GDPR Compliance

Our Commitment to Data Protection

The Liverpool Agent is fully committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Union and United Kingdom.

Your Rights Under GDPR

1. Right to Access

You have the right to request copies of your personal data that we hold.

2. Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

3. Right to Erasure

You have the right to request deletion of your personal data under certain conditions.

4. Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

5. Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you.

6. Right to Object

You have the right to object to our processing of your personal data under certain conditions.

7. Right to Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: You have given clear consent for us to process your data for specific purposes
• Contract: Processing is necessary for a contract with you
• Legal Obligation: Processing is necessary to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests

Data We Collect

• Contact information (name, email, phone)
• Property preferences and viewing requests
• Website usage data (analytics)
• Communication records

How Long We Keep Your Data

We retain personal data only for as long as necessary:

• Active client data: Duration of relationship plus 6 years (legal requirement)
• Marketing data: Until you unsubscribe or request deletion
• Website analytics: 26 months maximum

Data Security

We implement appropriate technical and organizational measures including:

• Encrypted data transmission (SSL/TLS)
• Secure password storage
• Regular security assessments
• Staff training on data protection
• Access controls and authentication

Data Breaches

In the event of a data breach, we will:

• Notify the relevant supervisory authority within 72 hours
• Inform affected individuals without undue delay
• Take immediate steps to mitigate the breach

Making a Request

To exercise any of your GDPR rights, please contact us:

We may need to verify your identity before processing your request.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):