GDPR & your rights
Under UK GDPR and the Data Protection Act 2018, you have specific rights regarding your personal data. This page explains each right in plain English and tells you how to exercise it.
Last updated: May 2026
Disclaimer: This document is provided for informational purposes. We recommend seeking independent legal advice to ensure your compliance with applicable laws.
Your rights under UK GDPR
The UK General Data Protection Regulation (UK GDPR), retained in UK law after the end of the EU exit transition period, gives you a set of rights over your personal data. These rights apply to personal data that EstateHQ holds about you in your capacity as an account holder or user of our platform.
Some rights are absolute; others may be subject to conditions or exemptions. We will always respond to your request promptly and tell you clearly if a limitation applies and why.
Your individual rights explained
Right of access (Subject Access Request)
Art. 15 UK GDPRYou have the right to ask us whether we hold personal data about you, and if so, to receive a copy of that data along with information about how we use it, who we share it with, and how long we keep it.
How to exercise this right
Email us at hello@estatehq.co.uk with the subject "Subject Access Request". We will verify your identity and respond within 30 days. There is no charge for a first request.
Right to rectification
Art. 16 UK GDPRIf we hold personal data about you that is inaccurate or incomplete, you have the right to ask us to correct it. For example, if your name or email address is wrong in our records.
How to exercise this right
Most account data can be updated directly in your EstateHQ profile settings. For any other corrections, email hello@estatehq.co.uk and we will update our records promptly.
Right to erasure ("right to be forgotten")
Art. 17 UK GDPRYou can ask us to delete your personal data in certain circumstances — for example, if we no longer need it for the purpose it was collected, or if you withdraw consent (where consent is our legal basis). This right is not absolute: we may need to retain some data to comply with a legal obligation.
How to exercise this right
Email hello@estatehq.co.uk with the subject "Erasure Request". We will tell you within 30 days what data we can delete and, if we cannot delete all of it, explain why.
Right to restriction of processing
Art. 18 UK GDPRYou can ask us to pause processing your personal data in certain circumstances — for example, while you contest its accuracy, or while we are considering your objection. When processing is restricted, we will continue to store the data but will not use it until the issue is resolved.
How to exercise this right
Email hello@estatehq.co.uk with the subject "Restriction Request" and describe the circumstances. We will confirm receipt and advise you of the outcome within 30 days.
Right to data portability
Art. 20 UK GDPRWhere we process your personal data on the basis of your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service.
How to exercise this right
Email hello@estatehq.co.uk with the subject "Portability Request". We will provide a data export in a machine-readable format within 30 days. You can also download your data at any time from the reports section of your dashboard.
Right to object
Art. 21 UK GDPRWhere we process your personal data on the basis of our legitimate interests, you have the right to object to that processing. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if we need to process the data for the establishment, exercise, or defence of legal claims.
How to exercise this right
Email hello@estatehq.co.uk with the subject "Objection to Processing" and explain the processing you are objecting to. We will respond within 30 days.
Right not to be subject to automated decision-making
Art. 22 UK GDPRYou have the right not to be subject to a decision based solely on automated processing — including profiling — where that decision produces legal effects or similarly significantly affects you. EstateHQ does not make any automated decisions about you that have legal or similarly significant effects. All significant decisions involving your account are made by a human.
How to exercise this right
If you believe an automated decision has been made about you, please contact hello@estatehq.co.uk and we will investigate.
How to make a request
To exercise any of your rights, send an email to hello@estatehq.co.uk clearly stating:
- Which right you wish to exercise
- Your full name and the email address associated with your EstateHQ account
- Any additional details that help us identify the specific data or processing you are asking about
How we respond
- We will acknowledge your request within 5 working days
- We may ask you to verify your identity before we act on the request, to prevent unauthorised access to your data
- We will respond in full within 30 calendar days of receiving your request (or of receiving your identity verification, if we asked for it)
- If the request is complex or we receive a large number of requests, we may extend this by a further two months — we will let you know within the first 30 days if this is the case
- There is no charge for making a request, unless requests are clearly unfounded or excessive, in which case we may charge a reasonable fee
Right to complain to the ICO
If you are not satisfied with our response to your data protection request, or if you believe we are not handling your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's independent data protection supervisory authority.
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first. However, you are free to contact the ICO at any time.
Information Commissioner's Office (ICO)
- Websiteico.org.uk
- Telephone0303 123 1113
- Textphone01625 545 860
- PostInformation Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Data controller details
EstateHQ is the data controller for personal data processed in connection with your use of the platform. As data controller, we are responsible for deciding how and why your personal data is processed.
For full details of how we collect and use personal data, please read our Privacy Policy.
Exercise your rights
To make a data subject request or ask any questions about your rights, contact us at hello@estatehq.co.uk. We will respond within 30 days.
Contact us