providing customers with properties suited to their preferences.

Registering you as a new customer.

Contact and Identity data.

It is necessary for our legitimate interest of being able to register potential customers.

For the performance of a contract (or potential contract) with you.

Hosting and arranging viewings, launches,   open house, launches and events.

Contact, Identity, Profile, Marketing and Communications data.

Performance of a contract (or potential contract) with you.

Necessary for our legitimate interests of marketing and selling our properties.

Facilitating the reservation, purchase, sale, renting, leasing, or licensing of a property.

Contact, Identity, Financial, Transactional, Marketing and Communications.

Performance of a contract (or potential contract) with you.

It is necessary for our legitimate interest of achieving our primary business aim.

Verifying your identity, preventing money laundering or detecting fraud, conducting credit reference checks.

Identity, Financial, Contact, and Transactional data.

It is necessary to comply with a legal obligation (e.g. Money Laundering Regulations).

For the performance of a contract (or potential contract) with you.

It is necessary for our legitimate interests of avoiding fraudulent or criminal customers or transactions.

Permitting selected third parties to contact you.

Contact and Transactional data.

Where we have your consent (e.g. you requested this on a reservation form).

Providing after care support (including fixing defects) when you have purchased or rented a property from Galliard Group companies.

Identity and Contact data.

It is necessary to comply with a legal obligation (e.g. during warranty period).

For the performance of a contract (or potential contract) with you.

Contacting you.

Identity, Contact, Financial, Transaction, Marketing and Communications data.  

Where we have your consent (for SMS and email direct marketing). Otherwise:

For the performance of a contract (or potential contract) with you. Where it is necessary for our legitimate interests of liaising with you and resolving issues.

Delivering relevant advertisements and provide information to you about goods or services that you may be interested in.

 Profile, Technical and Usage data.

Necessary for our legitimate interests (to study how customers use our site/services, to develop them, to grow our business and to inform our marketing strategy).

Profiling

Profile, Identity and Transaction data.

It is necessary for our legitimate interest of offering our potential customers with properties, products and services best suited to their preferences.

 

We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. If you need details about the specific legal ground we are relying on to process your personal data then please contact us. If we need to process your personal data for a different purpose that is not compatible with the original purpose, then we will let you know.  Please note that we may also process your personal data for a different purpose than listed above and without your consent where it is necessary for us to comply with our legal obligations.

Profiling for marketing purposes

Profiling is the automated processing of personal data to evaluate certain things about an individual. We use profiling to try to offer potential customers the properties, products and services most relevant to them.

You have the right to request that we stop profiling you, or asking third parties to use personal data we hold about you for profiling purposes. To do so, please contact us using the details in the 'How do you contact us?' section.

HOW CAN YOU OPT OUT OF MARKETING?

We only directly market to you by SMS and email where it is legally allowed, for example where you have consented or where you have purchased (or negotiated to purchase) from us and did not chose to opt out. When directly marketing to you we may use a combination of the data we hold about you to form a view on what we think you would be interested in.

We only want to market to users who actually want to hear from us. You can ask us to stop sending you marketing messages at any time by:

  • Selecting the opt-out link on any marketing message sent to you;
  • Emailing unsubscribe@galliardhomes.com with your request; or
  • Writing to the address mentioned at 'How to contact us?' section.

If you do opt-out of marketing from us, please note that we may still need to contact you for reasons other than direct marketing (for example to carry out anti-money laundering checks where you are buying a property from us, or to arrange aftercare services to be provided during any warranty period you may benefit from).

If you are not opted-in for marketing and would like to be, please follow this link: https://www.galliardhomes.com/opt-in-submission.

In certain circumstances you may have given consent for us to pass your contact details to a third party so that they can offer their products or services to you. Where you have done so but no longer want to receive communications from them, you can contact them directly to opt-out.

HOW DO WE KEEP YOUR DATA SECURE?

We understand the importance of keeping your data secure. We take all reasonably necessary steps to ensure that your data is treated securely, in accordance with this policy, in order to prevent your data being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.  For example, in certain situations we use encryption for the storage and transfer of data and in other situations we use password protection. If we become aware of a data breach we will notify the Information Commissioner's Office in a timely manner. We may also notify you if we believe the breach is serious.

HOW LONG DO WE KEEP YOUR DATA FOR?

Under data protection laws, we cannot retain your personal data in a form that identifies you for longer than is necessary to fulfil the purposes for which we collected it.  This may include for the purposes of satisfying any legal, accounting or reporting requirements.

We usually store personal data for 7 years, but there may be occasions where we need to store it for longer or shorter periods. For example, where you have purchased a property from us, we will keep your name, contact details, transaction history and any information included in correspondence for up to 10 years so that we are able to carry out our aftercare obligations.

In order to determine how long we store your personal data for, we take into consideration why we need to continue to store your personal data, whether we can achieve the same result without having access to your data, and what the potential risk is if there is a data breach that affects your data.

Occasionally we may anonymise data which means that it is no longer associated with you.  We do this for statistical or research purposes so we can improve the services we offer to you.  We can use anonymous data indefinitely without further notice to you.

WHO do we SHARE your personal data WITH?

We may share your personal data with the following third parties for the purposes set out in the table above:

  • Galliard Group companies;
  • Managing agents who provide property services in relation to Galliard Group owned or managed developments;
  • Estate agents where you have consented, for example Life Residential Ltd based in the EEA;
  • Professional advisers acting for us or the Galliard Group company that you have a contract with;
  • Financial or payment processors where you are trying to arrange a payment to or from a Galliard Group company, such as World Pay based in the USA;
  • Utility companies who provide services to a property that you have purchased or are renting;
  • Joint venture partners of Galliard branded or co-branded property developments;
  • Service providers for us or the Galliard Group company that you have a contract with who provide database,  IT and system administration services;
  • Marketing providers and advisers acting for us or the Galliard Group company;
  • The Land Registry, HM Revenue & Customs, National Crime Agency, the National House-Building Council, local authorities, regulators and other authorities based in the EEA who require reporting of processing activities in certain circumstances; and
  • Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

These third parties are required to respect the security of your personal data and treat it in accordance with the law.  We do not allow them to use your personal data for their own purposes unless it is incidental to the services they are providing to you on our request.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded, for example by ensuring that country has been deemed to provide an adequate level of protection for personal data by the European Commission, using specific contracts approved by the European Commission, or where appropriate ensuring that they are part of the Privacy Shield (in the USA).

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

WHAT LEGAL rights DO YOU HAVE?

Subject to certain legal conditions, you have the right to:

To exercise any of the rights set out above, please contact us.  We will usually respond to a request from you to exercise your rights within 1 month of receipt, but it might take longer if your request is particularly complex or if you have made a number of requests.  Please note that the rights listed above may not apply in certain circumstances or specific exemptions may apply, and so we may not always be able or required to comply with your request to exercise these rights.

For more information on these rights please see: https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/.

 

Please be aware that we may need to process your personal data and/or request specific information from you to help us comply with your request.  You will not usually have to pay a fee to exercise these rights, but we reserve the right to if your request is clearly unfounded, repetitive or excessive, alternatively we may refuse to comply with your request.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection issues. Before exercising this right, we encourage you to contact us first to resolve any complaint you may have, although this is not legally required. More details can be found here: www.ico.org.uk.

WHAT ABOUT CHANGES TO THIS POLICY?

We reserve the right to update this policy to reflect any changes to the way in which we collect, process or share your personal data, or to reflect any legal requirements. When we make any changes, we will upload the new version to our site. The new version will take effect as soon as it is uploaded.

This policy was last amended on 25 September 2023 and supersedes any earlier versions.