This Privacy Policy explains how CSuites Property Limited collects, uses, stores and protects your personal data. We are committed to handling your information responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our website or submitting an enquiry — including through third-party platforms such as Facebook Lead Ads — you acknowledge that we may process your personal data as described below.

1. Who we are

CSuites Property Limited is a property sourcing and accommodation management company registered in England and Wales. We are the data controller responsible for your personal data.

• Company name: CSuites Property Limited

• Company number: 16751012

• Registered address: 124 City Road, London EC1V 2NX

• Email: contact@csuites.co.uk

• Telephone: +44 758 622 2058

ICO Registration
CSuites Property Limited is registered with the Information Commissioner's Office (ICO) as required under UK data protection law. If you need our ICO registration number, please contact us at contact@csuites.co.uk.

2. What personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity data: your full name

• Contact data: email address, telephone number

• Property data: property postcode, number of bedrooms, approximate monthly rent, property type

• Enquiry data: any information you voluntarily provide in a contact form, message or conversation, including details about your current situation as a landlord

• Technical data: IP address, browser type and version, pages visited, time on site, referring URL — collected automatically when you visit our website

• Cookie data: information stored by cookies on your device (see Section 10)

We do not collect any special category data (such as health, race, religion or criminal record information) in the ordinary course of our business. Please do not submit such information to us.

3. How we collect your personal data

We collect personal data through the following means:

• Directly from you: when you complete an enquiry form on our website, send us an email, call us, or message us through any channel

• Via third-party advertising platforms: when you submit a lead enquiry form through a Meta (Facebook or Instagram) Lead Ad campaign. In this case, your data is first collected by Meta Platforms Ireland Ltd and then transferred to us. Meta's own privacy policy governs their handling of your data prior to transfer

• Automatically: through cookies and analytics tools when you visit csuites.co.uk (see Section 10)

• From partners or referrers: where another party refers you to us and shares your contact details with your knowledge

4. Legal basis for processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Legitimate interests (Article 6(1)(f)): to respond to your enquiry, manage our landlord relationships, develop our property portfolio, and operate our business effectively. We have carried out a legitimate interests assessment and are satisfied that our interests do not override your rights

• Contract (Article 6(1)(b)): where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you

• Consent (Article 6(1)(a)): where you have specifically opted in to receive marketing communications from us. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal

• Legal obligation (Article 6(1)(c)): where we are required to process your data to comply with a legal or regulatory obligation

5. How we use your personal data

We use your personal data for the following purposes:

• To respond to your property enquiry and contact you within our stated response timeframe

• To assess whether your property is suitable for our guaranteed rent, social housing or corporate accommodation programmes

• To arrange and conduct property viewings or assessments

• To negotiate and enter into lease or management agreements with you

• To manage our ongoing relationship with you as a landlord partner

• To send you relevant information about our services (where you have consented or where we have a legitimate interest)

• To comply with our legal, regulatory and compliance obligations

• To improve our website and marketing based on aggregated, anonymised usage data

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Marketing communications

Where you have provided your contact details in connection with an enquiry, we may send you information about our services that may be relevant to you, on the basis of our legitimate interests. You can opt out of any such communications at any time by:

• Emailing us at contact@csuites.co.uk with the subject line "Unsubscribe"

• Calling us on +44 758 622 2058

• Clicking the unsubscribe link in any marketing email we send you

We will act on your request promptly and within 10 business days.

7. Who we share your personal data with

We treat your personal data with care and only share it in the following circumstances:

• Our team: members of the CSuites Property team who need access to your data to respond to your enquiry or manage your property

• Service providers: trusted third-party providers who help us operate our business — for example, email platforms, cloud storage, CRM software, or property management tools. These providers are bound by data processing agreements and may only use your data as instructed by us

• Meta Platforms Ireland Ltd: as the operator of the Facebook and Instagram advertising platforms through which you may have submitted an enquiry. Meta's collection and initial processing of your data is governed by Meta's own Privacy Policy

• Local authorities and registered housing providers: where necessary to facilitate a property placement or compliance check, and only with your knowledge

• Legal or regulatory authorities: where we are required to disclose your data by law, court order, or regulatory direction

We do not sell, rent or trade your personal data to any third party.

8. International transfers

We store and process personal data primarily within the United Kingdom. Some of our service providers may be based outside the UK. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR, such as the use of UK International Data Transfer Agreements (IDTAs) or transfers to countries with an adequacy decision.

9. How long we keep your personal data

We retain your personal data for no longer than is necessary for the purposes for which it was collected:

• Enquiry data (where no contract is entered into): up to 12 months from the date of your enquiry, after which it will be securely deleted or anonymised

• Data relating to an active or completed contract: up to 6 years from the end of the contract or business relationship, in line with our legal and accounting obligations

• Marketing contact data: until you opt out of communications or request deletion, at which point we will suppress or delete your data within 10 business days

• Website analytics data: up to 26 months, in aggregated and/or anonymised form

After the applicable retention period, personal data is securely deleted or permanently anonymised.

10. Cookies

Our website (csuites.co.uk) uses cookies — small text files placed on your device — to help us provide and improve our services. We use the following categories of cookie:

• Strictly necessary cookies: required for the website to function correctly. These cannot be switched off

• Analytics cookies: help us understand how visitors interact with our site (for example, which pages are visited most often). We may use tools such as Google Analytics. Data collected is aggregated and anonymised where possible

• Marketing cookies: placed by advertising platforms (such as the Meta Pixel) to help us measure the performance of our advertising campaigns. These cookies may track your visit across other websites

You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse or delete cookies. Disabling certain cookies may affect the functionality of the website. For more information on managing cookies, visit ico.org.uk.

11. Your rights under UK GDPR

You have the following rights in relation to your personal data. To exercise any of them, please contact us using the details in Section 13. We will respond within one calendar month.

• Right of access: to request a copy of the personal data we hold about you (Subject Access Request)

• Right to rectification: to request that we correct inaccurate or incomplete personal data

• Right to erasure ("right to be forgotten"): to request that we delete your personal data, subject to certain conditions

• Right to restrict processing: to request that we limit how we use your personal data in certain circumstances

• Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format, where processing is based on consent or contract

• Right to object: to object to our processing of your personal data where we rely on legitimate interests as our legal basis

• Right to withdraw consent: where processing is based on your consent, to withdraw it at any time without affecting the lawfulness of prior processing

• Rights related to automated decision-making: to not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except in limited circumstances

There is no charge for exercising your rights unless a request is manifestly unfounded or excessive. We may need to verify your identity before fulfilling a request.

12. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include access controls, secure storage and regular review of our data handling practices.

While we take all reasonable steps to protect your information, no data transmission over the internet is entirely secure. If you have concerns about the security of data you have sent to us, please contact us immediately.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

13. Links to third-party websites

Our website may contain links to third-party websites. This Privacy Policy applies only to csuites.co.uk and does not cover those external sites. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before sharing any personal data.

14. Children's privacy

Our services are directed at adult landlords and property owners. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The most current version will always be available at csuites.co.uk/privacy. We recommend checking this page periodically. Where changes are significant, we will take reasonable steps to bring them to your attention.

16. How to make a complaint

If you are unhappy with how we have handled your personal data, we would appreciate the opportunity to resolve your concern directly before you approach a regulator. Please contact us first using the details below.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:

Information Commissioner's Office
Website: ico.org.uk
Helpline: 0303 123 1113 (Monday – Friday, 9am – 5pm)
Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF