Privacy Policy
Empire Real Estate Investments Ltd is committed to protecting your privacy and ensuring the highest standards of data protection. This Privacy Policy explains how we collect, use, protect, and share your personal information when you engage with our luxury property advisory services. Last updated: July 18, 2025.
We adhere to UK GDPR principles and maintain the strictest confidentiality standards befitting our ultra-high-net-worth clientele. Your trust is paramount to our heritage of discretion since 2005.
Contact Information
EMPIRE REAL ESTATE INVESTMENTS LTD
43C Peach St
Wokingham RG40 1XJ
United Kingdom
Get in Touch
Data Collection Information
Personal Data We Collect
- Contact Information: Name, telephone numbers, email addresses, postal addresses, and preferred communication methods
- Investment Preferences: Property requirements, investment criteria, budget ranges, and location preferences
- Financial Information: Investment capacity verification, source of funds documentation, and financial advisor details where applicable
- Technical Data: IP addresses, browser types, device information, and website interaction patterns through cookies and analytics
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website.
If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features.
- Disable cookies through your browser settings (see our Cookie Policy for more details).
- Contact us directly to request the deletion of any previously shared personal data.
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our [Contact] page. We will process your request promptly.
How We Collect Data
Direct Collection
Through consultation forms, telephone conversations, property viewings, and email communications
Automated Collection
Via website cookies, analytics tools, and user interaction tracking for service enhancement
Third-Party Sources
From professional referrals, partner estate agents, and publicly available property records
Documentation
Through identity verification, financial documentation, and legal compliance procedures
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract Performance: To provide luxury property advisory services
- Legitimate Interests: For business development and service improvement
- Legal Compliance: To meet anti-money laundering and regulatory requirements
- Consent: For marketing communications and optional data processing
Data Retention Periods
We retain personal data only as long as necessary for the purposes outlined in this policy:
- Active Client Records: Retained for the duration of our business relationship plus 7 years
- Prospective Client Data: Retained for 3 years unless consent is withdrawn
- Marketing Communications: Until consent is withdrawn or data becomes outdated
- Legal Compliance Records: As required by UK financial services regulations (typically 6-7 years)
Data Usage and Sharing
How We Use Your Personal Data
Service Delivery
Providing luxury property advisory, arranging viewings, and facilitating property acquisitions
Client Communication
Updates on property opportunities, market insights, and service-related communications
Compliance and Verification
Identity verification, anti-money laundering checks, and regulatory compliance
Service Enhancement
Improving our services, understanding client preferences, and developing new offerings
Marketing Communications
Sharing relevant property opportunities and market intelligence (with consent)
Analytics and Research
Understanding market trends and client behaviour to enhance our advisory services
Data Sharing with Third Parties
We maintain strict confidentiality but may share limited data with trusted partners:
Professional Service Providers
Solicitors, surveyors, financial advisors, and other professionals essential to property transactions
Regulatory Bodies
When required by law or regulation, including anti-money laundering compliance
Technology Partners
Secure hosting providers, analytics services, and communication platforms (under strict data processing agreements)
International Data Transfers
For international clients, we may transfer data outside the UK using appropriate safeguards including Standard Contractual Clauses and adequacy decisions. All transfers maintain equivalent data protection standards to UK GDPR.
Data Protection Measures
Technical Safeguards
- Encryption: All data transmissions use TLS 1.3 encryption with 256-bit security
- Secure Storage: Data stored on ISO 27001 certified servers with multi-factor authentication
- Regular Backups: Automated daily backups with geographical redundancy
- Access Controls: Role-based access with unique user credentials and activity logging
Organisational Measures
- Staff Training: Comprehensive data protection training for all team members
- Confidentiality Agreements: All staff and partners bound by strict confidentiality clauses
- Incident Response: Established procedures for data breach detection and response
- Regular Audits: Annual security audits and penetration testing
Breach Notification Procedures
In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the incident. We will provide clear information about the nature of the breach, potential consequences, and measures taken to address the issue.
Your Rights and Data Management
Under UK GDPR, you have comprehensive rights regarding your personal data. We are committed to facilitating the exercise of these rights in a timely and transparent manner.
Right to Access
Request a copy of all personal data we hold about you, including details of processing activities and data sources.
Response time: Within 1 month
Right to Rectification
Request correction of inaccurate or incomplete personal data, ensuring our records remain current and accurate.
Response time: Within 1 month
Right to Erasure
Request deletion of your personal data when there is no compelling reason for continued processing.
Subject to legal retention requirements
Right to Data Portability
Receive your personal data in a structured, machine-readable format for transfer to another service provider.
Available for electronically processed data
Right to Restrict Processing
Limit how we use your personal data whilst maintaining the data on our systems for specific purposes.
Available in specific circumstances
Right to Object
Object to processing based on legitimate interests, including direct marketing and profiling activities.
Immediate effect for marketing
Right to Withdraw Consent
Withdraw consent for any processing activities that rely on your explicit consent.
Immediate effect from withdrawal
Right to Complain
Lodge a complaint with the Information Commissioner's Office if you believe your data protection rights have been violated.
ICO: ico.org.uk
How to Exercise Your Rights
To exercise any of your data protection rights, please contact our Privacy Officer using the methods outlined below. We typically respond to privacy requests within 2 business days and provide full responses within the statutory timeframes.
Required Information
- • Full name and contact details
- • Specific right you wish to exercise
- • Relevant timeframe or data categories
- • Identity verification documents
Contact Methods
- • Confidential enquiry form on our website
- • Secure email communication
- • Telephone consultation
- • Postal correspondence