Information provided by you when:
From the following third parties that you have agreed to refer your personal information to us so that we can send you information about our products, developments and offers, or so that we can contact you by telephone, post and/or email about our products, developments and offers:
GDPR (General data protection regulations) says that we can use your personal information only if we have a lawful basis for doing so. This means that we can only process your personal data if we have one (or more) of these reasons:
A legitimate interest is when we (or someone else) have a business or commercial reason to use your information. However, such use of your personal data must not have an unduly negative or unfair impact on your privacy or prejudice your rights and freedoms.
Here is a list of all the ways that we may use your personal information when you are a prospect, and which of the lawful reasons we rely on to do so.
| Purpose | Lawful basis |
| To provide you with information about our products and services, including purchase assistance schemes: | Our legitimate interests to provide you with information about our products and services that we think you may want or need, or that may be of interest to you |
| To notify you about changes to our products and services: | Our legitimate interests to develop and manage our brand, products and, services and to continue to provide you with information that we think you may want or need, or that may be of interest to you. |
| To provide you with information about new developments and house types which may meet your needs: | Our legitimate interests to develop and manage our brand, products and, services and to continue to provide you with information that we think you may want or need, or that may be of interest to you. |
| To provide you with information about government purchase assistance schemes, like Help to Buy, and government policies that relate to home ownership: | Our legitimate interests to provide you with information about products and services that we think you may want or need, or that may be of interest to you. There may also be a legal obligation for us to process the information. |
| To carry out an analysis about our products and services and your marketing requirements: | Our legitimate interests to ensure we are sending you information we think you may want or need, or that may be of interest to you. |
| To inform you of promotions are running about our products and services: | Our legitimate interests to provide you with information about products and services that we think you may want or need, or that may be of interest to you. |
| To carry out market research: | Our legitimate interests to understand how we are performing so we can meet our mission statement and objectives. There may also be a legal obligation for us to process the information or to demonstrate that we are fulfilling our obligations. |
| To monitor telephone calls between us for authentication, security, quality and, training purposes. | Our legitimate interests to help us to monitor our performance and to improve our products and services |
| Capture CCTV footage for security, quality, and training purposes. | Our legitimate interests around health and safety and crime prevention and detection. |
| To process a complaint received from you: | Our legitimate interests to manage our relationship with you. We may also need to fulfil our legal and contractual duties or fulfilling your requests prior to entering a contract. |
| To run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, communications, corporate governance, and audit: | Our legitimate interests in managing our business, efficiently, complying with laws or regulations that apply to us. Fulfilling our contractual duties or fulfilling your requests prior to entering a contract. |
We will use your personal information to tell you about our products and services that you have expressed an interest in.
The personal information we have for you is made up of what you tell us and data we collect from third parties we work with (with your knowledge or reasonable awareness). We use this to identify and inform us of what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant to you.
We can only use your personal information to send you marketing messages if we have either your consent or a ‘legitimate interest’ (as described above).
Before sending electronic marketing communications, we will follow the law and guidance where this requires us to seek your consent. You can withdraw your consent to receive further electronic marketing at any time. Please follow the ‘unsubscribe’ instructions on our marketing communications.
We may ask you to confirm or update your choice of being contacted from time to time and if there are changes in the law, regulation, or the structure of our business.
Cora will, never sell your personal data to third party organisation.
This could be:
When sharing information, we will comply with all aspects of data protection law.
When we need to share personal data with our contractors and third-party suppliers, our relationships with them are governed by contracts which impose strict data sharing and confidentiality requirements.
Where sharing is in our legitimate business interests, we may share your information without seeking your consent first. This may be with:
We will only send your data outside of the UK or European Economic Area (‘EEA’) to:
We will keep your personal information for as long as you remain an active prospect on our marketing database and/or we have products and services we believe are relevant or of interest to you.
We may keep your information for up to 12 months after the last time you contacted us or responded to contact from us for one of these reasons:
We may keep your data for longer than 12 months if we cannot delete it for legal or regulatory reasons or need to do so to deal with future legal claims or we have a legitimate need to do so. If we do, we will make sure that your privacy is protected and only use it for those purposes.
We have a document retention schedule which sets out how long we keep different types of information for. This is based on legal requirements and good industry practice.
We will apply appropriate technical and organisational measures to ensure your personal information is secure.
Cora is committed to upholding your data privacy rights.
We will be open and transparent about how and why we use your personal information.
The right of access
You have a right to ask us what personal information we hold about you and to request a copy of your personal information. This is known as a ‘subject access request’ (SAR).
