Legal
Privacy policy
What we do with the information you give us, why we are allowed to do it, how long we keep it and what you can ask us to do about it.
[DRAFT, NOT YET APPROVED] This page was drafted from what the website actually does. It has not been reviewed by a solicitor or a data protection specialist, and several facts in it are still placeholders. It must not be published in this state. See the list of outstanding items at the foot of the page.
In short
We are an estate agency. If you ask us to value, sell or let a property, if you register a search, if you enquire about a property or if you sign up to our newsletter, we need some information about you in order to do what you have asked.
We do not sell your information. We share it only with the people who need it to deliver the service, and where the law requires it. You can ask us what we hold, ask us to correct it, and in most cases ask us to delete it.
On this page
- Who we are
- Your agent, and who is responsible for your information
- What we collect, why, and for how long
- Where your information comes from
- Who we share it with
- Marketing, and how to stop it
- Sending information outside the UK
- How we protect it
- Cookies
- Your rights
- How to complain
- Changes to this policy
Who we are
Yuvello Ltd is the data controller for the information described in this policy, which means we decide what is collected and what happens to it. We are registered in England and Wales.
If you have a question about your information, or you want to make a request or a complaint about it, use the contact details below and say what your question is about.
Yuvello Ltd
17355432
17 Hanover Square, Mayfair, London W1S 1BN
[PRIVACY CONTACT EMAIL TBC]
020 7377 4217
[ICO REGISTRATION TBC]
[DPO POSITION TBC]
Your agent, and who is responsible for your information
Yuvello agents are self-employed. They run their own businesses under the Yuvello brand, and the agent who deals with you keeps records about your property and your enquiry in order to do their job.
[CONTROLLER POSITION TBC] The relationship between Yuvello Ltd and its agents has to be settled before this page is published, because it determines who is answerable to you for your information and who you can bring a request or a complaint to.
What we collect, why, and for how long
Each entry below is a thing we actually ask you for on this website or that we generate while dealing with you.
Booking a valuation
Your name, email address, phone number, the property address and postcode, what you are valuing for, and anything else you choose to tell us.
Why we need it
To arrange the valuation, carry it out and give you a figure, and to answer your questions afterwards.
Lawful basis
Steps taken at your request before entering a contract. Where you ask us to keep in touch afterwards, our legitimate interest in following up an enquiry we did not win.
How long we keep it
[RETENTION TBC]
Registering a search
Your name, email address, phone number, the areas you want, property type, bedrooms, budget, your must-haves, where you are up to in your own move, your mortgage position and your timescale.
Why we need it
So the agent covering your area can match you to properties and call you about them.
Lawful basis
Your consent, which you give by ticking the box on the form and can withdraw at any time.
How long we keep it
[RETENTION TBC]
Enquiring about a property or contacting us
Your name, email address, phone number, postcode, what the enquiry is about and your message.
Why we need it
To answer you, and to pass the enquiry to the right agent or department.
Lawful basis
Our legitimate interest in responding to people who contact us.
How long we keep it
[RETENTION TBC]
The newsletter
Your email address, and a record of when and how you signed up.
Why we need it
To send you new listings and local market notes.
Lawful basis
Your consent. Every email has an unsubscribe link and it works.
How long we keep it
Until you unsubscribe, plus a suppression record so we do not email you again by mistake.
Selling, buying, letting or renting through us
Identity documents and proof of address, proof of funds or mortgage position, your solicitor’s details, references and, for tenants, right to rent documents.
Why we need it
Because the law requires us to check who we are dealing with before and during a property transaction.
Lawful basis
Legal obligation, and performance of our contract with you.
How long we keep it
Five years from completion of the transaction or the end of our relationship with you, under regulation 40 of the Money Laundering Regulations 2017, then deleted unless there is a separate legal reason to keep it.
Using this website
Technical information such as your device type, browser, approximate location from your IP address, and the pages you visit.
Why we need it
To keep the site working, keep it secure, and understand which parts of it are useful.
Lawful basis
Our legitimate interest in running a secure and functioning website. Where a cookie is not strictly necessary, the basis is your consent or, for some analytics, your right to opt out.
How long we keep it
[ANALYTICS RETENTION TBC]
Where your information comes from
Most of it comes from you, when you fill in a form on this site, call us, email us or speak to an agent.
Some of it comes from elsewhere. We may receive your details from a property portal when you enquire through it, from a third party that verifies identity or funds, from the Land Registry and other public records, and from a referral if somebody puts us in touch with you.
[SOURCES TBC] The exact list depends on which portals, referencing providers, and identity checking services Yuvello ends up using, and each one has to be named here before launch.
