Privacy policy

The following policy outlines how we treat your personal information, so that you can be assured it will be handled in a professional manner at all times.

1. Introduction

This Privacy Policy forms part of OPISAS Ltd (Hereinafter also defined “OPISAS”) obligation to be open and fair with all individuals whose personal data we process and to provide details around how we process such personal data and what we do with it.
OPISAS is committed to safeguarding the privacy of personal data and complying with the General Data Protection Regulation (GDPR 2018) and the UK Data Protection Bill 2017, and any future changes in data protection legislation with which OPISAS will be required to comply. When selling, purchasing, renting or financing a property (including surveying services) through our company we process your personal data such as name, address, contact details, email address and passport amongst other things.
Processing of this data implies collecting, storing, using or disclosing your personal data.
If You consent to be notified of, or receive other products or services from OPISAS, or use any of our websites, You may be provided with further privacy notices which may be contained in a separate policy or within any terms and conditions. These additional privacy notices shall supplement this Privacy Policy.
This Privacy Policy relates to the processing of personal data by OPISAS.

Unless otherwise stated, all references to “we” or “our” shall imply all OPISAS lines of business that process personal data. None of the lists or examples provided in this Privacy Policy is intended to be exhaustive or fully representative of every individual.

2. Scope

The scope of this Privacy Policy covers client personal data in respect of the following:

• Ways we use your Personal Data
• Definitions of Personal Data types
• Collecting Personal Data
• Using Personal Data
• Disclosing Personal Data
• Retaining Personal Data
• Securing Personal Data
• Sharing Personal Data
• International Data Transfer
• Log Files and Statistics
• Use of Cookies on our Website
• Data Subject Rights
• Updates / Amendments
• Third Party Websites
• Consents (“Opt-in”)
• Withdrawal of Consent (“Opt-out”)
• Additional Privacy Information
• Data Protection Registration
• Our Details
   

3. Ways we use your Personal Data

We’ll process your personal data:

a) as necessary to perform and fulfil our contracts with You:

• to take steps at your request prior to entering into it;
• to exercise rights set out in agreements or contracts;
• to deliver our products and services;
• to update our records;
• to make and manage customer payments;
• to manage fees and charges due on customer transactions;
• to collect and recover money that is owed to Us.
   

b) as necessary to comply with legal obligation, e.g.:

• when you exercise your rights under data protection law and make requests;
• for compliance and to obey laws and regulations that apply to Us;
• to verify your identity, make credit, fraud prevention and anti-money laundering checks;
• to manage risk for Us and our customers;
• to detect, investigate, report and seek to prevent financial crime;
• to run our business in an efficient and proper way;
• to manage how we work with other companies that provide products and services to Us and our customers.
   

c) as necessary for our own legitimate interests, or those or other persons and organisations, e.g.:

• for good governance, accounting and managing and auditing our business operations;
• to respond to complaints and seek to resolve them;
• to run our business in an efficient and proper way;
• to develop and manage our brands, products and services;
• to manage how we work with other companies that provide products and services to Us and our customers;
• to monitor emails, calls, other communications and activities with reference to your contract;
• to provide advice or guidance about related products and services.
   

d) based on your consent, e.g.:

• to manage our relationship with you;
• to develop new ways to meet our customers’ needs and to grow our business;
• to develop and carry out marketing activities;
• to provide advice or guidance about related products and services.

You are free at any time to change your mind and withdraw your consent. The consequence might be that we can’t do certain things for You.

4. Definitions of Personal Data types

We use various kinds of personal information, and group them together like this.

5. Collecting Personal Data

We may collect and store the following kinds of personal data:

1. Information that You provided to Us when applying through our website, during visits to branch offices, in emails or over the phone.
2. Information contained in or relating to any communication that You send to Us through our website, email, in writing or over the phone.
3. Information that You provide to Us for the purpose of subscribing to our marketing communications.
4. Information that You provide to Us when using any services we provide, or that is generated during the use of those services.
5. Information that You provide as part of electronically signing agreements with Us.
6. Information that You provide in performing anti-money laundering, financial and credit checks as well as for fraud and crime prevention and detection purposes.
7. Information related to the security and access of our systems and applications.
8. Information to help Us comply with our legal and regulatory obligations, including reporting to and being audited by regulators and external auditors.
9. Information to help Us comply with court orders and to exercise and defend our legal rights.
10. Any other personal information that may be sent to Us and which we use for legitimate business purposes.
11. Information shared as part of our competitions or promotions.

Before You disclose to Us the personal information of another person, You must obtain that person’s consent to both the disclosure and the processing of that personal information in accordance with this Privacy Policy.

Data from third parties we work with:

• Companies and Affiliates that introduce You to Us;
• Financial Advisors;
• Property Managers;
• Sales Network;
• Mortgage Brokers;
• Comparison websites;
• Social networks;

We may need to collect personal information by law, or under the terms of a contract we have with You. If You choose not to give Us this personal information, it may delay or prevent Us from meeting our obligations. It may also mean that we cannot perform the services needed to progress the sale, purchase or letting of a property. Any data collection that is optional would be made clear at the point of collection.

