Introduction
Acadata is committed to protecting your privacy and this notice sets out how we handle and or process your personal data. In this Privacy Notice the terms, ‘Acadata’, ‘we’, ‘us’ and ‘our’ are references to Acadata (a trading brand name of e.surv Ltd, company number 02264161, having a registered office
of Unit 1, Orion Park, Orion Way, Kettering, Northamptonshire, NN15 6PP, United Kingdom).
We are committed to keeping your information secure and managing it in accordance with our legal responsibilities under applicable data protection laws.
This Privacy Notice sets out the basis on which any personal data we collect from you through our website (www.acadata.co.uk) (the “Site”), or that you provide to us via other methods, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will treat it, including:
- Website (referred to as the “site”)
- Services
- Why do we process your data?
- What lawful basis do we have to process your personal data?
- Use of personal data
- What Information is being collected?
- What information is collected if you are a job applicant?
- What do we do with the Information we receive?
- Data Retention
- Disclosure of Information
- Links to third party sites
- Data privacy and security
- Data Protection Information
- Your Rights
- Contact
- What if my personal data is compromised?
- Complaints
Website
Our website serves two purposes; one to surface data from monthly house price indices and to provide a contact point for any questions you may have. By accessing, browsing, or otherwise using the site you are reminded to read and consider this Privacy Notice’ contents. If you do not agree with any part of this Privacy Notice, you should not use the site or use our services unless you are using the site or our services as a prospective employee of e.surv.
We reserve the right to change the contents of the site, including this Privacy Notice at any time, by posting such changes on the site. It is your responsibility to familiarise yourself with the Privacy Notice regularly to ensure that you are aware of any changes. Your continued use of the site following the posting of any such changes will imply your acceptance of the revised Privacy Notice.
When accessing and browsing our website (https://www.acadata.co.uk) for our services we will only collect and process the following personal information about you, if you enter these details in the contact form on the site:
- Name
We will use the information that we collect about you for the following purposes:
- Marketing / Promotional
- Support
- Administration Information
- Targeted Advertising
If we want to use your information for any other purposes, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.
We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:
- Ad Service
- Marketing Agencies
- Analytics
- Data Collection and Process
We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner.
Services
Acadata is a brand owned by e.surv Chartered Surveyors. e.surv is a leading provider of residential property risk and surveying services, committed to delivering accurate and professional guidance on time, every time.
Trading since 1989, e.surv now employs over 550 RICS (Royal Institution of Chartered Surveyors) registered valuers, supported by a network of consultant surveyors. We provide property risk expertise, RICS compliant survey reports, energy performance certificates (EPCs) and residential property valuations for major UK mortgage lenders and private customers.
In June 2013, e.surv acquired Scottish surveying business, Walker Fraser Steele, which still operates under this brand across Scotland.
e.surv is part of the LSL Property Services group of companies, which includes an Estate Agency franchise, as well as the mortgage broker network, PRIMIS. It is one of the largest distributors and managers of valuation instructions in the UK and is appointed as Panel Manager for more than twenty mortgage lenders and other entities with interests in residential property.
We work on behalf of lenders, intermediaries, social housing entities, estate agents and provide a number of private survey products direct to the home-buying public (including Mortgage Valuations, RICS compliant Surveys, Building Surveys. EPCs and Remote Valuations). A Remote Valuation is an inspection that is conducted using information accessible via online platforms and does not require a surveyor to physically visit the property.
The software used to provide e.surv’s services is a third-party software owned by CoreLogic UK. All personal data processed via this platform will be stored on CoreLogic UK and e.surv servers. All personal data within this platform will be ‘ring fenced’ to the UK and will not be processed outside of the UK for any purpose.
Use of personal data processed by Acadata
e.surv will only process the personal data it receives and collects if it has a lawful basis for processing it (see below, a requirement of UK GDPR and The Data Protection Act 2018).
Types of information processed.
Personal data means any information relating to a living individual who can be identified, directly or indirectly from the information such as name, date of birth, address, NI number, email address, fingerprint, or an opinion about an individual.
The UK GDPR and the Data Protection Act 2018 categorise personal data into two categories, personal data, and special category data.
