The Galliard Group Policy
This privacy policy explains how Galliard Homes Limited collects and uses personal information about you when you use our websites, contact us, enquire about our properties or services, buy, sell, rent, let, reserve or occupy a property, attend our events, interact with us as a supplier, business contact or professional adviser, or otherwise deal with The Galliard Group.
We are committed to protecting your personal information and respecting your privacy. We will handle your personal information fairly, lawfully and transparently, in accordance with applicable UK data protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and other applicable UK privacy and electronic communications legislation.
WHO WE ARE
For the purposes of this Privacy Policy, "Galliard", "we", "us" and "our" refer to The Galliard Group.
The Galliard Group includes, but is not limited to, Galliard Homes Limited, Galliard Construction Limited, Galliard Remediation Limited, Galliard Holdings Limited, Galliard Estate Management Limited, GHL (Wickside) Limited, Evolve (Colchester) Limited and Neptune Operations Limited, together with their respective holding companies, subsidiaries and affiliated companies from time to time.
Galliard Homes Limited is the primary data controller responsible for the personal information processed under this Privacy Policy, unless we tell you otherwise in a separate privacy notice or identify another Galliard Group company as the relevant data controller.
Galliard Homes Limited is registered in England and Wales with company number 02158998. Its registered office is 3rd Floor, Sterling House, Langston Road, Loughton, Essex, IG10 3TS.
Where another Galliard Group company is separately responsible for deciding how and why your personal information is used, that company may also be a controller. We may provide additional privacy information where this is appropriate.
HOW TO CONTACT US
If you have any questions about this policy or wish to exercise your data protection rights, you can contact us by email at compliance@galliardhomes.com.
You can also write to us at Data Protection Department, Galliard Homes Limited, 3rd Floor, Sterling House, Langston Road, Loughton, Essex, IG10 3TS.
WHAT THIS POLICY COVERS
This policy applies to personal information collected through our websites and through your other interactions with us and The Galliard Group. It explains what personal information we collect, how we collect it, why we use it, the lawful bases we rely on, who we share it with, how long we keep it, how we protect it and the rights you have.
This policy should be read together with any other privacy notice or fair processing notice we provide to you at the time we collect your personal information. Those notices may give more specific information about particular processing activities, such as recruitment, employment, investor relations, CCTV, resident management, aftercare, competitions, events or specific property transactions.
Our websites may include links to third-party websites, plug-ins or applications. We do not control those third parties and are not responsible for their privacy practices. You should read their privacy policies before providing personal information to them.
Our websites are not intended for children. We do not knowingly collect children’s personal information through our websites. However, in limited circumstances we may process information about children where it is provided by a parent, guardian, purchaser, tenant, resident or other relevant person, for example in connection with occupancy, safeguarding, health and safety, building management, legal obligations or aftercare.
PERSONAL INFORMATION WE COLLECT
Personal information means any information relating to an identified or identifiable individual. It does not include information that has been anonymised so that you can no longer be identified.
We may collect, use, store and share the following categories of personal information.
Identity information includes your name, title, date of birth, nationality, marital status, passport or identity document details, national insurance number, images, CCTV footage and other identification information.
Contact information includes your home, billing, correspondence or business address, email address, telephone number and other contact details.
Profile information includes your property preferences, budget, interests, occupation, employer, investment preferences, feedback, survey responses, event attendance, communication preferences and records of your interactions with us.
Transaction information includes details of reservations, purchases, sales, leases, licences, lettings, property management arrangements, aftercare requests, payments to and from you, contracts, warranties and services provided to you.
Financial information includes bank account details, payment card information, mortgage or funding information, source of funds information, affordability information and information required for anti-money laundering, fraud prevention, sanctions screening and other regulatory checks.
Technical information includes your IP address, device identifiers, cookie identifiers, browser type and version, time zone setting, location information, operating system, platform and other information about the devices you use to access our websites.
Usage information includes information about how you use our websites, property search tools, forms, advertisements, emails and online services.
Marketing and communications information includes your preferences for receiving marketing from us and selected third parties, your communication preferences, your responses to marketing campaigns and your opt-in or opt-out choices.
CCTV, site access and security information includes images, footage, access logs, visitor records and incident records collected at our offices, developments, construction sites, showrooms, marketing suites and managed properties.
Business contact information includes your role, employer, business contact details and records of our dealings with you where you act for a supplier, contractor, consultant, professional adviser, joint venture partner, investor, lender, managing agent, public authority or other business contact.
Recruitment information includes information you provide when applying for a role with us, such as your employment history, qualifications, right to work information, references and interview notes. If a separate recruitment privacy notice is provided, that notice will apply to recruitment processing.
Special category information may include information about health, disability, accessibility needs, racial or ethnic origin, religious beliefs or similar sensitive information where this is relevant, for example to make reasonable adjustments, manage health and safety incidents, support accessibility requirements, comply with legal obligations or handle claims. We will only use special category information where we have a lawful basis and a special condition under data protection law.
Criminal offence, sanctions and fraud-related information may be processed where necessary for anti-money laundering checks, sanctions screening, fraud prevention, legal claims, regulatory compliance, safeguarding, site security or other lawful purposes.
IF YOU DO NOT PROVIDE PERSONAL INFORMATION
In some circumstances we need personal information to enter into or perform a contract with you, respond to your enquiry, arrange a viewing, process a reservation, complete a property transaction, provide aftercare, comply with legal obligations or carry out required checks. If you do not provide that information, we may not be able to provide the relevant product, service or information, enter into or perform a contract with you, or continue with a transaction.
HOW WE COLLECT PERSONAL INFORMATION
We collect personal information directly from you when you contact us, use our websites, submit an enquiry, create an account, arrange a viewing, attend a launch, open day, exhibition or event, reserve or buy a property, sell or let a property, enter into a lease or licence, request aftercare, complete a form, participate in a survey or promotion, communicate with us by post, telephone, email, social media or online chat, visit our offices, developments, marketing suites or managed properties, or otherwise provide information to us.
We may collect personal information from third parties, including estate agents, property portals, introducers, joint venture partners, managing agents, solicitors, lenders, mortgage brokers, surveyors, warranty providers, contractors, consultants, credit reference agencies, fraud prevention agencies, sanctions screening providers, identity verification providers, payment processors, public authorities, regulators and other Galliard Group companies.
We may collect information from publicly available sources, including HM Land Registry, Companies House, the electoral register, planning portals, insolvency registers, sanctions lists, court records and other public databases.
We may automatically collect technical, usage and profile information when you use our websites, emails, digital advertisements and online services. We do this through cookies, pixels, tags, server logs and similar technologies. Please see our cookie policy for more information about how we use cookies and similar technologies and how you can manage your choices.
HOW WE USE PERSONAL INFORMATION AND OUR LAWFUL BASES
We will only use your personal information where we have a lawful basis to do so. The table below explains the main purposes for which we use personal information and the lawful bases we usually rely on.
Purpose | Types of personal information | Lawful basis |
Responding to enquiries and assisting with your property search | Identity, contact, profile, technical, usage and marketing information | Our legitimate interests in responding to enquiries, promoting our properties and services and helping customers find suitable properties. Where the enquiry relates to a possible contract, processing may also be necessary to take steps before entering into a contract. |
Registering you as a customer, prospective purchaser, tenant, investor or user of our services | Identity, contact, profile and transaction information | Our legitimate interests in managing customer relationships and administering our business. Where relevant, processing may be necessary to take steps before entering into a contract or to perform a contract with you. |
Arranging and hosting viewings, open days, exhibitions, launches and events | Identity, contact, profile, marketing and communications, CCTV and site access information | Our legitimate interests in marketing and selling properties, managing events, ensuring security and maintaining records. Processing may also be necessary to perform a contract or take pre-contractual steps. |
Reserving, selling, buying, leasing, licensing, renting, letting or otherwise dealing with property | Identity, contact, transaction, financial and communications information | Performance of a contract with you or steps before entering into a contract. We may also rely on legal obligation where laws require us to process information and legitimate interests in managing transactions and protecting our business. |
Carrying out anti-money laundering, sanctions, fraud prevention, identity, source of funds and credit checks | Identity, contact, financial, transaction, criminal offence, sanctions and fraud-related information | Compliance with legal obligations, including anti-money laundering and sanctions requirements. We may also rely on legitimate interests in preventing fraud, avoiding unlawful transactions and protecting our business and customers. Where criminal offence information is processed, we will do so only where permitted by law. |
Providing aftercare, warranty support, defect management, building management and customer services | Identity, contact, transaction, property, communications and, where relevant, health or accessibility information | Performance of a contract, compliance with legal obligations and our legitimate interests in providing customer support, managing developments and resolving issues. |
Managing residents, occupiers, visitors, sites, offices, developments, marketing suites and managed properties | Identity, contact, CCTV, site access, security, incident and communications information | Our legitimate interests in managing premises, maintaining safety and security, investigating incidents and protecting people and property. We may also rely on legal obligation for health and safety, building safety or regulatory requirements.
