Privacy Policy

[SET BEFORE LAUNCH] Bonbong Estate Ltd (trading as Bonbong Estate) operates this website and provides estate agency services including property sales, lettings, viewings and valuations in the United Kingdom.

You can contact us about anything in this policy at [SET BEFORE LAUNCH] privacy@bonbongestate.com or by post at our registered office: [SET BEFORE LAUNCH] 1 Example Street, London, EC1A 1AA, United Kingdom. [SET BEFORE LAUNCH] ICO registration no. TBC.

We collect the following categories of personal data:

• Account data — your name, email address and a securely hashed password when you register for an account.
• Enquiry data — your name, email address, phone number and the content of your message when you use our contact form or request a callback.
• Property services data — details you provide when booking a viewing, requesting a valuation or saving favourite properties, which may include property addresses and appointment preferences.
• Newsletter data — your email address and optional name; for our consent records we also store the IP address and browser user-agent captured at the moment you subscribe.
• Technical data — a language preference cookie, authentication tokens held in your browser’s local storage, and basic device/connection information needed to deliver the site securely.

We only process your personal data where we have a lawful basis under Article 6 UK GDPR:

• To create and manage your account and to provide viewing bookings, valuations and messaging — performance of a contract (Article 6(1)(b)).
• To respond to your enquiries and provide customer support — our legitimate interests in operating an estate agency (Article 6(1)(f)).
• To send our newsletter and property alert emails — your consent, collected by double opt-in (Article 6(1)(a)). You can withdraw consent at any time using the unsubscribe link included in every email.
• To keep the service secure, prevent fraud and abuse, and keep records of consent — our legitimate interests and compliance with our legal obligations (Article 6(1)(c) and (f)).

We only send marketing emails (newsletter and property alerts) to people who have subscribed and then confirmed their address via a verification email (double opt-in).

Every marketing email contains an unsubscribe link and a link to manage your preferences. When you unsubscribe we keep a minimal suppression record of your email address so that we do not contact you again.

We do not sell your personal data. We share it only with:

• Service providers who host our infrastructure, store our data and deliver our emails, acting under our instructions and data processing agreements.
• Professional advisers such as lawyers, auditors and insurers where reasonably necessary.
• Courts, regulators and law enforcement where we are required to do so by law.
• Sellers, landlords or their representatives — only the details needed to arrange a viewing or transaction you have requested.

Some of our service providers may process data outside the United Kingdom. Where this happens we ensure an adequate level of protection, relying on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

Draft retention periods (to be confirmed with our solicitor before launch):

• Account data — for as long as your account is active, then deleted or anonymised within 12 months of account closure.
• Enquiry and callback data — up to 24 months after the enquiry is resolved.
• Booking, valuation and transaction records — up to 6 years, in line with limitation periods for legal claims.
• Newsletter data — until you unsubscribe; a minimal suppression record is kept afterwards so we do not email you again.
• Consent records (including sign-up IP address and user-agent) — for as long as the related subscription is active plus the period needed to demonstrate compliance.

Under the UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (“right to be forgotten”), including your account.
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive the data you provided to us in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

Email [SET BEFORE LAUNCH] privacy@bonbongestate.com with your request. We will respond within one month of receiving it (extendable by two further months for complex requests, in which case we will tell you). We may need to verify your identity before acting on a request. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we handle your personal data, please contact us first at [SET BEFORE LAUNCH] privacy@bonbongestate.com so we can try to resolve it.

You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk — helpline 0303 123 1113.

We use a small number of strictly necessary cookies and browser local storage to operate the site, and optional analytics only with your consent. See our Cookie Policy (available from the footer of every page at /cookies) for full details.

We protect your data with measures including encryption in transit (HTTPS), hashed passwords, access controls limiting who can see personal data, and logging of administrative actions. No system is completely secure; if a personal data breach occurs that risks your rights, we will notify the ICO and, where required, you, in line with our legal obligations.

Our services are intended for adults aged 18 or over and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact [SET BEFORE LAUNCH] privacy@bonbongestate.com and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top shows the current version. If we make material changes, we will take reasonable steps to bring them to your attention, for example by email or a website notice.