1. Introduction

Aceox Properties ("Aceox", "we", "us", "our") is a property management and lettings company based in Portsmouth, providing residential lettings, tenant finding, and property/block management services across Hampshire, including student HMOs.

We take the privacy and security of personal data seriously. This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights you have over your data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to landlords, tenants and prospective tenants, contractors and suppliers, and visitors to our website at aceoxproperties.co.uk.

2. Who We Are

Aceox Properties is the "data controller" responsible for your personal data.

• Company name: CARDINAL ACEOX LIMITED
• Company registration number: 16925597
• Registered/trading address: High Hurstwood House, Chillies Lane, High Hurstwood, East Sussex, United Kingdom, TN22 4AD
• Phone: +44 7496 776195
• Website: aceoxproperties.co.uk

3. Personal Data We Collect

The personal data we collect depends on your relationship with us.

From landlords:

• Name, address, date of birth, contact details
• Bank account and payment details, for rent remittance
• Property ownership and mortgage/lender information (where relevant to letting the property)
• National Insurance number or tax details, where required for compliance (e.g. Non-Resident Landlord Scheme)
• Identity verification documents (e.g. passport, driving licence)

From tenants and prospective tenants:

• Name, date of birth, contact details, current and previous addresses
• Proof of identity and immigration/right to rent status (see Section 8)
• Employment and income details, references, and credit history (via referencing checks)
• Bank account and payment details, for rent collection
• Guarantor details, where applicable
• Emergency contact details
• Details of any reasonable adjustments needed (which may include health information, only where you choose to share it)

From contractors and suppliers:

• Contact details, business information, and payment details

From website visitors:

• Contact form submissions (name, email, phone number, message content)
• Technical data such as IP address, browser type, and pages visited (via cookies/analytics — see Section 10)

We collect this data directly from you (forms, email, phone, in person), from third parties (referencing agencies, credit reference agencies, previous landlords/agents, letting portals such as Rightmove/OpenRent/SpareRoom where you enquire via them), and automatically via our website.

4. How We Use Your Data and Our Legal Basis

‍

5. Who We Share Your Data With

We share personal data only where necessary, with:

• Referencing and credit reference agencies, to assess tenant suitability and affordability
• Deposit protection scheme providers, to safeguard tenancy deposits as required by law
• Client Money Protection (CMP) scheme provider, as required for agents holding client money
• Redress scheme provider (e.g. The Property Redress Scheme or The Property Ombudsman), as required for lettings/managing agents
• Local authorities, for HMO licensing, council tax, and statutory compliance
• The Home Office, where required for Right to Rent checks
• Contractors and tradespeople, to carry out repairs and maintenance you or your landlord have requested
• Professional advisors, such as accountants, solicitors, and insurers
• HMRC, where required (e.g. Non-Resident Landlord Scheme reporting)
• IT and software providers who host our systems and website (e.g. our website platform, CRM, email provider), acting as data processors under contract
• Law enforcement or regulators, where legally required

We do not sell personal data to third parties.

6. International Transfers

Where any of our service providers store or process data outside the UK, we ensure appropriate safeguards are in place (such as the UK's International Data Transfer Agreement or adequacy regulations) before any transfer takes place.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes it was collected for, including to satisfy legal, accounting, or reporting requirements. As a general guide:

• Tenancy and landlord records are typically retained for 6 years after a tenancy or instruction ends, to meet limitation periods for contractual and tax-related claims.
• Prospective tenant/applicant data that does not result in a tenancy is typically deleted within 12 months, unless you ask us to keep it on file for future opportunities.
• Website enquiry data is retained only as long as needed to respond, unless you become a client.

Where we are no longer required to retain data, it is securely deleted or anonymised.

8. Right to Rent Checks

As a letting agent, we are legally required under the Immigration Act 2014 to check that tenants have the right to rent property in the UK before a tenancy begins. This involves collecting and verifying identity and immigration status documents. This data is processed on the basis of legal obligation and is retained in line with Home Office guidance.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including secure storage systems, access controls, and staff awareness of data protection obligations. While no system can be guaranteed 100% secure, we review our practices regularly.

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to operate correctly, remember preferences, and understand how visitors use the site (e.g. analytics). [Insert details of the specific cookies/analytics tools in use, e.g. Google Analytics, and confirm whether a cookie consent banner is implemented.] You can control or disable cookies through your browser settings; disabling some cookies may affect site functionality.

11. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erasure of your data, in certain circumstances
• Restrict processing of your data, in certain circumstances
• Object to processing based on legitimate interests or for direct marketing
• Data portability, to receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent (e.g. marketing)

To exercise any of these rights, contact us using the details in Section 13. We will respond within one month, as required by law.

12. Marketing Communications

IWhere you have consented to receive marketing (such as new property listings or landlord updates), you can opt out at any time by contacting us or using the unsubscribe link in any email. We will not send marketing communications without a valid legal basis.

13. How to Contact Us

If you have any questions about this policy or wish to exercise your data protection rights, please contact us:

Email: info@aceoxproperties.co.uk
Phone: ‭07496 776195‬ | ‭07496 776232‬
Address: Port 57 Coworking Studio
57 Albert Road
Portsmouth
PO5 2SF