The Data Protection Act 2018 classifies special category data as the processing of personal data revealing:
- racial or ethnic origin
- political opinions
- religious or philosophical beliefs
- trade union membership
- genetic or biometric data that can identify an individual
- sexual life or sexual orientation
- this can also include criminal offences and convictions, vulnerability, and child data.
e.surv may collect personal data from you in connection with your use of the site or when you call us to enquire about our services, this includes, but is not limited to:
- your name and contact information, including your email address and telephone number
Methods of Collection
Data, including the personal data we process about you will be provided by you. Data is collected via:
- making an enquiry
- making a complaint
- subscribing to Acadata house price reports and analysis
What do we do with the personal data we receive?
Your information will be used by us in connection with the following purposes:
Providing you with House Price Index Services (see “Services”): to allow us to provide you with the products and services which you have asked us to provide:
- to better understand your requirements and provide you with services specific to your needs
Responding to your queries:
to help answer any questions which you have asked; and to provide you with a quote for our services
Improving our Site to analyse cookie and website usage data to keep improving the Site and search functionality; and
to allow us to customise the content which is presented to you based on your likely interests.
Legal and Regulatory Obligations:
to comply with applicable laws where we are obliged to retain and/or disclose certain information
to investigate or address claims or complaints relating to your use of our services; and
for internal and external auditing purposes.
What lawful basis do we use to process your personal data?
The lawful basis under Article 6 GDPR for processing your personal data can differ for each processing activity carried out. e.surv has identified the following lawful basis for processing:
- Consent: Where your permission and consent has been provided to allow the processing to be undertaken.
- Performance of a Contract: when you will or have entered into a contract with Acadata or we need to process your personal data as part of a contract.
- Legal Obligation: where e.surv are bound by laws and regulations to process your data. This includes but is not limited to:
- Employment law
- RICS
- Data Protection
- Vital Interest: when the processing is necessary to protect the vital interests of another natural person.
- Public Interest: when the processing is for the performance of a task carried out in the interest of the public.
- Legitimate Interest:
- Risk assessment
- Training, communication, and awareness
- Cloud storage
- Web analytics
- Acquisitions and monitoring
The lawful basis under Article 9 GDPR and Schedule 1 of the Data Protection Act 2018 for processing your special category data can also differ for each processing activity carried out. Acadata has identified the following lawful basis for processing:
- Article 9 GDPR explicit Consent: Your permission has been granted and documented directly to us
processing for the purposes of employment and social security
data has been made public by the data subject: for example, Electoral Roll
establishing, exercising, or defending a legal claim. - Schedule 1 DPA 2018 suspicion of money laundering
insurance; advising, underwriting, arranging, or administering an insurance contract. - pensions.
- legal claims in connection with criminal conviction data, advice, defending, establishing.
Data retention
The personal data that you provide will be retained by us in accordance with applicable laws and our internal Retention Policy. However, we will take reasonable steps to destroy or de-identify personal data we hold if it is no longer needed for the purposes set out above.
We will only hold your personal data on our systems for up to 15 years in accordance with our regulators guidelines (The Royal Institution of Chartered Surveyors) and for the relevant purposes for which it was collected. A copy of our Retention Policy is available on request.
Where you have used our website for our services, we will retain your personal information for 90 days to 2 years after user accounts remain idle or for as long as we need it to fulfil the purposes for which it was collected.
Disclosure of information
The information you provide to us will be held on our computers in the United Kingdom and will be accessed by or given to our staff to fulfil their duties in the provision of the service you have requested from us.
We may also disclose your information to the third parties listed below for the following purposes:
entities who may or do acquire any rights in us for the purpose of a business sale or reorganisation our advisers (staff), for the purpose of assisting us to better manage, support or develop our business and comply with our legal and regulatory obligations law enforcement bodies and/or other regulatory entities in order to comply with any legal obligation or court order
third parties we work with as part of providing our services, including (but not limited to) IT hardware and software providers and payment processing providers (based in the UK). We expect such third parties to attest to process any data disclosed to them in accordance with applicable law, including with respect to data confidentiality and security and have appropriate services agreements in place with each. Payments for services are processed securely and in compliance with the Payment Card Industry, Data Security Standard (PCI DSS); and
Links to third party sites
The site may contain links to other sites. Acadata is not responsible for and accepts no liability for the content of other sites which are not under its strict control, in particular, we are not responsible for the protection and privacy of any information which you provide whilst visiting other websites and such sites are not governed by our Privacy Notice.
