Privacy Policy

Privacy Policy & Terms of Use

Effective Date: 24 June 2025

1. Introduction

AchGoldEstates (“we”, “us”) provide remote housing management services in Nottingham via WhatsApp chat. This policy outlines how your personal data is collected, processed, and protected, and explains your rights under UK GDPR.

2. Data Controller & Contact

AchGoldEstates is the data controller. For data protection inquiries or to exercise your rights, contact info@achgoldestates.com.

3. Personal Data We Collect

Through WhatsApp conversations, we may collect:

• Phone number, WhatsApp profile info, name
  
  
• Information you voluntarily share about your circumstances or housing needs
  
  
• Media or documents you send via WhatsApp
  Only necessary data is collected, following GDPR’s data minimisation principle

4. Purpose & Legal Basis

We use your data to:

• Respond to your inquiries and assist with housing matters
  
  
• Manage communication and service delivery
  
  
• Improve our support quality (e.g., review anonymised chat trends)
  
  

Our lawful processing basis includes:

• Contractual necessity (we need your data to assist you)
  
  
• Legitimate interests (improving service delivery)

5.  Consent & Transparency

Contact us so we can provide:

• What data is collected
  
  
• Why we collect it
  
  
• How long we retain it
  
  
• How you can access, correct, or delete it
  
  

Your continued use of the chat constitutes consent, which you may withdraw at any time by contacting us via WhatsApp or info@achgoldestates.com

6. Data Minimisation & Purpose Limitation

We collect only what is strictly necessary for providing housing or student-related support and do not repurpose the data without a separate legal basis.

7. Third‑Party Processors & Security

We use WhatsApp Business API and associated service providers. Data protection agreements ensure they only process data for specified purposes and comply with UK GDPR.

We protect your data via:

• End-to-end message encryption
  
  
• Secure EU-based server storage
  
  
• Restricted, role-based access controls

8. Data Retention

• Chat logs: up to 6 months, unless required legally or operationally .
  
  
• Other personal data: retained only as long as needed for service provision or legal obligations.
  
  

After the retention period, data is securely deleted or anonymised.

9. Your Rights under UK GDPR

You are entitled to:

• Access your personal data
  
  
• Correct inaccuracies
  
  
• Delete your data (“right to be forgotten”)
  
  
• Restrict or object to processing
  
  
• Data portability
  
  

To exercise any of these rights, contact info@achgoldestates.com. We will respond within one month, as required by law

10. Withdrawing Consent

You may withdraw consent at any time by contacting us. Withdrawal stops future processing but does not affect lawfully processed past data.

11. Complaints

If you have concerns about our use of your data, you can complain to us via email. If unsatisfied, you may escalate to the Information Commissioner’s Office (ICO).

12. Policy Updates

This policy may be updated—e.g., to reflect new services or legal obligations—with changes reflected in the “Effective Date.” We encourage you to review it periodically.