GDPR Information

Last updated: August 4, 2026

Data Controller

For the purposes of the General Data Protection Regulation (GDPR), wise-elm acts as the data controller for personal information collected through our website and service delivery.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract Performance: Processing necessary to deliver property search and advisory services you've requested
• Legitimate Interests: Processing necessary for our business operations, fraud prevention, and service improvement
• Consent: Marketing communications and non-essential cookies require your explicit consent
• Legal Obligation: Processing required to comply with UK laws and regulations

Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of what personal data we hold about you and receive a copy of that data. We respond to access requests within one month.

Right to Rectification

You may request correction of inaccurate or incomplete personal data. We update records promptly upon verification of corrected information.

Right to Erasure

You may request deletion of your personal data where there is no compelling reason for continued processing. Note that legal retention requirements may prevent immediate deletion in some cases.

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances, such as while we verify data accuracy following your rectification request.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format for transmission to another service provider.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.

Rights Related to Automated Decision Making

We do not use automated decision making or profiling that produces legal effects concerning you.

Exercising Your Rights

To exercise any GDPR rights, contact us at [email protected] with your request. We may require identity verification before processing requests involving personal data access or modification.

We respond to requests within one month. Complex requests may require up to three months; we will notify you if additional time is needed.

Data Protection Officer

For data protection queries, contact our data protection representative at [email protected].

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Telephone: 0303 123 1113

International Data Transfers

We store and process data within the United Kingdom. If data transfer outside the UK becomes necessary, we ensure appropriate safeguards are in place consistent with GDPR requirements.

Data Breach Notification

In the event of a data breach likely to result in risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach.