Marston Properties Privacy Policies are written in accordance with GDPR legislation. Each data subject group has an individual privacy policy which details how their personal data is handled. Please see our general policy. If you would like copies of the individual policies, please get in touch.

Last Reviewed: September 2026

Introduction

Marston Properties Limited ("Marston Properties", "we", "our" or "us") is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Marston Properties maintains separate privacy notices for different categories of individuals, including applicants, tenants, leaseholders, guarantors, employees, contractors and suppliers. These notices provide more detailed information relevant to specific relationships with us and are available on request.

If you would like a copy of an individual privacy notice, please contact us at the details below.

Data Controller

Marston Properties Limited is the Data Controller responsible for your personal data.

Contact Details

Marston Properties Limited
1 Mills Yard
Fulham
London SW6 3AQ

Email: [email protected]

Our Data Protection Commitments

We are committed to:

• Processing personal data lawfully, fairly and transparently.
• Collecting personal data only where it is necessary and relevant.
• Using personal data only for specified and legitimate purposes.
• Keeping personal data accurate and up to date.
• Retaining personal data only for as long as necessary.
• Protecting personal data through appropriate technical and organisational security measures.
• Respecting and facilitating individuals' rights.
• Ensuring third parties who process personal data on our behalf apply appropriate security and confidentiality measures.

Information We Collect

We may collect personal information from:

• Individuals enquiring about properties or services.
• Prospective tenants, agents, leaseholders and guarantors.
• Existing tenants, agents, occupiers, leaseholders and guarantors.
• Job applicants, employees and office holders.
• Suppliers, contractors and professional advisers.
• Shareholders.
• Visitors to our website.

The personal data we collect may include, but is not limited to:

• Name.
• Postal address.
• Email address.
• Telephone number.
• Date of birth.
• Identification and verification documents.
• Financial information.
• Employment information.
• Property-related information.
• Correspondence and communications with us.
• Website usage information.

Lawful Bases for Processing

We process personal data only where we have a lawful basis under the UK GDPR.

Contract

Where processing is necessary to enter into or perform a contract with you.

Legal Obligation

Where processing is necessary to comply with legal or regulatory requirements.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.

Examples include:

• Responding to enquiries.
• Managing property lettings and occupancy.
• Maintaining business records.
• Protecting our business and systems.
• Improving our services.

Consent

Where consent is required by law, we will seek your consent before processing your personal data. Consent may be withdrawn at any time.

Vital Interests

Where processing is necessary to protect a person's life or physical safety.

Public Task

Where processing is necessary for the performance of a task carried out in the public interest or under official authority, where applicable.

How We Use Personal Data

We may use personal data to:

• Respond to enquiries.
• Provide information about properties and services.
• Arrange property viewings and appointments.
• Process applications relating to properties.
• Manage tenancy, leasehold and guarantor relationships.
• Communicate with occupiers and leaseholders.
• Recruit and manage employees and contractors.
• Administer supplier and contractor relationships.
• Meet legal and regulatory obligations.
• Protect our business, systems and property.
• Resolve complaints and disputes.
• Maintain accounting, audit and business records.

Where additional personal data is required, further information will be provided in the relevant privacy notice.

We will use your personal data only for the purposes for which we collected it, unless we fairly consider that we need it for another reason that is compatible with the original purpose.

Whenever we process your personal data for these purposes, we ensure that your interests, rights and freedoms are carefully considered.

Sharing Personal Data

We only share personal data where necessary and appropriate.

Depending on the circumstances, we may share information with:

• Property management and tenancy administration providers.
• IT support, cloud hosting and software providers.
• Professional advisers, including solicitors, accountants and auditors.
• Referencing, credit checking and identity verification providers.
• Maintenance contractors and service providers.
• Regulatory authorities and law enforcement agencies where required by law.
• Courts, tribunals and legal representatives where necessary.
• Insurance providers.
• Other parties in line with relevant privacy policies

All third parties processing personal data on our behalf are required to keep it secure and use it only for legitimate purposes.

International Transfers

We generally store personal data within the United Kingdom or European Economic Area (EEA).  Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Keeping Personal Data Secure

We maintain appropriate technical and organisational measures designed to safeguard personal data against unauthorised access, alteration, disclosure, accidental loss or destruction.

These measures include:

• Access controls and user permissions.
• Secure storage systems.
• Encrypted backups where appropriate.
• Staff confidentiality obligations.
• Regular review of security procedures and systems.

Personal data may be held in paper records and secure electronic systems, including cloud-based environments.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, accounting and reporting requirements.

Retention periods vary according to the type of information and the nature of the relationship with us.

When personal data is no longer required, it is securely deleted, destroyed or anonymised.

Website Usage and Cookies

We use Fathom Analytics to understand how visitors use our website so that we can improve it. Fathom’s visitor analytics does not use tracking cookies or build advertising profiles across websites. It briefly processes request information, including IP address and user-agent, to create site-specific visitor signatures and produce website statistics.

You can read more about how Fathom handles this information in its data processing agreement and data journey. If necessary, we use only essential or strictly necessary cookies required for the operation and security of our website. If additional cookies or tracking technologies are introduced in future, this policy will be updated accordingly.

Your Rights

Under the UK GDPR, you have the right to:

Access

Request access to the personal data we hold about you.

Rectification

Request correction of inaccurate or incomplete information.

Erasure

Request deletion of your personal data in certain circumstances.

Restriction of Processing

Request that we limit how we use your personal data.

Data Portability

Request a copy of certain personal data in a structured, commonly used and machine-readable format.

Object

Object to processing based on legitimate interests or direct marketing.

Withdraw Consent

Withdraw consent at any time where consent is the basis for processing.

Automated Decision-Making

Request information about any solely automated decisions or profiling affecting you, where applicable.

To exercise any of these rights, please contact:

Email: [email protected]

Post:
Marston Properties Limited
1 Mills Yard
Fulham
London SW6 3AQ

Complaints

If you have concerns about how we handle your personal data, please contact us first and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Website: https://www.ico.org.ukwww.ico.org.uk

Changes to This Privacy Policy

We review this Privacy Policy regularly and may update it from time to time.

Any changes will be published on this page together with the revised review date shown at the top of the policy.

Last updated 17/09/2026