Harrisons Lettings & Management Ltd
(Trading as Harrisons Estate Agents)
Last Updated: February 2026
1. Who We Are
Harrisons Lettings & Management Ltd (“Harrisons”, “we”, “us”, “our”) is a property sales, lettings and management agency operating in the United Kingdom.
We are the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact Details:
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Telephone: 01204 659670
Address: 1–3 Newbrook Road, Over Hulton, Bolton, Lancashire, BL5 1EL
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
Identity & Contact Data
- Full name
- Residential address
- Email address
- Telephone number
- Date of birth
Property & Transaction Data
- Property ownership details
- Tenancy information
- Viewing history
- Offer and negotiation records
- Sale and purchase records
Financial Data
- Bank details (for rent payments, deposits and refunds)
- Proof of funds
- Income and employment information (for referencing)
Compliance & Verification Data
- Photo identification (passport or driving licence)
- Proof of address
- Anti-Money Laundering verification data
- Right to Rent documentation
Technical Data
- IP address
- Device and browser information
- Website interaction data
3. How We Collect Your Data
We collect personal data:
- When you instruct us to sell, let or manage property
- When you register as a buyer, tenant or landlord
- When you contact us via our website, email or telephone
- During referencing and compliance checks
- From property portals and third parties
- Via cookies and analytics tools on our website
4. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR:
Performance of a Contract
To market, sell, let or manage property and fulfil our contractual obligations.
Legal Obligation
To comply with Anti-Money Laundering Regulations, Right to Rent checks, deposit protection requirements and accounting laws.
Legitimate Interests
To operate and improve our business, prevent fraud, maintain accurate records and promote our services to relevant inpiduals.
Consent
For certain marketing communications and non-essential cookies. Consent may be withdrawn at any time.
5. How We Use Your Information
We use personal data to:
- Market and advertise properties
- Arrange and conduct viewings
- Negotiate offers and manage transactions
- Carry out tenant referencing
- Conduct Anti-Money Laundering and identity checks
- Protect tenancy deposits
- Collect and transfer rental payments
- Manage maintenance issues
- Communicate throughout sales and tenancy processes
- Send marketing communications where lawful
- Improve our services and website
We do not sell personal data.
6. Data Sharing & Third-Party Processors
We may share personal data with trusted third parties where necessary to provide our services, including:
CRM & Marketing Systems
- Expert Agent
- Lifecycle (Iceberg Digital)
Compliance & Referencing Providers
- Credas (AML and identity verification)
- Move Butler (sales progression and transaction support)
Communication & Email
- Microsoft Outlook (Microsoft 365)
Other Third Parties
- Deposit protection schemes
- Solicitors and conveyancers
- Maintenance contractors
- Property portals (e.g., Rightmove, Zoopla)
- HMRC and regulatory authorities where required
All third-party processors are required to handle data securely and in compliance with UK GDPR.
7. International Transfers
Where our service providers process data outside the United Kingdom, appropriate safeguards are implemented, including adequacy decisions or Standard Contractual Clauses.
8. Data Retention
We retain personal data only for as long as necessary:
- Transaction records: up to 6 years after completion
- AML records: 5 years (as legally required)
- Tenancy records: 6 years after tenancy ends
- Marketing data: until consent is withdrawn or objection is received
- Website analytics data: typically up to 26 months
Data may be retained longer where legally required or where necessary to resolve disputes.
9. Data Security
We implement appropriate technical and organisational measures, including:
- Secure CRM systems
- Restricted staff access
- Encrypted communications where available
- Password-protected systems
- Secure document storage
While we take reasonable steps to protect personal data, no system can guarantee absolute security.
10. Your Rights
Under UK GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure (in certain circumstances)
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent where processing is based on consent
Requests may be made by contacting This email address is being protected from spambots. You need JavaScript enabled to view it..
You also have the right to complain to the Information Commissioner’s Office (ICO).
11. Cookies
Our website uses cookies to:
- Enable site functionality
- Analyse website performance
- Support marketing activity
You may manage cookie preferences via your browser settings and our website’s cookie consent mechanism.
A separate Cookie Policy provides further detail.
12. Updates to This Policy
We may update this Privacy Policy periodically. The most recent version will always be published on our website with the revision date displayed.