6. Using Personal Data

We may use your personal information to:

1. Enable your use of any services that we may provide through our websites or third-party websites.
2. Supply You with our products and services.
3. Send statements, invoices and payment reminders to You, your lawyers who You use for conveyancing, or to collect payments from You.
4. Send You marketing communications.
5. Deal with enquiries and complaints.
6. Perform money laundering, financial and credit checks.
7. Use tracing services to obtain onward contact details and collect any unpaid debts for any default by You.
8. Ensure appropriate access to systems and applications.
9. Comply with our legal and regulatory obligations.
    

7. Disclosing Personal Data

We only disclose your personal data in the ways set out in this Privacy Policy or subject to any agreements in place between Us. The following circumstances may apply:

1. Across our different lines of business and brands, as part of a need to know or as part of improving our existing products and services or as part of providing new services.
2. To third parties who process personal data on our behalf.
3. To third parties’ who process personal data on their own behalf but provide Us, or You, with a service on behalf of Us.
4. To third parties’ with whom information is shared for anti-money laundering checks, credit risk reduction, debt collection and other fraud and crime prevention purposes.
5. To any regulator, external auditor or applicable body or court where we are required to do so by law or regulation or as part of any investigation.
6. To any central or local government department and other statutory or public bodies.
7. If the law or a public authority says we must share the personal data;
8. If we need to share personal data in order to establish, exercise or defend our legal rights (this includes providing personal data to others for the purposes of preventing fraud or reducing credit risk);
9. To any other successors in title to our business(es);

We do not sell, rent or trade any of your personal data. We will not, without your consent, disclose or supply your personal data to any third party for the purpose of their or any other third party’s direct marketing.

8. Retaining Personal Data

The following criteria are used to determine data retention periods for your personal data (whether or not You become a customer):

• Retention in case of queries – we will retain your personal data as long as necessary to deal with your queries (e.g. if your potential transaction is unsuccessful);
• Retention in case of claims – we will retain your personal data for as long as You might legally bring claims against Us; and
• Retention in accordance with legal and regulatory requirements – we will retain your personal data after your contract or service with Us has come to an end based on legal and regulatory requirements.

9. Securing Personal Data

Where OPISAS acts as the controller of personal data, it will ensure that necessary and adequate safeguards are in place to prevent unauthorised access, loss, misuse or alteration of your personal data.

Where data is stored electronically we store all personal information on secure servers with relevant access and firewall controls.

Where data is stored on paper or forms all personal data is locked away when not in use, and disposed of securely after use either using document shredders or third-party disposal organisations who have been contracted to dispose of documents appropriately.

Any personal data sent to Us, either in writing or email, may be insecure in transit and we cannot guarantee its delivery.

Where You use a Password to access any service provided by OPISAS this must be kept confidential and not disclosed to anyone else. OPISAS does not ask You for your password.

10. Sharing Personal Data

To provide the services to You we may share the personal data that You supply with several third parties:

1. Adobe Systems, Inc (“Adobe Sign”) and/or Docusign Inc who are used to undertake the electronic digital signing of agreements.
2. The Rocket Science Group LLC (“Mailchimp”) who are used for newsletter communications and marketing automation.
3. Dropbox, Inc and/or Microsoft Corporation (“OneDrive”) to archive paper records that we are required to keep for legal and regulatory reasons and to dispose of records securely.

To protect your data OPISAS agree contractual arrangements with these third-party data processors to ensure that your personal data is protected in compliance with this Privacy Policy and the data protection legislation that OPISAS is required to comply with.

Unless otherwise defined under section 12 all personal data shared with third parties is stored and processed in the UK or EU.

11. International Data Transfers

Personal data that we collect, is predominantly stored and processed in the UK, but for specific services may be transferred, stored, processed outside of the EU (designated under GDPR as “Third Countries”).

As part of providing our services to You under an agreement and/or agency agreement we will use internal and/or third party data processors from Third Countries as outlined below:

1. Adobe Systems, Inc (“Adobe Sign”) and Docusign Inc which are based in the USA.
2. Google, Inc whose services are based in the USA.
3. The Rocket Science Group LLC (Mailchimp) whose services are based in the USA.
4. Dropbox, inc whose services are based in the USA.

OPISAS has agreed contractual agreements with these third-party data processors to safeguard your personal data as required by GDPR when transfers are undertaken to Third Countries.
You expressly consent to the transfers of personal data described in this section for the purposes stated.

12. Log Files and Statistics

OPISAS may use IP addresses, URLs of requested resources, timestamps and HTTP user agents to administer the system, analyse trends and gather broad demographic information for aggregate use.

In addition to this we may use third party services to monitor your use of our website, including Google Analytics, a web analytics service provided by Google, Inc (‘Google’). This information allows Us to track how many visitors we have, how often they visit and where they originated from. It also gives the ability to gather which terms were used when searching for properties.

