This privacy policy explains how Scholar & Stone ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website or use our services. It is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Scholar & Stone is a property management company based in Sheffield, South Yorkshire. We act as the data controller for personal information collected through this website and in the course of providing our property management services.
If you have any questions about this policy or how we handle your data, please contact us. [email protected]
2. Data we collect
We may collect and process the following categories of personal data:
- Identity data β your name, student status, and group size when you submit an enquiry.
- Contact data β your email address and mobile phone number.
- Usage data β information about how you use our website, including pages visited, time spent, and referring URLs, collected via analytics cookies (only with your consent).
- Technical data β your IP address, browser type and version, device type, and operating system.
- Communications data β records of correspondence when you contact us by email, phone, or through our website forms.
- Viewing availability data β preferred viewing dates and times you provide when requesting a property viewing.
We do not collect any special category data (such as health information, ethnicity, or financial account details) through this website.
3. How we collect your data
We collect personal data through the following means:
- Direct interactions β when you complete an enquiry form, contact us by email or phone, or request a property viewing.
- Automated technologies β as you interact with our website, we may automatically collect technical and usage data via cookies and similar technologies, subject to your consent.
- Third parties β we may receive data from property listing platforms such as Rightmove, or from referral partners such as Unihomes Sheffield.
4. How we use your data
We use your personal data for the following purposes and on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to property enquiries and arranging viewings | Legitimate interests / pre-contractual steps |
| Sending you information about properties that match your requirements | Legitimate interests / consent |
| Providing property management services to landlords and tenants | Performance of a contract |
| Complying with legal and regulatory obligations | Legal obligation |
| Improving our website and services through analytics | Consent |
| Sending marketing communications (where you have opted in) | Consent |
| Fraud prevention and security | Legitimate interests |
6. Third parties
We may share your personal data with the following categories of third parties:
- Email service providers β to deliver enquiry confirmations and communications on our behalf.
- Property listing platforms β such as Rightmove, where we advertise properties.
- Analytics providers β to help us understand website usage (subject to your consent).
- Regulatory bodies β such as The Property Ombudsman, ClientMoney Protect, and the Deposit Protection Service, where required by law or our accreditation obligations.
- Professional advisers β including solicitors, accountants, and insurers where necessary.
- Law enforcement or regulatory authorities β where required by law.
We do not sell your personal data to third parties.
Where we use third-party service providers, we require them to process your data only on our instructions and in accordance with applicable data protection law.
7. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Enquiry data is typically retained for up to 12 months. Data relating to tenancy agreements or landlord contracts is retained for the duration of the relationship and for up to 6 years thereafter, in line with our legal obligations.
8. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access β to request a copy of the personal data we hold about you.
- Right to rectification β to ask us to correct inaccurate or incomplete data.
- Right to erasure β to request that we delete your data in certain circumstances.
- Right to restrict processing β to ask us to limit how we use your data.
- Right to data portability β to receive your data in a structured, machine-readable format.
- Right to object β to object to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making β we do not carry out solely automated decision-making that produces legal or similarly significant effects.
To exercise any of these rights, please contact us. We will respond within one month. You will not be charged a fee for exercising your rights unless your request is clearly unfounded or excessive. [email protected]
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Data security
We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed without authorisation. Access to your personal data is restricted to those who have a business need to know. We have procedures in place to deal with any suspected data breach and will notify you and any applicable regulator where we are legally required to do so.
10. International transfers
We do not routinely transfer your personal data outside the United Kingdom. Where any transfer does occur, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.
11. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Where changes are material, we will take reasonable steps to notify you.
12. Contact us
If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us: