Legal
Effective date: 28 May 2026 · Last reviewed: May 2026 · Crystal Waters Concierge
At Crystal Waters Concierge, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Crystal Waters Concierge is a property management and lifestyle concierge service operating across Sandbanks, Poole, and the wider Dorset coastline. We are registered with the Information Commissioner's Office (ICO) as required under the UK GDPR and the Data Protection Act 2018. For the purposes of UK data protection law, we are the data controller responsible for your personal data. You may contact us at: Email: crystalwatersconcierge@outlook.com Telephone: 01202 912133 Post: Crystal Waters Concierge, Sandbanks, Poole, Dorset
We may collect the following categories of personal data: • Identity data: name, title • Contact data: email address, telephone number, postal address • Property data: address and details of your property • Communication data: your enquiries, preferences, and correspondence with us • Technical data: IP address, browser type, and usage data when you visit our website
We use your personal data to: • Respond to enquiries and provide our concierge and property management services • Manage your ongoing service relationship with us • Send service-related communications • Comply with legal obligations • Improve our website and service offerings We do not use your data for automated decision-making or profiling.
We process your personal data on the following lawful bases: • Contract: where processing is necessary to perform a contract with you • Legitimate interests: to respond to enquiries and improve our services • Legal obligation: where required by law • Consent: where you have given explicit consent, which you may withdraw at any time
We do not sell or rent your personal data. We may share it with trusted third parties strictly as necessary, including: • Service contractors and tradespeople engaged to maintain your property • IT and website service providers • Legal and professional advisers All third parties are required to handle your data securely and in accordance with applicable law.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Client records are typically retained for six years following the end of a service relationship, in accordance with UK statutory requirements.
Under the UK GDPR and Data Protection Act 2018, you have the following rights: • Right of Access (Subject Access Request): receive a copy of your personal data within one calendar month • Right to Rectification: request correction of inaccurate or incomplete data • Right to Erasure ("right to be forgotten"): request deletion of your data where there is no compelling reason to continue processing • Right to Restrict Processing: ask us to suspend processing in certain circumstances • Right to Data Portability: receive your data in a machine-readable format • Right to Object: object to processing based on legitimate interests • Right to Withdraw Consent: withdraw consent at any time without affecting the lawfulness of prior processing • Rights in relation to automated decision-making: we do not carry out automated decision-making or profiling To exercise any of these rights, please contact us in writing at crystalwatersconcierge@outlook.com. We will respond within one calendar month. There is no charge for exercising your rights. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by telephone on 0303 123 1113.
Our website uses only strictly necessary cookies required for its proper functioning, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR). We do not use tracking, analytics, or advertising cookies without your explicit consent. You may control and delete cookies at any time through your browser settings. Blocking essential cookies may affect the functionality of this website.
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure, in accordance with Article 32 of the UK GDPR. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform you without undue delay.
If you are unhappy with how we have handled your personal data, we ask that you first contact us directly at crystalwatersconcierge@outlook.com so we can attempt to resolve your concern. If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO): Website: ico.org.uk Telephone: 0303 123 1113 Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF
We may update this Privacy Policy from time to time to reflect changes in law or our data practices. The current version will always be published on this page, with the effective date noted below. Where changes are material, we will inform existing clients directly.
Your data, your choice
We use strictly necessary cookies to run this site. With your permission, we also use analytics and marketing cookies to improve our service. You can change your choice any time in our GDPR policy. See our Privacy Policy.