Privacy Policy


Privacy Policy & Notice

We are Chris Kerr Property Service’s Ltd trading as Kerr and Co with registered offices at 77 Goldhawk Road, Shepherd’s Bush, London W12 8EH and a registration number of 2839010.

We have provided this privacy notice in order to inform you how we collect and handle your personal data. All handling of your personal data is done in compliance with the General Data Protection Regulations (EU) 2016/679 (“Data Protection Legislation”).

What are your rights?

When reading this notice, it might be helpful to understand that your rights arising under Data Protection Legislation (for further information see https://ico.org.uk

  • The right to be informed of how we use your data;
  • The right to access to any data we hold on you;
  • The right to rectification or complete incomplete data we hold;
  • The right to erasure of your data;
  • The right to restricted processing of your data;
  • The right to data portability of any data we hold on you;
  • The right to object to processing data we hold on you.

Who is the Data Controller?

  • If Kerr and Co have collected your personal data directly for our own purposes, all employees of Kerr and Co are the Data Controllers.
  • If Kerr and Co have been passed your personal data from a third-party all employees of Kerr and Co are the Data Controllers.
  • If Kerr and Co have been passed your personal data from a third-party for a joint purpose that we both influence, all employees of Kerr and Co are the joint Data Controllers.
  • If your data has been passed to us by a third party for processing under their instruction, that third party remain the Data Controller.
  • If we have received your personal data as part of a business to business relationship, the Data Controller is your employer.

What are the lawful bases for processing personal data?

Under Data Protection Legislation, there must be a ‘lawful basis’ for the use of personal data. The lawful bases are outlined in Article 6, Section 1 of the GDPR. They are sub-sections:

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  • Processing is necessary for compliance with a legal obligation to which the controller is subject;
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

About our processing of your data

Personal data, or personal information, means any information about any individual from which that person can be identified.

Kerr and Co may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

  • Identity Data - includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender, colour copies of formal legal identity documentation (Passport, identity cards, utility bill, council tax bill).
  • Contact Data - includes billing address, delivery address, email address and telephone numbers.
  • Financial Data - includes bank account and payment card details.
  • Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
  • Technical Data includes internet protocol (IP) address.
  • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
  • Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). We currently do not collect any special category data.

Data Kerr and Co collect.

Kerr and Co regularly collect identity, contact, financial and technical data in order to allow our staff to perform their professional estate agency and property management services. All personal data is processed by Kerr and Co in the provision of professional estate agency services. All staff at Kerr and Co are classified for the purposes of GDPR as Data Controllers and therefore have access to all personal data in order to discharge these services.

What happens if I refuse to give Kerr and Co my personal data?

The information about you that we have collected for the performance of our contracts is required in order for us to successfully fulfil our obligations to you. If you choose not to provide the personal data requested, we will not be able to enter into a contract with you to provide the benefits we offer. If we are already processing your personal information under a contract, you must end our contractual relationship (as/where permitted) in order to exercise some of your rights.

If you do not allow Kerr and Co to gather and process your personal data we will not be able to provide you with any service.

We process some personal information as part of a contractual relationship with a Data Controller. Any requests to restrict this type of processing should be forwarded to the Data Controller; they will be responsible for discussing your concerns and making any decisions.

What are Kerr and Co’s ‘legitimate interests’?

Legitimate interests are a flexible basis upon which the law permits the processing of an individual’s personal data. To determine whether we have a legitimate interest in processing your data, we balance the needs and benefits to us against the risks and benefits for you of us processing your data. This balancing is performed as objectively as possible by our Data Protection Lead. You are able to object to our processing and we shall consider the extent to which this affects whether we have a legitimate interest. If you would like to find out more about our legitimate interests, please contact info@kerrandco.com.

How long will your personal data be kept?

Kerr and Co hold different categories of personal data for different periods of time depending on the lawful bases of processing the data. We are also Governed by various legislation which determines the length of time certain data is held for. Wherever possible, we will endeavour to minimise the amount of personal data that we hold. We constantly review all data and the lawful bases on which it is held to make sure any data retained is lawful, any superfluous data will be securely and permanently removed from our systems.

Does your data leave the EU?

Kerr and Co use overseas web and IT providers however to the best of our knowledge none of these services operate outside the EU and where they do they have an EU subsidiary compliant in EU legislation.

Third Party Data Transfer

Kerr and Co regularly receive and share data with third parties where we have a legal, contractual or legitimate interest in doing so. This includes, but not limited to, our providing our professional estate agent services; processing the sale and letting of property, advertising properties on the web portals we may use, any legal obligation to provide data to statutory bodies.

Contractors Kerr and Co employ in the provision of professional estate agency services

We occasionally employ contractors to carry out essential works in which case we have “Processor Contracts” in place determining exactly what happens to any personal data provided to the contractor.

Who can you complain to?

In addition to sending us your complaints directly to info@kerrandco.com, you can send complaints to our supervisory authority. As Kerr and Co predominantly handles the personal data of UK and EU nationals, our supervisory authority is the Information Commissioner’s Office. If you believe that we have failed in our compliance with data protection legislation, complaints to this authority can be made by visiting https://ico.org.uk/concerns/ .

Updates to our privacy policy

We will periodically and without prior notice revise, update or otherwise alter this policy.

Links to other websites and apps

Our website may provide links to other websites and apps for your convenience and information. These websites and apps are on the whole operated independently from Kerr and Co and as such will have their own privacy notices and policies which we recommend you review. Kerr and Co are not responsible for third party content, any use of third party websites or apps, or the privacy practices of third party websites or apps.