Introduction
Bradburn Estates Ltd (“the Company”) is a property management and real estate
business based in Lancashire, England. We are committed to protecting the privacy
and security of personal data in compliance with the General Data Protection
Regulation (GDPR) and the UK Data Protection Act 2018. This policy outlines how
we collect, process, store, and protect personal data in our operations.
Company Information
Bradburn Estates Ltd specializes in property lettings, management, and real estate
services across Lancashire. Our clients include landlords, tenants, property
investors, and service providers. As part of our business operations, we handle
personal data with the utmost care and ensure compliance with data protection
regulations.
Data Protection Principles
We adhere to the following data protection principles:
– Lawfulness, fairness, and transparency: Data processing is conducted
legally, fairly, and transparently.
– Purpose limitation: Personal data is collected for specific, legitimate
purposes and not further processed in a manner incompatible with those
purposes.
– Data minimisation: Only the necessary data is collected for the intended
purpose.
– Accuracy: Personal data is kept accurate and up to date.
– Storage limitation: Data is retained only as long as necessary.
– Integrity and confidentiality: Personal data is processed securely to prevent
unauthorised access or loss.
Data We Collect
Bradburn Estates Ltd collects and processes personal data related to clients,
tenants, landlords, employees, and business partners, including:
– Full name
– Contact details (address, phone number, email)
– Payment and bank details
– Identity verification documents (e.g., passports, driving licences)
– Rental history and tenancy agreements
– Correspondence records
– Property maintenance and service requests
How We Use Personal Data
Personal data is used for the following purposes:
– Managing property lettings and tenancy agreements
– Complying with legal and regulatory obligations
– Communicating with clients and tenants regarding property matters
– Processing payments and financial transactions
– Conducting background and credit checks with consent
– Maintaining internal records and improving our services
– Marketing properties and notifying clients about new opportunities
Legal Basis for Processing
We process personal data based on one or more of the following legal bases:
– Contractual necessity: Data processing is required to fulfill contractual
obligations.
– Legal obligation: Data is processed to comply with applicable laws and
regulations.
– Legitimate interests: Processing is necessary for legitimate business
interests, provided it does not override individuals’ rights.
– Consent: Where applicable, we obtain explicit consent before processing
data.
Data Sharing and Third Parties
We may share personal data with:
– Legal and regulatory authorities where required by law
– Property management and maintenance service providers
– Financial institutions for payment processing
– Credit reference agencies and fraud prevention organisations
– IT and cloud service providers for secure data storage
We ensure that third parties adhere to strict data protection policies and contractual
obligations.
Data Security
We implement appropriate security measures to protect personal data from
unauthorised access, alteration, disclosure, or destruction, including:
– Encryption and secure access controls
– Regular data audits and risk assessments
– Staff training on GDPR compliance
– Secure data storage and backup procedures
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which
it was collected, in compliance with legal and regulatory requirements. Upon expiry,
data is securely deleted or anonymised.
Data Subject Rights
Under GDPR, individuals have the following rights:
– Right to access: Request a copy of the personal data we hold.
– Right to rectification: Request correction of inaccurate data.
– Right to erasure: Request deletion of personal data, subject to legal
obligations.
– Right to restriction of processing: Request limited use of personal data.
– Right to data portability: Request transfer of data to another service
provider.
– Right to object: Object to data processing under certain conditions.
– Rights related to automated decision-making: Challenge decisions made
solely by automated means.
To exercise these rights, individuals can contact us at the details provided below.
Data Breach Management
In the event of a data breach, we will:
– Assess the nature and impact of the breach
– Contain and mitigate any risks
– Notify the Information Commissioner’s Office (ICO) and affected individuals
where necessary
– Take corrective action to prevent future breaches
Contact Information
For any GDPR-related queries or to exercise data subject rights, please contact:
Mrs N D Blackburn Managing Director
Bradburn Estates Ltd
31 Lord Street, Fleetwood, Lancashire, FY7 6DU
Nikki.blackburn@bradburnestates.co.uk
01253 877455
Policy Review
This GDPR policy is reviewed regularly and updated as necessary to ensure
compliance with data protection laws. The latest version is always available on our
website or upon request.
Last Updated: [April 2026]