Privacy Policy

Privacy Policy & General Data Protection Regulation (GDPR) of 2018.

 Your privacy is important to us and we are committed to keeping your information secure.  We only ask for personal data which is necessary for business purposes and we never pass your details on third parties unless legally obliged to.  This policy describes how and why we use your personal data, how we store and process your personal data, how long we hold your personal data for, and what you can do if you are unhappy with our privacy procedures.
Who we are

Within this document Paul Wright & Co Ltd refers to Paul Wright & Co Ltd, with offices at 119-121 Ipswich Street, Stowmarket, Suffolk, IP14 1BB Paul Wright & Co Ltd’s use of your personal data will be governed by this Privacy Statement & GDPR (2018). 

  1. We will control the information that we collect and use about you, we will treat this information as confidential, and in accordance with the appropriate Data Protection Legislation. 
  2. Your personal information will only be shared with others in accordance with this Privacy Statement.

The Privacy Statement is required and intended to:-

  1. Identify what personal information and data is.
  2. How we may collect that information.
  3. Types of personal information that we collect.
  4. Basis for collecting personal data & how we use it
  5. Information on sharing your personal information.
  6. How long we keep that information and how it is secured.
  7. Your rights in relation to your personal information.
  8. How to complain.
  9. Contact details. 


1          Identify what Personal Information & Data is

Personal information is any information that tells us something about you, which include details such as name, address, contact details, date of birth, bank account details, email addresses. Under Data Protection Legislation some information is classed as “special” and is more sensitive. We would not normally collect any “special” information.
2          Information we may collect from you

Basic identification, name, address and contact details.
Bank account details (Vendors, Landlords, Tenants & Contractors).
Details of transactions.
Details which you provide requesting information about forthcoming items of interest.

When you visit our website, we may keep a record of details of your visits to our site, including but not limited to your searches, the products and properties and pages that you looked at, the full Uniform Resource Locators (URL) clickstream to, through and from our Site (including date and time); page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any telephone number used to call us. Technical information, including the internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform may also be recorded. Please see our website cookie policy for additional information.
3          Types of Personal Information that we collect

Normally we collect your full name and contact details, such as phone number, email address and postal address, for use in all parts of our business. Where we are required to do so by law, we will collect information relating to identity, which may or may not be photographic. If transacting with you either in the sales or the lettings departments, we may also require your bank account details. As part of the legislation we are obliged in some circumstances to collect certain information for anti-money laundering compliance, in addition to our own records for normal day to day contact. We will collect information relating to identity, in addition we may have details such as photographic identification.
4          Basis for collecting personal data and how we use it

To carry out our obligations and to provide you with the information, goods or services that you request or require from us. We may disclose your information to business partners and to third party suppliers we engage to provide services which involve processing data on our behalf (i.e. contractors, website provider & IT support), or in accordance with a properly executed court order or otherwise required to do so by law.  We only take bank account details in order to pay settlement into your account. We do not keep credit/debit card details on file. If you place a residential deposit with us your details will be transferred to the appropriate Tenancy Deposit Scheme, and from the tenant we may also collect “Right to Rent” information. If we are undertaking professional services for you we will collect details relevant to the property, and also your name, address, telephone number and any other contact details such as email addresses. The lawful basis on which we collect and use your personal data is predominately ‘contract’ and ‘consent’. Personal data is collected either in person, email, website, letter, phone, text or other manner of correspondence.

5          Information on sharing your Personal Information

We will not normally share your personal information with any unrelated third party except with your expressed consent, or in a direct requirement for processing that information for instance for legal requirements or statutory obligation.

6          How long we keep that Information & how it is secured

We will keep your personal information for what we consider to be a relevant time span. We have compiled protocols within this business for retention of that information, which may be longer than the period on which we are dealing with you, as we have statutory regulatory obligations to retain this information, particularly for tax and legal matters. All information that you provide to us will be stored securely. The computers that store the information are kept in a secure facility with restricted access and we use secure firewalls.  Where Data is in paper format, it is stored in a secure environment and is disposed of securely when it is no longer needed.  We will take all reasonable steps to ensure that your Data is secure and treated in accordance with this privacy policy. Please be aware that the transmission of information via the internet is not completely secure. Although we will do our best to protect your Data, we cannot guarantee the security of your Data transmitted to our Site; any transmission is at your own risk. Once we have received your Data, we will use strict procedures and security features to try to prevent unauthorised access.

7          Your Rights in relation to Personal Information

You have the right to access information held about you, amend, restrict processing, and to be ‘forgotten’. Upon request, we will comply fully with your rights in accordance with the General Data Protection Regulation (GDPR) of 2018. If you raise any objection to us holding information we will carry out an investigation into the need for holding that information.

8          Complaints

We have a Complaints Procedure, a copy of that is obtainable from our office & our website.
9.         Contact

Questions, comments and requests regarding this privacy policy should be addressed to the Office address or via email to: If you think there is a problem with the way that we handle your Data, you can complain to the Information Commissioner’s Office (ICO) who are the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals; www.