Privacy Policy
Last updated: 1 May 2025Esher Surveyors ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your information when you use our website at eshersurveyors.com or engage our surveying services.
We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Esher Surveyors is a RICS-regulated surveying practice based in Esher, Surrey, KT10. For all data protection enquiries, please contact us via our contact page.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact information: Your name, email address, telephone number and postal address when you submit an enquiry or request a quote.
- Property information: Address and details of the property you wish to have surveyed or valued.
- Communications: Records of any correspondence between us, including emails and form submissions.
- Usage data: Technical information about your visit to our website, including IP address, browser type, pages viewed and time spent (collected via HubSpot analytics and standard web server logs).
- Cookies: Small text files stored on your device to improve your experience on our website. See our Cookie section below.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- To respond to your enquiries and provide quotes for our surveying services
- To carry out and deliver the surveying or valuation services you have requested
- To send you information about our services where you have consented or where we have a legitimate interest
- To improve our website and services based on usage data
- To comply with our legal and regulatory obligations as a RICS-regulated practice
- To manage our business relationships and CRM (via HubSpot)
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: Processing necessary to provide the services you have requested
- Legitimate interests: To respond to enquiries, improve our services, and manage our business
- Consent: Where you have explicitly consented to receive marketing communications
- Legal obligation: Where processing is required to comply with RICS regulations or other legal requirements
5. Data Sharing
We do not sell your personal data to third parties. We may share your data with:
- HubSpot CRM: Our customer relationship management platform, used to manage enquiries and communications. HubSpot is GDPR-compliant and data is processed under a Data Processing Agreement.
- Professional advisers: Where required by RICS regulations or legal proceedings
- Regulatory authorities: RICS or other relevant bodies if required by our professional obligations
- IT service providers: Companies that support our website and systems, under appropriate data processing agreements
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal and regulatory obligations. Survey reports and related records are typically retained for 6 years in accordance with standard professional practice. Enquiry data that does not result in an instruction is typically deleted after 24 months.
7. Cookies
Our website uses cookies to improve your experience. These include:
- Essential cookies: Required for the website to function correctly
- Analytics cookies: HubSpot analytics cookies to help us understand how visitors use our website
- Preference cookies: To remember your cookie consent choice
You can control cookie settings through your browser. Note that disabling certain cookies may affect website functionality.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: To obtain a copy of the personal data we hold about you
- Right to rectification: To have inaccurate data corrected
- Right to erasure: To have your data deleted, subject to legal obligations
- Right to restrict processing: To limit how we use your data in certain circumstances
- Right to data portability: To receive your data in a structured, machine-readable format
- Right to object: To object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, please contact us via our contact page. We will respond within 30 days.
9. Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. Our website uses HTTPS encryption for all data transmission.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites and encourage you to review their privacy policies independently.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the most recent revision is shown at the top of this page. Continued use of our website following any changes constitutes acceptance of the updated policy.
12. Complaints
If you have concerns about how we handle your personal data, please contact us in the first instance. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.