Template — pending legal review
This document is a working template prepared for information only. It has not yet been reviewed by a solicitor and should not be treated as final or as legal advice. It will be reviewed and confirmed by a qualified adviser before launch.
Privacy Policy
Last updated: 19 August 2026
This notice explains how we collect, use, store and share personal data when you use this website or submit an enquiry to us. It is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is Langford House Ltd, a company registered in England and Wales, trading as Charles Street Mayfair. Where this notice says “we”, “us” or “our”, it means Langford House Ltd.
For any privacy question, or to exercise your rights, contact us at landlords@charlesstreetmayfair.co.uk. We have not appointed a Data Protection Officer, as we are not required to do so.
2. What personal data we collect
We only collect what you choose to give us. We do not buy personal data, and we do not collect special category data (such as health or religious information). The three forms on this site collect the following:
Guest / stay enquiry form (/stay)
- Name and email address
- Country of residence
- Preferred location, number of guests, check-in and check-out dates
- Purpose of stay and any free-text message you add
Contact form (/contact)
- Name and email address
- Enquiry type and subject
- Your message
Landlord proposal form (/get-a-proposal)
- Name and email address
- Property address, property type, number of bedrooms and furnishing status
- Current tenancy / occupancy status of the property
- Financial information about the property, including current or expected rent and your income preference
- Desired timescale and any free-text message you add
Technical data
Our hosting provider processes standard server log information (such as IP address, browser type and the pages requested) for security, abuse prevention and to deliver the site. We do not use this data to build profiles of individuals.
3. Why we process your data, and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to a guest or general enquiry | Name, email, stay details, message | Legitimate interests — replying to a request you have made to us |
| Assessing a property and preparing a landlord proposal | Contact details, property details, rent and income information | Legitimate interests before any agreement; performance of a contract once we enter into an agreement with you |
| Managing an ongoing landlord partnership or a confirmed booking | Contact and property or booking details | Performance of a contract |
| Keeping records for accounting, tax and dispute purposes | Enquiry and agreement records | Legal obligation and legitimate interests |
| Site security, fraud and abuse prevention | Server log data | Legitimate interests |
| Sending optional marketing updates (only if you have asked for them) | Name and email | Consent — you can withdraw it at any time |
Where we rely on legitimate interests, we have considered your rights and interests and only use your data in ways you would reasonably expect from a business you have contacted.
4. We do not use your data for automated decisions
No automated decision-making or profiling with legal or similarly significant effects takes place. All proposals are reviewed by a person.
5. How long we keep your data
- Enquiries that do not progress: up to 12 months from your last contact with us, then deleted.
- Landlord proposal enquiries that do not progress: up to 24 months, so we can pick up the conversation if you return to us.
- Signed agreements and related correspondence: six years after the agreement ends, to meet accounting, tax and limitation-period requirements.
- Marketing consent records: until you withdraw consent, plus a short period to evidence the withdrawal.
6. Who we share your data with
We do not sell your personal data. We share it only with service providers who process it on our instructions, and with professional advisers or authorities where we are legally required to.
| Processor | Role | Location / safeguards |
|---|---|---|
| Supabase (database and backend) | Stores enquiry form submissions securely, with access restricted to authorised administrators | EU/UK or US region; where data leaves the UK, transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses |
| Lovable (site hosting and delivery) | Serves the website and processes standard server logs | Transfers outside the UK are covered by standard contractual protections |
| Email provider | Delivers and stores enquiry notifications and our replies to you | Standard contractual protections apply to any transfer outside the UK |
Analytics: at the time of publishing this notice, no third-party analytics, advertising or tracking service is installed on this site. If we add one, we will update this notice and our Cookie Policy and, where required, ask for your consent first.
7. Security
Enquiry data is transmitted over encrypted connections (HTTPS) and stored in a database protected by row-level security rules, so submissions cannot be read publicly and are accessible only to authorised administrators. Access is limited to those who need it to respond to your enquiry.
8. Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data (this notice);
- request a copy of the personal data we hold about you (access);
- have inaccurate data corrected (rectification);
- ask us to delete your data (erasure), where we have no overriding reason to keep it;
- ask us to restrict processing, or object to processing based on legitimate interests;
- receive your data in a portable format, where processing is based on consent or contract;
- withdraw consent at any time, where consent is the basis we rely on.
To exercise any of these rights, email landlords@charlesstreetmayfair.co.uk. We will respond within one month. There is normally no charge.
9. Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Children
This site is not directed at children, and we do not knowingly collect data from anyone under 18. Guest enquiries should be submitted by an adult.
11. Changes to this notice
We may update this notice as our services or providers change. The “last updated” date above shows when it was last revised.