Who we are

Heron Thomas Limited registered at Kingsgate House, 1 King Edward Road, Brentwood, Essex, CM14 4HG. Registered in England and Wales. Our registered number is 16999687.

For the purposes of UK data protection law, Heron Thomas is the data controller responsible for the personal data described in this Privacy Policy.

If you have questions about this policy or how we use your personal data, please contact us using the details at the end of this policy.

Personal data we collect

We collect personal data when you choose to provide it to us, for example by completing a contact form, subscribing to our newsletter or communicating with us. We may also collect technical and usage information automatically when you use our website.

Depending on how you interact with us, this may include:

Name
Email address
Telephone number, where provided
Company name, where provided
Information submitted through contact forms, enquiries or other communications
Marketing preferences
Information relating to your property requirements or the estate agency services you ask us to provide
IP address
Browser type, device information and operating system
Cookies, website usage and analytics data
Live chat conversations, if used

How we collect your personal data

We may collect personal data:

Directly from you when you contact us, complete a form, subscribe to communications or use our services
Automatically when you use our website, through cookies and similar technologies
From third parties where this is necessary in connection with our services or where you have asked or authorised a third party to provide information to us
From publicly available sources where appropriate and lawful

Where we obtain personal data from another source, we will provide the information required by data protection law where applicable.

How we use your personal data

We may use personal data to:

Respond to enquiries and requests
Provide and manage estate agency services
Communicate with you about a property, transaction or service you have asked about
Provide customer service and support
Understand how visitors use our website and improve its content, functionality and user experience
Send marketing communications where permitted by law
Measure the effectiveness of our website and marketing activity
Support relevant advertising on third-party websites and social media platforms where permitted
Meet legal, regulatory and professional obligations
Protect our business, website, users and systems against fraud, misuse or security threats

Legal basis for processing

We process personal data only where we have a lawful basis for doing so. The basis we rely on depends on why we are using the information. This may include:

Consent: where you have given us permission to use your personal data for a specific purpose, such as certain marketing communications or non-essential cookies.
Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legal obligation: where processing is necessary for us to comply with a legal or regulatory obligation.
Legitimate interests: where processing is necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and interests.

Where we rely on legitimate interests, these may include responding to enquiries, providing and improving our services, operating and securing our website, understanding the effectiveness of our business activities and communicating appropriately with customers or prospective customers.

Cookies, analytics and advertising

Our website uses cookies and similar technologies. Some are necessary for the website to function, while others may be used for analytics, advertising or other non-essential purposes.

Our website may use services including Google Analytics and the Meta Pixel. These technologies can collect information about how you use the website, such as your IP address, browser or device information, pages viewed and interactions with the site.

Where consent is required, non-essential cookies and similar technologies will not be used unless you choose to accept them. You can manage or change your preferences using the cookie controls available on our website.

For more information about the cookies and similar technologies used on our website, please see our Cookie Policy.

Marketing

Where permitted by law, we may use your contact details to send relevant news, updates and information about our services.

You can opt out of direct marketing at any time by using the unsubscribe option in a marketing communication or by contacting us.

You have the right to object at any time to the use of your personal data for direct marketing.

Sharing your personal data

We do not sell or rent your personal data.

We may share personal data where necessary with organisations that help us operate our business or provide our services. Depending on the circumstances, these may include:

Website, hosting, IT and technical service providers
Customer relationship management, communications and live chat providers
Email and marketing service providers
Analytics, advertising and social media providers
Professional advisers and other suppliers supporting our services
Property-related service providers where necessary for a transaction or service
Regulators, law enforcement bodies, courts or other authorities where required by law

Where another organisation processes personal data on our behalf, we require appropriate safeguards to protect that information.

International transfers

Some service providers we use may process personal data outside the UK. Where this involves a restricted international transfer, we will ensure that an appropriate transfer mechanism or other safeguard required by UK data protection law is in place.

You can contact us if you would like further information about the safeguards used for applicable international transfers.

How long we keep personal data

We keep personal data only for as long as necessary for the purpose for which it was collected and to meet any applicable legal, regulatory, accounting or reporting requirements.

The period will depend on the type of information, why we hold it and any legal or regulatory obligations that apply. When personal data is no longer required, we will delete it or anonymise it where appropriate.

How we protect your information

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Access to personal data is limited to those who need it for legitimate business purposes.

Your data protection rights

Depending on the circumstances and the lawful basis we rely on, you may have the right to:

Request access to the personal data we hold about you
Ask us to correct inaccurate or incomplete personal data
Ask us to delete your personal data in certain circumstances
Ask us to restrict the processing of your personal data in certain circumstances
Object to certain processing
Request certain personal data in a portable format
Withdraw consent at any time where we rely on consent

These rights are not absolute and do not all apply in every circumstance. We may need to retain or continue processing information where the law permits or requires us to do so.

To exercise a data protection right, please contact us using the details below.

Complaints

If you are unhappy with how we process your personal data, please contact us first so that we have the opportunity to address your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection. Further information about making a complaint is available at ico.org.uk.

Third-party websites

Our website may contain links to websites operated by third parties. We are not responsible for the privacy practices or content of those websites. We recommend reviewing the relevant privacy information before providing personal data to a third-party website.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or how we use personal data. The latest version will be published on our website and the date at the top of this policy will be updated.

Contact us

For questions about this Privacy Policy, how we use your personal data or to exercise your data protection rights, contact:

Heron Thomas
Bansal House, Bracken Industrial Estate
185 Forest Road
Hainault
Essex IG6 3HX
Email: [email protected]
Telephone: 0208 0593 593