|
| Sending service communications | Identity, contact, transaction and communications information | Performance of a contract, compliance with legal obligations and our legitimate interests in keeping you informed about matters relevant to your enquiry, transaction, property, service or relationship with us. |
| Sending marketing communications by email, SMS, telephone, post or other channels | Identity, contact, profile, usage, technical and marketing and communications information | Consent where required by law. In some cases, we may rely on our legitimate interests and the “soft opt-in” under electronic marketing rules where you have bought or negotiated to buy similar products or services from us and have not opted out. |
| Personalising marketing, property recommendations, website content and advertisements | Identity, contact, profile, technical, usage and marketing and communications information | Our legitimate interests in understanding customer preferences, improving our services and making our marketing more relevant. We will obtain consent for cookies and similar technologies where required. |
| Running surveys, competitions, promotions and feedback programmes | Identity, contact, profile, marketing and communications information | Consent where required, performance of applicable terms and conditions, and our legitimate interests in understanding customers and improving our services. |
| Managing our websites, IT systems, cyber security, analytics and business administration | Technical, usage, identity, contact and communications information | Our legitimate interests in operating secure and effective websites and systems, preventing misuse, analysing website use and administering our business. |
| Managing suppliers, contractors, consultants, professional advisers, business contacts and joint venture relationships | Identity, contact, business contact, transaction, financial and communications information | Performance of a contract or steps before entering into a contract, compliance with legal obligations and our legitimate interests in managing business relationships and projects. |
| Complying with legal, regulatory, tax, accounting, reporting and corporate governance obligations | Identity, contact, transaction, financial, communications, business contact and other relevant information | Compliance with legal obligations and our legitimate interests in maintaining proper records, managing risk and complying with requests from courts, regulators and public authorities. |
| Establishing, exercising or defending legal rights and handling complaints or disputes | Identity, contact, transaction, financial, communications, CCTV, incident and other relevant information | Our legitimate interests in protecting our business, resolving disputes and enforcing legal rights. We may also rely on legal obligation or, for special category data, legal claims conditions where applicable. |
| Corporate transactions, restructuring, investment, financing, sale or transfer of business or assets | Identity, contact, transaction, financial, business contact and other relevant information | Our legitimate interests in managing corporate transactions, investment, financing, restructuring and business continuity. |
| Recruitment and employment-related processing for applicants | Identity, contact, recruitment, right to work, references and other information provided in the recruitment process | Steps before entering into an employment contract, compliance with legal obligations and our legitimate interests in assessing candidates and managing recruitment. A separate recruitment privacy notice may provide further detail. |
Where we rely on legitimate interests, we consider and balance our interests against your rights, freedoms and interests. You have the right to object to processing based on legitimate interests in certain circumstances.
We may use your personal information for more than one purpose and on more than one lawful basis, depending on the circumstances. If we need to use your personal information for a new purpose that is not compatible with the original purpose, we will provide further information where required by law.
MARKETING
We may use your personal information to send you information about properties, developments, events, offers, services, news and other content that may be of interest to you.
We will send direct marketing by email or SMS only where permitted by law. This may be where you have given consent, or where you have bought or negotiated to buy similar products or services from us and did not opt out when your details were collected or in later communications.
You can ask us to stop sending marketing messages at any time by using the unsubscribe link in our marketing messages, emailing unsubscribe@galliardhomes.com, emailing compliance@galliardhomes.com, or writing to us at the address set out in this policy.
If you opt out of marketing, we may still contact you with service, transactional or administrative messages, such as messages about your enquiry, viewing, reservation, purchase, tenancy, aftercare, legal checks, warranty matters or important changes to our services.
We will only share your personal information with third parties for their own direct marketing where you have consented or where otherwise permitted by law. If you have consented to receive marketing from a third party and later wish to opt out, you should also contact that third party directly.
COOKIES, ANALYTICS AND ONLINE ADVERTISING
We use cookies and similar technologies, such as pixels and tags, to operate our websites, remember your preferences, understand how our websites are used, measure the effectiveness of marketing and deliver relevant advertising.
Some cookies are necessary for our websites to work. Other cookies and similar technologies, such as analytics or advertising cookies, will be used only where permitted by law and, where required, with your consent. You can find more information and manage your choices in our cookie policy and cookie settings.
PROFILING AND AUTOMATED DECISION-MAKING
We may use profiling to understand your preferences and interests, including the type of property, location, price range or services that may be relevant to you. This helps us tailor property recommendations, marketing and website content.
We do not usually make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significant effects. If we do so in the future, we will only do so where permitted by law, we will tell you what processing is taking place, and we will provide the safeguards required by law.
