Privacy Policy for CN Consulting

2025-08-01

Last updated: 1 August 2025

This Privacy Policy explains how CN CONSULTING LTD (“we”, “our”, “us”, or “the Company”) collects, uses, discloses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the requirements set by The Property Ombudsman and other UK regulatory bodies relevant to property services.

By using our services or accessing our website https://www.cnconsulting.co.uk, you agree to the practices described in this policy.

1. Interpretation and Definitions

Interpretation

Words with initial capital letters have meanings defined below. These definitions shall apply regardless of singular or plural usage.

Definitions

Account means a unique account created for you to access our services or parts of our services.
Affiliate means any entity that controls, is controlled by, or is under common control with us.
Company (referred to as “the Company”, “we”, “us”, or “our”) refers to CN CONSULTING LTD, 12 John Princes Street, London, England, W1G 0JR.
Cookies are small files stored on your device by a website, containing browsing history and other data.
Country refers to the United Kingdom.
Device means any device that can access the service, such as a computer, smartphone, or tablet.
Personal Data means any information that relates to an identified or identifiable individual.
Service refers to our property consultancy, brokerage and related services, including our Website.
Service Provider means any third party who processes data on behalf of the Company.
Usage Data refers to data automatically collected from your device or browser when using our Service.
Website refers to https://www.cnconsulting.co.uk.
You means the individual or legal entity accessing or using our services.

2. Who We Are

CN CONSULTING LTD is a company registered in England and Wales.
Registered office: 12 John Princes Street, London, England, W1G 0JR.
We act as a data controller in relation to the personal data we collect and process.

3. Legal Basis for Processing Personal Data

We rely on the following legal bases under the UK GDPR:

Contractual necessity – to perform contracts or respond to your enquiries.
Legal obligation – e.g. for compliance with Anti-Money Laundering (AML) regulations.
Legitimate interests – to improve services, prevent fraud, or send relevant updates.
Consent – where you have explicitly opted in (e.g. marketing emails). You can withdraw consent at any time.

4. Types of Data We Collect

We may collect and process:

a) Identity and Contact Data

Full name, email, phone number, address, identity documents

b) Property and Transaction Data

Property preferences, budgets, contract history, tenancy/purchase records

c) Technical and Usage Data

IP address, device type, browser, visit duration, referral URLs

d) Special Category Data

We do not intentionally collect sensitive data (e.g., health or ethnicity), unless required (e.g., disability access needs). Where we do, we will request explicit consent.

5. How We Use Your Data

We may use your personal data to:

Provide property services (buying, selling, renting, letting)
Conduct identity, AML, or credit checks
Match your preferences with available listings
Send alerts, offers or updates (if consented)
Draft tenancy agreements or sale contracts
Comply with legal or regulatory obligations
Improve service experience, analyse trends
Prevent fraud and ensure website security

We do not use your data for automated decision-making that produces legal or similarly significant effects.

6. Data Sharing and Disclosure

Your data may be shared with:

Landlords, tenants, buyers, or vendors involved in transactions
Solicitors, surveyors, mortgage brokers, referencing agencies
Software or cloud service providers
Regulatory authorities (e.g., HMRC, The Property Ombudsman)
Law enforcement, if required by law

All third parties must process your data in accordance with the law and under contract with us.

7. International Transfers

If your data is transferred outside the UK, we will ensure it is protected by:

UK adequacy regulations, or
Standard Contractual Clauses (SCCs), or
Other lawful mechanisms ensuring data protection equivalent to UK standards.

8. Your Rights Under UK GDPR

You have the right to:

Access your data
Correct inaccurate data
Delete your data (subject to lawful limits)
Restrict how we process your data
Object to processing, particularly for marketing
Port your data to another provider
Withdraw consent at any time

To exercise your rights, email: info@cnconsulting.uk

9. Data Retention

We retain your data only as long as necessary. Property records are typically held for 6 years, in line with legal and tax requirements.

10. Cookies and Website Tracking

We use cookies to improve your website experience and collect anonymised usage data. You can control cookies via your browser settings. See our [Cookies Policy] for more.

11. Data Security

We apply industry-standard technical and organisational security measures, including:

Data encryption
Access control and staff training
Regular system audits

However, no online transmission is ever 100% secure.

12. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from children.

13. Links to Third-Party Sites

Our site may link to other websites. We are not responsible for their content or privacy practices. Please read their privacy policies separately.

14. Questions or Concerns

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us. We aim to resolve all issues promptly and professionally.

15. Changes to This Policy

We may update this policy from time to time. Significant changes will be posted on our website or communicated to you directly. Please review this page periodically.