Privacy Notice
Last updated: 30 July 2026
This notice is an operational website document. It is not a substitute for professional legal advice.
1. Who controls your information
D8 Property Services Ltd trading as D8 Property Group is the controller for personal information submitted through this website. Company number 15488706, registered in England and Wales. Registered office: 71–75 Shelton Street, London, WC2H 9JQ. Email: jordan@d8propertyservices.com.
2. Categories of personal data we collect
- Identity and contact details: name, email address, telephone number, organisation and role
- Property information: address, postcode, property type and access arrangements
- Enquiry content: the message and any details you choose to include
- Assessor application data: qualifications, accreditation details, coverage areas, availability and any document you send us
- Complaint data: the details of your complaint, references and any evidence you provide
- Technical data: information necessary to deliver the page and protect the form against abuse, including the network address associated with a submission
- Consent records: your Privacy Notice acknowledgement, notice version and timestamp, and any optional marketing preference
3. Purpose and lawful basis
| Purpose | Lawful basis |
|---|---|
| Service enquiries and quotation requests | Steps at your request prior to entering a contract, and our legitimate interests in responding to enquiries |
| EPC and property appointment requests | Performance of a contract, or steps at your request prior to a contract |
| Portfolio and public-sector enquiries | Legitimate interests in responding to business enquiries, and pre-contract steps |
| Assessor applications and documents | Steps at your request prior to entering a contract, and legitimate interests in assessing suitability |
| Complaints | Legal obligation and legitimate interests in investigating and resolving complaints |
| Website security and abuse prevention | Legitimate interests in keeping the site and forms secure |
| Optional marketing updates | Consent, which you can withdraw at any time |
4. Recipients and service providers
The website and its enquiry database are hosted on the Lovable platform, which uses Cloudflare for website delivery and Supabase for database services. Submissions are stored in that database and are accessible only to authorised D8 personnel and to server-side code.
Email notification of enquiries requires a verified sending domain and email provider. At the date of this notice that provider has not yet been configured for this website, so this section requires configuration before launch and the named provider will be added here once it is in place. We will not name a processor we have not appointed.
We may also share information with professional advisers, insurers, or where we are required to do so by law. Where D8 delivers work under a programme led by a principal contractor or client organisation, relevant service information may be shared with that organisation for the purposes of that programme.
5. International transfers
Our hosting and database providers operate international infrastructure, so personal data may be processed outside the UK. Where that happens, transfers are made under the safeguards permitted by UK data protection law, such as the UK International Data Transfer Addendum or equivalent contractual protections. You can ask us for more detail using the contact details above.
6. Security
Enquiry data is transmitted over encrypted connections, stored in an access-controlled database with row-level security, and submitted through server-side code that validates and sanitises input. Access is limited to those who need it. No system can be guaranteed completely secure.
7. Retention
We keep personal information only as long as necessary. The working periods are set out in our Data Retention Schedule.
8. Your rights
- Access to the personal data we hold about you
- Rectification of inaccurate or incomplete data
- Erasure in certain circumstances
- Restriction of processing in certain circumstances
- Data portability where processing is based on consent or contract and is automated
- Objection to processing based on legitimate interests
- An absolute right to object to direct marketing at any time
- Withdrawal of consent at any time where we rely on consent, without affecting earlier processing
To exercise any right, email jordan@d8propertyservices.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to resolve matters first.
9. Whether information is required
Fields marked as required on our forms are needed for us to respond to your enquiry or process your application. If you do not provide them, we may not be able to respond or to arrange a service. Optional fields simply help us give a more accurate answer.
10. Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Automated checks are limited to spam and abuse prevention on our forms; a person reviews every genuine enquiry.
11. Cookies
See our Cookie Policy for the technologies used on this website and how to manage your choices.
12. Changes to this notice
We may update this notice as our services and providers change. The version and date of the notice you acknowledged when submitting a form is recorded with your submission.