SHARING PERSONAL INFORMATION
We may share personal information with other Galliard Group companies where this is necessary for the purposes described in this policy.
We may also share personal information with estate agents, letting agents, managing agents, joint venture partners, development partners, construction companies, contractors, consultants, professional advisers, solicitors, lenders, mortgage brokers, surveyors, warranty providers, insurers, payment processors, banks, credit reference agencies, fraud prevention agencies, sanctions screening providers, identity verification providers, utility providers, IT and hosting providers, website analytics providers, marketing platforms, customer relationship management providers, event providers and other service providers.
We may share personal information with HM Land Registry, HM Revenue & Customs, the National Crime Agency, Companies House, local authorities, planning authorities, building safety regulators, warranty bodies, law enforcement agencies, courts, tribunals, regulators and other public authorities where required or permitted by law.
We may share personal information with third parties in connection with any actual or proposed sale, purchase, transfer, merger, restructuring, financing, investment, joint venture or other corporate transaction involving any part of our business, assets or group.
Where third parties process personal information on our behalf, we require them to protect it and use it only for the purposes we authorise. Where third parties use personal information for their own purposes, they will be responsible for complying with data protection law in relation to that use.
INTERNATIONAL TRANSFERS
We are based in the United Kingdom. Some of our service providers, systems, group contacts, professional advisers or other recipients may process personal information outside the United Kingdom.
Where we transfer personal information outside the United Kingdom, we will ensure that appropriate safeguards are in place as required by UK data protection law. These safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.
You can contact us if you would like further information about the safeguards used for international transfers of your personal information.
SECURITY
We take appropriate technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, password protection, encryption, secure storage, staff training, supplier due diligence and policies designed to protect personal information.
No system or method of transmission is completely secure. If we become aware of a personal data breach, we will investigate and take appropriate action. We will notify the Information Commissioner’s Office and affected individuals where required by law.
HOW LONG WE KEEP PERSONAL INFORMATION
We will keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, reporting, warranty, aftercare, operational and legal claim requirements.
The period for which we keep personal information will depend on the nature of the information, the purpose for which it is used, the relationship we have with you, legal and regulatory requirements, limitation periods for legal claims and whether we need the information to resolve disputes or protect our rights.
For example, we may keep enquiry and marketing information while you remain interested in our properties or services and for a reasonable period afterwards, unless you opt out earlier. We may keep transaction records for longer periods where needed for tax, accounting, contractual, regulatory, warranty, aftercare or legal claim purposes. We may keep anti-money laundering and sanctions records for the period required by applicable law. CCTV footage is usually kept for a shorter period unless it is needed to investigate an incident, comply with legal obligations or establish, exercise or defend legal rights.
Where we no longer need personal information, we will delete it, anonymise it or put it beyond active use in accordance with our retention procedures. We may use anonymised information indefinitely.
YOUR RIGHTS
Subject to legal conditions and exemptions, you have rights in relation to your personal information.
You have the right to ask us for access to your personal information and to receive information about how we use it.
You have the right to ask us to correct inaccurate personal information or complete incomplete personal information.
You have the right to ask us to erase your personal information in certain circumstances.
You have the right to ask us to restrict the use of your personal information in certain circumstances.
You have the right to object to processing based on legitimate interests in certain circumstances.
You also have an absolute right to object to direct marketing.
You have the right to receive certain personal information in a structured, commonly used and machine-readable format and to ask us to transmit it to another controller where the right to data portability applies.
Where we rely on consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
You have rights in relation to solely automated decision-making, including profiling, where that processing produces legal effects or similarly significant effects.
You can exercise your rights by contacting us using the details in this policy. We may need to ask you for information to confirm your identity and help us respond to your request.
We will usually respond to rights requests within one month. If your request is complex or you have made several requests, we may extend the response period as permitted by law. We will tell you if we need to do this.
You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply with a request where permitted by law, for example if a request is manifestly unfounded or excessive.
COMPLAINTS
You have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.
You can contact the ICO through its website at www.ico.org.uk or by telephone on 0303 123 1113.
We would welcome the opportunity to consider your concerns before you contact the ICO, but you are not required to contact us first.
KEEPING YOUR INFORMATION ACCURATE
It is important that the personal information we hold about you is accurate and up to date. Please tell us if your personal information changes during your relationship with us.
CHANGES TO THIS POLICY
We may update this policy from time to time to reflect changes in our business, The Galliard Group, our websites, our processing activities or legal requirements.
When we update this policy, we will publish the new version on our website. The updated policy will take effect when it is published, unless we say otherwise.
This policy was last updated on 15th July 2026.
