Data Controller
Matthew and Tim Green trading as Green & Co
33 Market Place, Wantage, Oxon OX12 8AL
Data Protection Lead:
post@greenand.co.uk
Compliant with the UK Data Protection Act 2018 and GDPR (EU) 2016/679
Your rights
Under data protection law you have the following rights:
- The right to be informed about how your personal data is being used
- The right of access to the personal data we hold about you
- The right to withdraw consent — write to us at post@greenand.co.uk
- The right to rectification of inaccurate or incomplete data
- The right to erasure under specified conditions
- The right to prevent processing for direct marketing
- The right to object to automated decision-making and profiling
To make a subject access request please write to us at the address above enclosing a photocopy of your identification. We will respond within 30 days at no charge.
Data Controller status
Green & Co acts as Data Controller when we collect personal data directly from you or when we acquire it from third parties for our own purposes. Where we obtain data from third parties we will notify you of this within one month of acquiring your data.
Lawful bases for processing
We process your personal data on one or more of the following lawful bases:
- Consent — you have given clear consent for us to process your data for a specific purpose
- Contract — processing is necessary for the performance of a contract with you
- Legal compliance — processing is necessary to comply with the law
- Vital interests — processing is necessary to protect someone's life
- Public interest — processing is necessary for a task carried out in the public interest
- Legitimate interests — processing is necessary for our legitimate interests or those of a third party
Categories of personal data we hold
We collect and process the following categories of personal data:
- Identity data (name, date of birth)
- Contact information (address, email, phone number)
- Financial details
- Transaction records
- Technical data (IP address, browser, device)
- Usage information (pages visited, search criteria)
- Marketing preferences
We do not collect any Special Categories of Personal Data.
How we use your data
We process personal data for the following activities:
- B2B marketing to business contacts
- Website analytics and performance improvement
- Fraud prevention and anti-money laundering checks
- Responding to contact form submissions
- Recording telephone calls for training and compliance
- Responding to email enquiries
- Consumer marketing (with your consent)
- General website contact handling
Data retention
Consent-based data
Retained while the purpose and your consent remain valid; reviewed annually.
Identity, contact & transaction data
Retained indefinitely for returning customers.
Legitimate interest data
Retained while the relevant purpose remains active.
Contract-essential data
Held for six years in accordance with the Limitations Act 1980.
Third party data processors
We may share your data with the following processors who act on our instructions:
- Expert Agent, Gemini (VTUK) — property management software
- Rightmove, OnTheMarket — property portals
- TDS (Tenancy Deposit Scheme) — deposit protection
- Black Cherry, DocuSign — document and contract management
- Utility and accounting service providers
We do not sell your personal data to third parties.
International transfers
Matthew and Tim Green trading as Green & Co uses overseas web and IT providers. Details of international transfers are provided in the Third Party Processors section above. All transfers are made in compliance with UK GDPR requirements.
Cookies
We use cookies on this website. Please see our Cookies Policy for full details.
Complaints
If you have a concern about how we handle your personal data please contact our Data Protection Lead in the first instance:
post@greenand.co.uk
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.