Last Updated: September 2026

Who We Are

Harston Property Limited t/a Harston+Co (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

For the purposes of UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Harston+Co is the data controller responsible for your personal data.

Contact Details

Harston Property Limited t/a Harston+Co
Registered address: Essex House, 8 The Shrubberies, George Lane, London, E18 1BD

Office address: 247 High Road, South Woodford, London, E18 2PB
Telephone: 020 3371 0061
Email: info@harstonandco.co.uk

If you have any questions about this Privacy Policy or our use of your personal data, please contact us using the details above.

Personal Data We Collect

We may collect and process the following categories of personal data:

Information You Provide

• Name
• Contact details
• Property requirements and search criteria, such as areas of search and budget
• Information provided through our website, enquiry forms, emails, telephone calls, meetings, and correspondence
• Individual business information, in line with company administrative procedures, for example, account manager contact information
• Information provided and stored for compliance purposes e.g. Anti-Money Laundering regulations (AML)

Information We Collect Automatically

When you visit our website, we may collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Website usage information
• Pages visited and time spent on the website
• Referral source
• Cookie and analytics data

Information Received from Third Parties

We may receive information from:

• Property owners, landlords, tenants, purchasers, or vendors
• Professional advisers
• Publicly available sources
• Referral partners
• Property portals and listing services, such as Rightmove and Zoopla

How We Use Your Personal Data

We may use your personal data to:

• Respond to enquiries
• Provide property agency, asset management, and property management services
• Arrange viewings, meetings, and appointments
• Facilitate property transactions and negotiations
• Maintain records of client relationships
• Manage contracts and business operations
• Send service-related communications
• Comply with legal and regulatory obligations
• Improve our website security and performance, services, and customer experience
• Send marketing communications where permitted by law

Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legitimate Interests

Where processing is necessary for our legitimate business interests, including:

• Providing services
• Managing client relationships
• Improving our services
• Preventing fraud
• Maintaining business records

We balance these interests against your rights and freedoms.

Legal Obligation

Where processing is necessary to comply with legal or regulatory requirements.

Consent

Where required by law, such as certain marketing activities or non-essential cookies, we will obtain your consent before processing your personal data.

Marketing Communications

We may send information about our services, available properties, market updates, and other business-related communications.

Where consent is required, we will obtain it before sending marketing communications.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in our emails
• Contacting us directly

Opting out of marketing communications will not affect service-related communications.

Sharing Your Personal Data

We may share your personal data with trusted third-party service providers who assist us in operating our business, including:

• Microsoft 365 for email, document storage and business communications
• Vebra Solutions Limited, which provides our customer relationship management (CRM)
• Yardi Systems Ltd and Re-Leased Software Company Ltd, which provide our property management systems
• The Avenue Group, which provides website support
• Property Hive, which displays and manages property information
• Google Analytics to understand how visitors use our website (please refer to Google’s privacy policy and terms)
• Google Maps, which are embedded in our website (please refer to Google’s privacy policy and terms)
• Google reCAPTCHA to protect forms from spam and abuse (please refer to Google’s privacy policy and terms)
• WordPress, which stores website contact form submissions and newsletter sign-ups, in addition to being sent to us via email
• Advance Computer Centre Ltd, which provides IT support and infrastructure services
• Creditsafe, for identity verification, compliance checks, Anti-Money Laundering (AML) screening, due diligence and business information services where required
• Professional advisers including solicitors, accountants, and consultants
• Property owners, landlords, tenants, purchasers and vendors where necessary in connection with property transactions
• Regulatory authorities, law enforcement agencies and other bodies where disclosure is required by law.

All third-party service providers are required to respect the security of your personal data and process it in accordance with applicable data protection laws.

Data Security

We implement appropriate technical and organisational measures to protect personal data against:

• Unauthorised and unrestricted access
• Accidental loss
• Destruction
• Misuse
• Alteration
• Disclosure

While we strive to protect your information, no online transmission can be guaranteed to be completely secure.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, regulatory, and reporting requirements.

Any AML policy procedure documentation is kept on file for five years, as per AML guidelines.

Retention periods may vary depending on the nature of the information and applicable legal obligations.

Your Rights

Under UK GDPR, you may have the right to:

• Access your personal data
• Correct inaccurate personal data
• Request erasure of your personal data
• Restrict processing
• Object to processing
• Request transfer of your personal data (data portability)
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided above.

We may need to verify your identity before responding to a request.

Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the operation of the website. Other cookies help us analyse website traffic and improve user experience.

Where required by law, we will request your consent before placing non-essential cookies on your device. Users can change or withdraw their cookie choices after making a selection.

Complaints

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

ICO Website: https://ico.org.uk

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be posted on this page, and the updated version will take effect from the date shown at the top of this policy.