Data protection information
You can obtain further information about data protection laws by visiting the Information Commissioner’s website at https://www.gov.uk/data-protection/the-data-protection-act.
Your rights
Under relevant data protection legislation, individuals have rights over the processing, retention, and deletion of their Personal Data. Not all rights may be available to each data subject as the rights are dependent on the applicability of the purpose for processing and lawful basis of processing.
You can exercise your rights verbally or in writing. Upon request and where applicable, Acadata will comply with your request within 30 days of receipt. Where we have received your data from a lender (and you are their mortgage applicant), we will refer the request to the lender as the data controller and comply with any of their requests in the first instance.
If your request is complex, we may require more time and can extend our response time by another 30 days (two months). If an extension is required, we will contact you within the original 30-day response date to explain why we are extending and provide you with a new response date.
Upon the event of having to verify your identification in order to proceed with the request, we will contact you as soon as possible. Once we are satisfied with your identity, we will continue to process your request. Please note that only when we are satisfied with your identity will the 30-day response time begin.
If we refuse your request, we will provide you with a full explanation within 30 days of receipt along with justification as to why. We will also provide you with your right to complain to the supervisory authority and information of how to enforce your rights via judicial remedy.
The Right to be Informed; You have the right to know what personal data we are processing, how we process this data, why we process and to whom we share your data with. This right is satisfied upon receipt or notification of our privacy notice.
The Right of Access; You have the right to request copies of the personal data we hold and control relating to you and details of how we use that information.
The Right to Rectification; You have the right, if you think any of the personal data, we hold about you is inaccurate to request that it is corrected.
The Right to Erasure; You have the right to for your personal data to be deleted by us, however this only applies under certain circumstances.
The Right to Restrict Processing; You have the right to restrict what information we process about you depending on certain circumstances.
The Right to Object; You have the right to object/stop us processing your personal data where the lawful basis for this processing is legitimate interest, consent, or public interest.
The Right to Data Portability; You have the right to request an electronic copy of your personal data be sent to you, or to another organisation should you wish. This is however limited to the information being processed under the lawful basis of consent or the information is being processed under automated means.
The Right to Automated Decision Making and Profiling; you have the right to request that human intervention take place in such processing to challenge a decision being made under automated decision making and profiling.
Contact
If you have any questions or comments about our Privacy Notice or if you wish to exercise your right to access, correction or erasure or your right to ask us to stop processing your information mentioned you can contact us either by telephone, email or in writing whichever you prefer.
- 01536 534000
- E-mail: Data.protection@esurv.co.uk
- Post: Acadata Data Protection Officer, Orion House, Orion Way Kettering, Northants, NN16 6PP
Data Protection Officer:
Acadata has appointed its own data protection representative, Shane Ross. Shane is a member of the
Risk & Governance team at e.surv Ltd, reporting directly to the Risk & Governance director at e.surv.
For all Acadata related data protection matters, Shane can be contacted by writing to:
The Risk & Governance Department e.surv Chartered Surveyors Orion House Orion Way Kettering Northants, NN16 6PP
What if my personal data is compromised
Acadata has an obligation to inform you within 72 hours of becoming aware of a data breach that is likely to result in a high risk to your data and rights and freedom, Acadata will also report such breach to the Information Commissioners Office (ICO) or its lender clients having investigated fully the suspected breach.
If the breach is likely to result in a high risk to the rights and freedoms of individuals, Acadata will notify you if your personal data is NOT encrypted or NOT unintelligible.
Complaints
If you have any concerns or complaints as to how we have handled your personal data you may lodge a complaint with the UK’s data protection regulator, the ICO, who can be contacted through their website at https://ico.org.uk/global/contact-us/ or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.