We will provide a copy of your information free of charge. However, we can charge a ‘reasonable fee’ if your request is manifestly unfounded or excessive, particularly if it is repetitive. Our fee will be based on administrative costs incurred by us in providing your information.
Where your request is manifestly unfounded or excessive, we can refuse to respond. If we refuse to respond to your request, we will let you know why.
We have one month to provide you with the information you’ve requested (although we will try to provide this to you as promptly as possible). We may extend this period by a further two months if your request is complex or we have received a number of requests from you. If this is the case, we will inform you within one month of the receipt of your request, explaining why an extension is necessary.
We will provide you with a copy of the personal information that we hold about you. This will not generally include information about your property such as repair logs or details of contractor visits as this is unlikely to constitute your ‘personal information’.
Please be clear if you are seeking property or repairs related information, as a SAR is unlikely to fulfil your information requirements.
You can ask us to rectify your personal data if it is inaccurate or incomplete by contacting us using the contact details above. If you do, we will take reasonable steps to check its accuracy and correct it.
We will comply with your request free of charge. However, we can charge a ‘reasonable fee’ if your request is manifestly unfounded or excessive, particularly if it is repetitive. Our fee will be based on administrative costs incurred by us in complying with your request.
Where your request is manifestly unfounded or excessive, we can refuse to comply with your request.
If we refuse to comply with your request, we will let you know why.
We have one month to comply with your request (although we will try to do this as promptly as possible). We may extend this period by a further two months if your request is complex or we have received a number of requests from you. If this is the case, we will inform you within one month of the receipt of your written request, explaining why an extension is necessary.
Where we have shared the personal data in question with others, we will contact each recipient and inform them of the erasure of your personal data, unless this proves impossible or involves disproportionate effort.
Please help us to keep our records accurate by keeping us informed of any changes in your personal information.
The right to erasure is also known as ‘the right to be forgotten’. In some circumstances, you can ask us to delete or remove personal data where there is no compelling reason for its continued processing.
This is not an absolute right, and we will need to consider the circumstances of any such request and balance this against our need to continue processing the data, for example, to comply with a legal obligation. Our response will also be guided by the provisions of our retention schedule.
We will comply with your request free of charge. However, we can charge a ‘reasonable fee’ if your request is manifestly unfounded or excessive, particularly if it is repetitive. Our fee will be based on administrative costs incurred by us in complying with your request.
Where your request is manifestly unfounded or excessive, we can refuse to comply with your request.
If we refuse to comply with your request, we will let you know why.
We have one month to comply with your request (although we will try to do this as promptly as possible). We may extend this period by a further two months if your request is complex or we have received a number of requests from you. If this is the case, we will inform you within one month of the receipt of your written request, explaining why an extension is necessary.
Where we have shared the personal data in question with others, we will contact each recipient and inform them of the erasure of your personal data, unless this proves impossible or involves disproportionate effort.
In some circumstances you can ask us to restrict the use of your personal information. This is not an absolute right and only applies if:
Where your request is manifestly unfounded or excessive, we can refuse to comply with your request.
If we refuse to comply with your request, we will let you know why.
We have one month to comply with your request (although we will try to do this as promptly as possible). We may extend this period by a further two months if your request is complex or we have received a number of requests from you. If this is the case, we will inform you within one month of the receipt of your written request, explaining why an extension is necessary.
If we restrict the processing of your personal information, we are permitted to store the personal data, but we won’t use it.
Where we have shared the personal data in question to others, we will contact each recipient and inform them of the restriction of the personal data, unless this proves impossible or involves disproportionate effort.
You can object to our processing of your personal data where that processing is based on legitimate interests and, in those cases, we will stop processing your personal data unless:
If you object to our processing of your personal data for direct marketing purposes, we will immediately stop processing your personal data for that purpose although will keep your stop request on our records so as to respect your wishes.
You can ask us to review any decisions that are determined by automated means, making a decision about you solely by automated means without any human involvement). You can also object to our use of your personal data for profiling (automated processing of personal data to evaluate certain things about you).
If you are unhappy with why or how we have used your personal information or want to exercise your rights above, please contact our data protection lead using the contact details above.
If we cannot deal with your issue and you want to raise a complaint about our processing of your data, you can contact the Managing Director:
Mr Luke Simmons
Grovelands Business Park
West Haddon Road
East Haddon
Northamptonshire
NN6 8FB
Telephone:01604 369 200
Last update October 2022
