Privacy policy
Draft — not yet reviewed
This is a working draft written to cover the data this website actually collects. It is not legal advice and has not been prepared by a solicitor. Every yellow block on this page marks something only the client can supply or a lawyer should confirm. Delete the blocks — and this one — once resolved.
Organisations that process personal data in the UK generally have to register with the Information Commissioner's Office and pay an annual fee (£52 for most small organisations). Confirm whether Living At is already registered. If so, the registration number belongs in section 1 below — it is customary to publish it.
1. Who we are
This website is operated by Living At ("we", "us", "our"). We are the data controller for the personal information described in this policy.
Registered company name and number, registered office address, and ICO registration number. The trading name "Living At" is unlikely to be the registered entity.
Address: Riverside West, Whitehall Road, Leeds
Email: hello@living-at.co.uk
Phone: 07300 791 773
2. What we collect
We only collect what you give us, plus limited technical information.
Information you give us
When you complete the registration form on this site, we collect:
- Your first and last name
- Your email address
- Your phone number, if you choose to provide it
- The apartment size you are interested in
- When you are looking to move
- The date and time you gave consent, and the wording you agreed to
Information collected automatically
If you accept analytics cookies, we collect information about how you use this site — pages viewed, approximate location, device and browser type. This is aggregated and does not identify you personally. If you decline, none of this is collected.
Our hosting provider keeps standard server logs, including IP addresses, for security and to keep the site running.
3. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry about Riverside West | Legitimate interests — you asked us to |
| Send you availability, pricing and viewing dates by email | Consent — the box you ticked on the form |
| Keep a record of that consent | Legal obligation — UK GDPR requires we can demonstrate it |
| Understand how the website is used | Consent — the cookie banner |
| Keep the site secure and available | Legitimate interests |
You can withdraw consent at any time — use the unsubscribe link in any email, or write to us. Withdrawing consent does not affect anything we did before you withdrew it.
4. Who we share it with
We do not sell your data, and we do not pass it to other companies for their own marketing. We use the following service providers, who process data on our instructions only:
| Provider | What for | Where |
|---|---|---|
| Netlify | Website hosting and form submissions | United States |
| Brevo | Email marketing and contact storage | European Union |
| Microsoft | Our email inbox | European Union / United States |
| Website analytics and web fonts | United States |
Where a provider is outside the UK, transfers are protected by the UK International Data Transfer Addendum or equivalent safeguards.
We may also disclose information if we are legally required to, or to protect our rights or the safety of others.
5. How long we keep it
- Enquiries that do not lead to a tenancy — 24 months from your last contact with us, then deleted.
- Marketing consent — until you withdraw it, or after 24 months of no engagement, whichever comes first.
- Consent records — kept for as long as we hold your data, plus a reasonable period afterwards, so we can show consent was properly obtained.
These retention periods are conventional but arbitrary. They should match whatever the business actually does, and any obligations arising once someone becomes a tenant. Tenancy records carry different — usually longer — requirements, and this policy does not cover them.
6. Cookies
A cookie is a small file stored on your device. This site uses:
- Strictly necessary storage — we record your cookie choice so we do not ask again. This cannot be turned off, and is not used for anything else.
- Analytics cookies — set by Google Analytics, only if you accept them. They tell us which pages people visit and how they arrived.
You can change your mind at any time using the Cookie settings link in the footer of any page, or by clearing site data in your browser. If your browser sends a Global Privacy Control signal, we treat that as a refusal and do not ask.
7. Your rights
Under UK data protection law you have the right to:
- Ask for a copy of the personal data we hold about you
- Have inaccurate data corrected
- Ask us to delete your data
- Ask us to restrict how we use it
- Object to processing based on legitimate interests
- Ask us to transfer your data to another provider
- Withdraw consent at any time
Email hello@living-at.co.uk and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.
8. Security
This site is served over HTTPS, and access to enquiry data is limited to people who need it. No system is completely secure, but we take reasonable technical and organisational measures to protect your information.
9. Children
This site is not intended for people under 18, and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy. The date at the top of the page shows when it was last changed. If we make a significant change to how we use your data, we will tell you directly.