Who we share it with
We share your information only where it is needed, and we do not sell it.
[PROCESSOR LIST TBC] Every supplier that handles personal data on our behalf must be named or described here, and must be under a written contract that meets Article 28 of the UK GDPR before any data reaches them.
- The Yuvello agent dealing with your property or your search
- Our customer relationship management system, where enquiries and records are held
- The email platform that sends our newsletter
- Property portals, where you have asked us to market a property
- Identity, funds and referencing providers, where a check is required
- Solicitors, surveyors, mortgage brokers and other parties to a transaction, where you have asked us to deal with them
- Our professional advisers, and our redress scheme where a complaint is referred to it
- HM Revenue and Customs, the police and other authorities, where the law requires it
Marketing, and how to stop it
We will send you marketing by email where you have asked us to, or where you have used our services before and have not told us to stop.
Stopping is always easy. Click unsubscribe in any email, reply and ask, or use the contact details at the top of this page. It takes effect on all marketing, not just the message you replied to, and it does not affect the emails we have to send you about a transaction you are part of.
[REFERRAL AND THIRD PARTY MARKETING TBC] If Yuvello intends to pass details to conveyancers, brokers or other partners for their own marketing, that needs separate, specific consent and must be described here.
Sending information outside the UK
[TRANSFERS TBC] Most cloud services store or process data outside the UK. Once the platforms are chosen, this section must say whether that happens, which countries are involved, and what safeguard is relied on, normally UK adequacy regulations or the International Data Transfer Agreement or Addendum.
How we protect it
We take reasonable technical and organisational measures to protect your information, including access controls, encryption in transit and keeping records in systems rather than in personal inboxes and spreadsheets.
[SECURITY MEASURES TBC] This paragraph should describe what is actually in place, not what is aspirational. It also needs a breach procedure behind it: a reportable breach has to reach the ICO within 72 hours of Yuvello becoming aware of it, which is not achievable without a named person and a documented process.
Cookies
Cookies are small files a website stores on your device. Some are necessary for the site to work. Others measure how the site is used, or support advertising.
[COOKIE LIST AND BANNER TBC] This prototype sets no cookies at all. The live site will, and before launch it needs a cookie policy listing each one with its purpose and lifetime, and a banner that genuinely allows refusal. Note the change made by the Data (Use and Access) Act 2025, in force since 5 February 2026: some statistical and low risk cookies can now be set on an opt-out basis rather than requiring prior consent, but advertising and tracking cookies still require consent, and penalties under PECR now reach 17.5 million pounds or 4 per cent of global turnover.
Your rights
You have the following rights over your personal information. To use any of them, contact us using the details at the top of this page. We will not charge you, and we will respond within one month. If your request is complicated we can extend that by two months, and we will tell you if we do.
If we need more detail to find what you are asking for, we can ask you to clarify, and the clock pauses while we wait for your answer.
- Ask for a copy of the information we hold about you
- Ask us to correct anything that is wrong or incomplete
- Ask us to delete it, where we do not have a reason to keep it
- Ask us to restrict what we do with it while a question about it is resolved
- Object to processing we carry out on the basis of legitimate interests
- Object to direct marketing at any time, which is an absolute right
- Ask for your information in a portable format, where it was provided by you and is processed by consent or under a contract
- Withdraw consent at any time, where consent is what we rely on
How to complain
If you are unhappy with how we have handled your information, tell us first. Use the contact details at the top of this page and say what has gone wrong. We will acknowledge your complaint within 30 days and take appropriate steps to look into it.
If you are still unhappy, you can complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113. Complaining to us first does not take away your right to go to them.
Changes to this policy
We will update this page when what we do with information changes. The date below is when it was last revised. If a change is significant we will tell you directly rather than rely on you noticing it here.
Draft, not published
20 September 2026
[APPROVAL TBC]
Before this page goes live
This block is for the Yuvello team and will be removed before launch.
- Have a solicitor or a data protection specialist review the whole page
- Settle whether the self-employed agents are joint controllers, independent controllers or processors, and reflect it above
- Register with the ICO, pay the data protection fee and put the number in
- Set a dedicated privacy contact address and decide who owns data protection
- Replace every retention placeholder with a period, a reason, and a rule configured in the CRM
- Name every processor and get an Article 28 contract signed with each
- Answer the international transfer question once the platforms are chosen
- Write the cookie policy and build a banner that allows genuine refusal
- Put a link to this page next to every form on the site, before submission
- Document a breach procedure that can reach the ICO inside 72 hours
- Set a review date, because this page goes stale the moment the stack changes