Privacy Policy

Karar Homes is a residential estate agency and property services company registered in England and Wales. We help clients buy, sell, and let residential properties, and we may also connect clients with specialist third-party finance and mortgage brokers where relevant to their needs. Karar Homes Website: kararhomes.co.uk Email: sales@kararhomes.co.uk Registered in England and Wales For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Karar Homes is the Data Controller in respect of personal data collected through our website, advertising campaigns, and enquiry forms.

2.1 Data You Provide Directly

• Full name
• Email address
• Phone number (including WhatsApp number)
• Property requirements and preferences
• Financial information relevant to your enquiry (e.g. approximate budget, loan amount
• sought)
• Any other information you provide when completing an enquiry form or contacting us

2.2 Data Collected Automatically

• IP address and browser type
• Pages visited on our website and time spent
• Device type and operating system
• Referring website or advertisement that directed you to us
• Cookies and similar tracking technologies (see Section 10)

2.3 Data Collected from Third Parties

• If you interact with our advertisements on Facebook or Instagram, Meta Platforms Ireland Ltd may share with us the information you enter into our lead generation forms, including name, email address, and phone number, in accordance with Meta's own privacy policy.
• We may receive information about you from our referral partners where you have consented to your data being shared.

3.1 To Respond to Your Enquiry

When you submit an enquiry form or contact us directly, we use your data to respond to your request, assess your requirements, and  provide relevant information about our services. The lawful basis for this processing is contract performance (Article 6(1)(b) UK GDPR) or our legitimate interests (Article 6(1)(f) UK GDPR).

3.2 To Refer You to Third-Party Finance Partners

Where you enquire about property finance, mortgages, bridging loans, or development finance, and you have given your consent, we may refer your details to a third-party finance broker for the purpose of progressing your enquiry. Where we make such a referral, we act as an introducer only and do not provide financial or mortgage advice ourselves. We may receive a referral fee from our finance partners for successful introductions. Details of the specific partner involved in your enquiry will be provided to you at the point you submit your enquiry. The lawful basis for this processing is your consent (Article 6(1)(a) UK GDPR), and you may withdraw consent at any time by contacting sales@kararhomes.co.uk.

3.3 Marketing Communications

With your consent, we may send you information about our services, property listings, and relevant market updates by email, SMS, or WhatsApp. You may unsubscribe at any time using the unsubscribe link in any email or by contacting sales@kararhomes.co.uk. The lawful basis for this processing is your consent (Article 6(1)(a) UK GDPR).

3.4 Legal and Compliance Obligations

We may process your data where necessary to comply with our legal obligations under UK law, including anti-money laundering regulations applicable to estate agencies under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. The lawful basis is legal obligation (Article 6(1)(c) UK GDPR).

3.5 Improving Our Services

We may use anonymised and aggregated data to analyse and improve the performance of our advertising campaigns, website, and services. This processing uses data that cannot identify you personally. The lawful basis is our legitimate interests (Article 6(1)(f) UK GDPR).

Purpose                                                                                                                                              Lawful Basis

Responding to property enquiries                                                                  Legitimate interests / Contract performance

Referring finance enquiries to third-party brokers Consent                    Consent

Sending marketing communications                                                            Consent

Anti-money laundering checks                                                                       Legal obligation

Improving our services (anonymised data)                                                Legitimate interests

We do not sell your personal data to third parties. We may share your data with the following categories of recipients:

5.1 Third-Party Finance Brokers

Where you have enquired about property finance and consented to data sharing, we may pass your name, email address, phone number, and enquiry details to a third-party finance broker we work with, for the purpose of processing your enquiry. The specific partner involved will be identified to you at the point of data collection. Any such partner acts as an independent data controller in respect of data they receive from us, and we recommend you review their own privacy policy before proceeding.

5.2 IT and Technology Service Providers

We use third-party technology platforms to operate our business, including website hosting providers, CRM systems, email marketing platforms, and Meta Platforms Ireland Ltd for advertising purposes. These providers process data on our behalf as data processors under

appropriate data processing agreements.

5.3 Legal and Regulatory Authorities

We may disclose your data to HMRC, the National Crime Agency, law enforcement, or other regulatory authorities where we are legally required to do so, including under our anti-money laundering obligations as an estate agency.

5.4 Professional Advisers

We may share data with our solicitors, accountants, or insurers where necessary for the conduct of our business.

Some of our technology service providers (including Meta Platforms Ireland Ltd) may transfer your personal data outside the United Kingdom. Where data is transferred to countries not deemed adequate by the UK Information Commissioner's Office (ICO), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved under UK GDPR.

Where you have consented to your data being shared with a finance referral partner, and where that partner or their lending partners are based outside the UK, the same transfer safeguards apply.

• Property enquiry data (no transaction): 2 years from date of enquiry
• Property enquiry data (transaction completed): 7 years from completion (legal obligation)
• Finance referral data: 2 years from the date of referral, or as required by our partner's own retention obligations
• Anti-money laundering records: 5 years from the end of the business relationship (legal obligation under the MLR 2017)
• Marketing consent records: Until you withdraw consent, plus 2 years thereafter
• Website analytics data: 26 months (anonymised after 14 months)

• Right of Access: You have the right to request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one calendar month.
• Right to Rectification: You have the right to ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Right to be Forgotten): You have the right to ask us to delete your personal data where there is no compelling reason for its continued processing. This right is not absolute and may be limited by our legal obligations (e.g. anti-money laundering records).
• Right to Restrict Processing: You have the right to ask us to restrict the processing of your data in certain circumstances, for example while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where we process your data on the basis of consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact us at sales@kararhomes.co.uk. We will respond within one calendar month. You will not be charged a fee for exercising your rights unless your request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113 Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to resolve your concern directly before you contact the ICO. Please contact us at sales@kararhomes.co.uk in the first instance.

Our website uses cookies and similar tracking technologies to improve your browsing experience and to support our advertising campaigns on Meta (Facebook and Instagram).

10.1 Types of Cookies We Use

• Essential cookies: Required for the website to function correctly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our website (e.g. Google Analytics). Data is anonymised where possible.
• Advertising cookies: Used by Meta Platforms (Facebook Pixel) to measure the performance of our advertising campaigns and to show relevant ads to users. Meta may use this data in accordance with their own data policy.

10.2 Managing Cookies

You can manage your cookie preferences through your browser settings or through the cookie consent banner on our website. Disabling certain cookies may affect the functionality of our website. You can also opt out of Meta's advertising cookies through your Facebook ad

preferences at facebook.com/adpreferences.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Secure website hosting with SSL/TLS encryption
• Access controls limiting data access to authorised personnel only
• Regular review of our data handling practices
• Contractual obligations on third-party processors to maintain appropriate security standards

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms,

we will notify the ICO within 72 hours and, where required, notify you directly.