GDPR Data Subject Rights

1. Your Rights

Under the UK General Data Protection Regulation, you have the following rights in relation to your personal data held by Britestate Ltd:

Right of Access (Art. 15): Request a copy of all personal data we hold about you, together with information about how we process it.

Right to Rectification (Art. 16): Request correction of any inaccurate or incomplete personal data.

Right to Erasure (Art. 17): Request deletion of your personal data, subject to our legal obligations (e.g., AML record retention, tax records).

Right to Restrict Processing (Art. 18): Request that we temporarily stop processing your data while a dispute about accuracy or our grounds for processing is resolved.

Right to Data Portability (Art. 20): Request a copy of your personal data in a structured, commonly used, machine-readable format (JSON). This applies to data you have provided to us that we process by automated means on the basis of consent or contract.

Right to Object (Art. 21): Object to processing based on legitimate interests, including profiling for AI-powered property recommendations. We will stop processing unless we have compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making (Art. 22): Request human review of any decision made solely by automated means that has a significant effect on you. Request meaningful information about the logic involved.

Right to Withdraw Consent: Where we process your data based on consent (e.g., marketing emails), you may withdraw consent at any time.

2. How to Make a Request

Use the form below, or email privacy@britestate.co.uk, or write to: Data Protection Officer, Britestate Ltd, [REGISTERED ADDRESS].

Please specify which right you wish to exercise and provide sufficient information for us to verify your identity and locate your data.

3. Identity Verification

To protect your data, we must verify your identity before processing your request. We may ask you to confirm your email address, provide a copy of photo ID, or answer security questions linked to your account.

4. Response Timeframe

We will respond to your request within 30 calendar days of receiving it (and verifying your identity). If your request is complex or we receive a high volume of requests, we may extend this by a further 60 days, in which case we will notify you within the first 30 days.

5. Fees

Requests are free of charge. However, we may charge a reasonable fee for manifestly unfounded or excessive requests, or where you request additional copies of your data.

6. Exemptions

We may be unable to fully comply with your request where an exemption applies, including: ongoing legal proceedings, regulatory obligations (e.g., AML record retention), or the rights and freedoms of others. We will explain any exemption that applies.

7. Complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office:

ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Web: ico.org.uk