SA Privacy Policy and GDPR

This notice applies to Northpoint Property's sourcing and investor arm ("SA"). It sits alongside our main Privacy Policy and GDPR and describes how we handle personal data collected from investors, prospective landlords, property vendors and joint-venture partners.

Our commitment

Northpoint Property Ltd takes your data protection seriously. We want you to know how we look after and protect the data you provide to us in the course of a property sourcing, deal-packaging or investor relationship. We will never sell your data.

What personal information we collect

The information we collect depends on the reason you are engaging with our sourcing arm. It typically includes:

• Full name, company name and job title
• Email address, phone number and postal address
• Investment criteria and preferences (for example location, budget, target yield, strategy)
• Proof-of-funds documents, source-of-funds documents and, where required under anti-money-laundering regulations, ID such as passport or driving licence and proof of address
• Ownership and property information where you are a vendor (title details, Land Registry records, condition reports, photographs)
• All email, phone and messaging correspondence between us

Legal basis for processing

We process your data on the basis of our contract with you (or steps taken at your request prior to entering into a contract), our legitimate interests in running a property sourcing business, and - where required - our legal obligations under anti-money-laundering, tax and property law. We rely on your consent for marketing communications, which you can withdraw at any time.

How we use your information

• To assess your investment criteria and match you to suitable deals
• To carry out required due diligence, ID and AML checks
• To prepare and share deal packs, viewing information and progress updates
• To communicate with vendors, agents, solicitors, mortgage brokers and other parties involved in a transaction on your behalf
• To meet our record-keeping and regulatory obligations
• To send you further deal opportunities where you have opted in to receive them

Where we store your data

Google Drive (Google Workspace)

Deal packs, ID documents, AML records and vendor information are stored in Google Drive within Google Workspace. Data is encrypted in transit and at rest on Google's infrastructure. See policies.google.com/privacy.

Google Workspace email (Gmail)

Correspondence with investors, vendors and their representatives is held in Gmail on Google Workspace.

COHO

Where a property proceeds into management with us, tenant and property records are transferred into COHO and are then governed by our main Privacy Policy and GDPR.

Sharing your information

In the course of packaging or progressing a deal, we may share limited personal data with:

• Vendors, estate agents and their representatives
• Solicitors and conveyancers acting on the transaction
• Mortgage brokers, lenders and surveyors where you instruct us to
• Anti-money-laundering and identity verification providers as required by law
• Our accountants and bookkeepers, under written confidentiality terms

Data may be transferred outside the UK/EEA only where your rights are protected in a manner compliant with the UK GDPR.

How long we keep your information

• Investor and vendor records relating to a completed transaction - seven years after completion in line with tax and AML requirements
• AML and ID documents - five years after the end of our business relationship, in line with the Money Laundering Regulations
• Enquiries that do not proceed to a deal - up to two years from the last meaningful contact, unless you have opted in to further updates
• Marketing preferences - until you unsubscribe or withdraw consent

Your rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to request erasure (subject to our legal and regulatory retention obligations), to object to certain processing and to request export of your data. You can find out more from the Information Commissioner's Office.

Contact

To exercise any of your rights or ask a question about this notice, contact the data controller for Northpoint Property Ltd at info@northpoint-property.co.uk.