Privacy Policy

1. Who We Are

Nuvoria Group ("we", "us", "our") is a specialist guaranteed rent and property management company operating throughout London. Our registered correspondence address is in London, United Kingdom. You can contact us at support@nuvoriastays.com or by telephone on 0208 191 3703.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Nuvoria Group is the data controller in respect of the personal information we process about you.

2. Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

Identity and Contact Data

Full name
Email address
UK telephone number (mobile or landline)

Property Data

Property type (house, flat, HMO, commercial)
Number of bedrooms
Property postcode and London borough
Current availability or tenancy status

Communications Data

Records of emails, calls, or messages exchanged with us
Notes taken during consultations

Technical Data

IP address and approximate location derived from it
Browser type, version, and operating system
Pages visited, time on page, and referral source
Cookie identifiers (see our Cookie Policy)

3. How We Collect It

We collect personal data through the following means:

Property eligibility questionnaire on our website, where you provide your name, contact details, and property information.
Direct correspondence by email, telephone, WhatsApp, or post.
Automated technologies including cookies and analytics scripts as you navigate our website. Please see our Cookie Policy for details.
Third parties such as referral partners or letting agents who introduce you to us with your knowledge and consent.

4. How We Use Your Data

We use personal data for the following purposes:

Purpose	Description
Property assessment	To evaluate whether your property meets our eligibility criteria and to provide you with a guaranteed rent offer.
Service delivery	To manage your guaranteed rent agreement, arrange property inspections, and handle day-to-day property management.
Communication	To respond to your enquiries, send offer letters, contracts, and important service updates.
Legal compliance	To fulfil our obligations under landlord and tenant law, anti-money-laundering regulations, and tax reporting requirements.
Marketing	To send you information about our services or relevant market updates, where you have given consent or where we have a legitimate interest to do so.
Website improvement	To analyse how visitors use our site and to improve its content, performance, and user experience.

5. Legal Basis for Processing

We rely on one or more of the following legal bases under UK GDPR Article 6:

Performance of a contract (Article 6(1)(b)): Processing necessary to enter into or carry out our guaranteed rent agreement with you.
Legitimate interests (Article 6(1)(f)): Processing necessary for our legitimate business interests, such as assessing enquiries, improving our services, and preventing fraud, where those interests are not overridden by your rights.
Legal obligation (Article 6(1)(c)): Processing required to comply with applicable laws, including property law, AML, and HMRC obligations.
Consent (Article 6(1)(a)): Where you have freely given clear consent, such as for optional marketing emails or non-essential cookies.

We do not sell, rent, or trade your personal data. We may share it with carefully selected third parties in the following circumstances:

Service providers: Companies that help us deliver our service, such as email platforms (Web3Forms), website hosting providers, and CRM software. These act as data processors under our instruction.
Professional advisers: Solicitors, accountants, and insurers acting as processors or joint controllers, who are bound by confidentiality obligations.
Regulatory bodies and law enforcement: Where we are required to disclose information by law, court order, or governmental authority.
Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Enquiries that do not convert to a contract: Up to 12 months from the date of your last contact with us.
Contractual relationships: For the duration of the contract and for 6 years afterwards, in accordance with the Limitation Act 1980.
Financial and tax records: 7 years from the end of the relevant tax year, as required by HMRC.
Website analytics data: Up to 26 months, after which it is aggregated or deleted.

8. International Transfers

We primarily store and process your data within the United Kingdom. Where any of our service providers operate outside the UK, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions made by the UK Information Commissioner's Office (ICO). You can obtain further details on the safeguards in place by contacting us.

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: To request a copy of the personal data we hold about you (a subject access request).
Right to rectification: To ask us to correct inaccurate or incomplete data.
Right to erasure: To request that we delete your data where there is no compelling reason for us to continue processing it.
Right to restrict processing: To ask us to limit how we use your data in certain circumstances.
Right to data portability: To receive a copy of data you provided to us in a structured, machine-readable format.
Right to object: To object to processing based on legitimate interests or for direct marketing purposes.
Rights related to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at support@nuvoriastays.com. We will respond within one calendar month. There is no charge for exercising your rights in most circumstances.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include SSL encryption on our website, access controls on our internal systems, and staff confidentiality training.

While we take reasonable precautions, no method of transmission over the internet is 100% secure. If you suspect any misuse of your personal data, please contact us immediately.

11. Cookies

Our website uses cookies and similar tracking technologies. Please see our Cookie Policy for full details of the cookies we use, what they do, and how to manage your preferences.

12. Children

Our services are directed at adults (18 years and over). We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

Email: support@nuvoriastays.com
Telephone: 0208 191 3703
Address: Nuvoria Group, London, United Kingdom