13. Use of Cookies on our Website

We use cookies to collect information about store your online preference. Cookies are small pieces of information sent by a web server to a web browser which allows the server to uniquely identify the browser on each page.

We use the following categories of cookies on our website:

Strictly Necessary Cookies
These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for such as remembering your login details or shopping basket items cannot be provided.

Performance Cookies
These cookies collect anonymous information on how people use our website. For example, we use Google Analytics cookies to help us understand how customers arrive at our site, browse or use our site and highlight areas where we can improve areas such as navigation, shopping experience and marketing campaigns. The data stored by these cookies never shows personal details from which your individual identity can be established.

Functionality Cookies
These cookies remember choices you make such as the country you visit our website from, language and search parameters such as size, colour or product line. These can then be used to provide you with an experience more appropriate to your selections and to make the visits more tailored and pleasant. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites.

Targeting Cookies or Advertising Cookies
These cookies collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advert as well as help measure the effectiveness of an advertising campaign. The cookies are usually placed by third party advertising networks. They remember the websites you visit and that information is shared with other parties such as advertisers.

Social Media Cookies
These cookies allow you to share what you’ve been doing on the website on social media such as Facebook and Twitter. These cookies are not within our control. Please refer to the respective privacy policies for how their cookies work.

If you want to delete any cookies that are already on your computer, please refer to the help and support area on your internet browser for instructions on how to locate the file or directory that stores cookies.

Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our site. To find out more about cookies please visit: www.allaboutcookies.org or see www.youronlinechoices.eu which contains further information about behavioural advertising and online privacy.

Use of Web Beacons
Some of our Web pages may contain electronic images known as Web beacons (sometimes known as clear gifs) that allow us to count users who have visited these pages. Web beacons collect only limited information which including a cookie number, time and date of a page view, and a description of the page on which the Web beacon resides.

We may also carry web beacons placed by third party advertisers. These beacons do not carry any personally identifiable information and are only used to track the effectiveness of a particular campaign.

14. Data Subject Rights

Your rights are as follows (noting that these rights don’t apply in all circumstances):

• The right to be informed about our processing of your personal data;
• The right to have your personal data corrected if it’s inaccurate and to have incomplete personal data completed;
• The right to object to processing of personal data;
• The right to restrict processing of your personal data;
• The right to have your personal data erased (the “right to be forgotten”);
• The right to request access to your personal data and information about how we process it;
• The right to move, copy or transfer your personal data (“data portability”); and
• Rights in relation to automated decision making including profiling.

15. Updates / Amendments

We may update this privacy policy to reflect changes to our information practices. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on these Websites prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

16. Third Party Websites

We are not responsible for the practices employed by Third Party Websites linked to or from our Website nor the information or content contained therein.

Often links to other websites are provided solely as reference points to information on topics that may be useful to the users of our Website.

Please remember that when You use a link to go from our Website to a Third-Party Website, our Privacy Policy will no longer apply. Your browsing and interaction on any other Website, including Third Party Websites, which have a link on our Website, are subject to that Website’s own Privacy Policy.

17. Consents (“Opt-in”)

Your personal data is provided for the purpose of selling or purchasing a property, letting or being a tenant of a property, conveyancing, financial services or surveying services as agreed under the terms of an Agreement we have agreed between You and Us.

However, OPISAS would like to support You throughout the entire process of selling or purchasing your property by offering You additional relevant and related services, and keep You informed about all OPISAS services (marketing) which You can elect to, or decline from, receiving.

18. Withdrawal of Consent (“Opt-out”)

You have the right, at any time, to ask Us not to process your personal data for marketing purposes and any additional services that You have consented to receive.

You can opt-out of receiving any of these services and communications simply by clicking the unsubscribe link on any emails You receive, or contacting your branch or head office.

Please note it can take up to 28 days for a request to be fulfilled for general OPISAS communications because of pre-planned or ongoing activity.

19. Additional Privacy Information

OCC Referrals
If you choose to use our referral service to tell a friend about our site, we will ask you for your friend’s name and email address. We will automatically send your friend a one-time email inviting him or her to visit the site. We store this information for the sole purpose of sending this one-time email and tracking the success of our referral program. Your friend may contact us at info@opisas.com to request that we remove this information from our database.

Blog
Our Websites site offers a publicly accessible blog. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your personal information from our blog, contact us at info@opisas.com. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.

Links to Third Party Sites
Our Websites may, from time to time, contain links to and from the websites of our suppliers, partner networks, advertisers, affiliates and other third parties. If you follow a link to any of these websites, please note that these websites should have their own privacy policies and we do not accept any responsibility or liability for these policies or the content or operation of these websites. Please check these policies and the terms of the websites before you submit any personal data to these websites.

Social Media Widgets
Our Websites include Social Media Features, such as the Facebook Like button. These Features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our Websites. Your interactions with these Features are governed by the privacy policy of the company providing it.

20. Our Details and Contacts

If you have any other queries relating to your privacy and the use of your personal data, please contact:
info@opisas.com

GDPR v.0.1