Privacy & Cookies

1. Who we are

We are York Conservation Trust Limited. We are both a company registered in England and Wales with registration number 395954 and a charity having Charity Commission registration number 505302.

Our registered address is 92 Micklegate, York YO1 6JX. We are a data controller for the purpose of the Data Protection Act 2018, the General Data Protection Regulation (EU 2016/679) (the “GDPR”) and all associated laws applicable in England and Wales, including the Privacy and Electronic Communications (EC Directive) Regulations 2013 (the “Data Protection Laws”).

Our principal purpose is the stewardship of buildings of historic significance and cultural interest in the City of York. We do this by acquiring the freehold of buildings, carrying out programmes of refurbishment and generating income to support ongoing repair and maintenance costs by letting the properties to either businesses or non-business tenants. We own some of York’s finest buildings, which are used extensively by the general public as customers of our tenants. We also administer a website available at www.yorkconservationtrust.org (the “Website”). Please see our Website Usage Policy here.

This Privacy Notice outlines the way in which in which information relating to you is gathered and used by York Conservation Trust (referred to in this policy as ‘we’, ‘our’ or ‘us’).

In this Privacy Notice we seek to abide by the letter and spirit of the guidelines laid out by the Information Commissioners Office (“ICO”) on their webpage on the ‘Right to be Informed’.

2. How we collect your data

We may collect your data in a number of ways and most often this will be directly from you. This will usually happen in the following ways:

By you requesting information about properties to let, either directly from us or indirectly from an authorised letting agent.
By you entering into a contract with us to lease a property for specified business or residential purposes.
By you offering to supply us with goods or services.
By you supplying us with goods or services as requested or instructed by us and receiving payments for those goods or services.
By your use of the Website, in particular if you fill in our ‘Contract Form’.
When making enquiries, or corresponding with us for any other reason.

We may sometimes collect information about you from third parties; for example, from referees, past employers, credit agencies or other professional persons.

Currently, the Website offers no transactional functions through which your data may be provided to us. The principal purpose of the Website is to provide you and other members of the public with information about our historic properties and information about us. For the foreseeable future, we have no intention to change this or incorporate a trading function into the Website.

We may occasionally modify our Privacy Notice and Cookies Policy and will post those changes on the Website so do please check it regularly. We will notify you of any changes made to our Privacy Notice either through a pop-up on our Website or via email.

3. What information do we collect?

Information automatically collected online
Our Website does not facilitate the establishment of a commercial relationship between you and us. Its purpose is to provide information to the general public and to allow members of the public to contact us should they wish to do so. However, we do use Cookies on our Website.

Our use of Cookies

Similar to the majority of websites today, our Website uses first-party and third-party cookies for a number of purposes. The first-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.

The third-party cookies used on our websites are used mainly for understanding how the website performs, how you interact with our website, keeping our services secure and providing you with a better and improved user experience and help speed up your future interactions with our website.

The cookies used on our website are grouped into the following categories:

1. Necessary
These cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.

2. Analytical
3. Functional
4. Performance

You can manage your cookies preferences here by enabling or disabling the cookie categories on the popup according to your preferences.

Should you decide to change your preferences later through your browsing session, you can click on the "Privacy Policy" tab on your screen. This will display the consent notice again enabling you to change your preferences or withdraw your consent entirely.

In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. To find out more out more on how to manage and delete cookies, visit wikipedia.org, www.allaboutcookies.org.

Information collected from prospective tenants
If you express an interest in leasing one of our properties, either directly from us or indirectly through an approved agent of ours, we, or the agent, will request personal data and use this in assessing the suitability, or otherwise, of our standard lease terms and conditions to meet your needs. This information may include any or all of the following; name, address, employer’s reference, current landlord’s reference, bank reference, passport details, driving licence details, bank statements, business plan, credit reference and any other relevant information that may be specific to the nature of the lease in which you have expressed an interest.

Information collected from tenants
If we establish a contractual relationship with you through a lease then you will appear in our business records as a tenant and we will maintain an up to date record of your tenancy including rents invoiced or otherwise due, rechargeable insurance premiums and any other legitimate fees or charges that may arise from time to time. We will simultaneously maintain an accurate record of all monies paid by or transferred to us from you.

Our record may also include details of any outstanding monies due from time to time and any appropriate correspondence with you regarding outstanding obligations.
The records will also include information on the property itself including common parts where applicable. Such records may cover condition, repairs, maintenance, damages, dilapidations, services, fire and safety information and any relevant points you may bring to our attention regarding any or all of these during the period of your tenancy.

Information collected from members of the general public
We welcome and wish to encourage public interest in our work and in our properties. If you contact us via telephone, in person, email or via the contact us section on the Website, then we will retain a record of your name, address, telephone number, email address and any other information relevant to the nature of your enquiry.

We may be able to satisfy your enquiry quickly and have no need to retain your personal data and will therefore securely dispose of your personal data at this stage. In other cases, we may retain the information in order to satisfy your enquiry more fully at a later date but will not retain this information for longer than 12 months. Your personal data will not be provided to third parties unless we are compelled by law.

Miscellaneous other contact
Sometimes, when you contact us by telephone, post or email, including for feedback, a record will be created of exchange of information. We will never ask you for any Special Categories of Personal Data (as defined in the Data Protection Laws).

4. For what purpose do we use your information?

We require the information to understand your needs or interest in our properties and to provide a pleasant and straightforward service to our customers and the general public. In particular we may use your information for the following:

Administrative Purposes

To administer and operate our charitable business and fulfil our obligations in this respect to our tenants, staff, partners, contractors, tradesmen, suppliers, volunteers and the public at large.
For processing and fulfilling the terms of any contract with you. For maintaining a record of correspondence with members of the public, with prospective tenant customers and otherwise for internal record-keeping and proper management of our charitable business.
For statistical, feedback or survey purposes. To better understand our customers’ and the public’s interest in us and to improve our performance in terms of our public benefit objectives.
To administer the Website and to notify you about any changes to our Website service and policies.
For security, the detection of fraud and to comply with any legal duties imposed upon us.

In the course of business

We owe contractual duties to our prospective and tenant customers, to provide direct landlord services and procure the provision of indirect agent or trade services during and beyond the course of their relationship with us.

Staff and volunteers

We owe contractual and legal duties to those we engage to deliver our services including payroll, pension, benefits, trade and credit references. In rare cases this may involve the processing of special category data or criminal convictions information under legal duties place on us as employers including as regards diversity, safeguarding, health and welfare.

Communication (general)

In accordance with your preferences (please see below for more details about preferences including your right to object to general communications) we will use your details to send you:

By post, occasional communications about our work and properties; and
From time to time, electronic news or an occasional promotional email should there be an event in, or related to our properties, that we judge may be of interest to you.
We consider that we have a legitimate interest to send this type of material to you and that (absent of any specific wishes to the contrary that you notify to us) you will reasonably expect us to do this. However, except where directly solicited, which will include where expected as part of our ongoing contractual–arrangement, messages will only be sent electronically where you have:

Consented, subject to any preferences you may have notified to us; or
Previously enquired about us and our service.
Where we have obtained your details in this way, we will continue to stay in touch in concerning what we do and the service we offer, unless and until you object.

General, legal and regulatory uses

We confirm that any personal data that you provide to us (or which, exceptionally, is available on public registers) and any data from which we can identify you will only be stored and processed in accordance with Data Protection Law.
While we may from time to time collect data from around the world, in our usual course of operations we will not transfer any personal data we collect to anywhere outside the EEA.

We will not generally either collect personal data about you from publicly available sources, nor disclose your personal data to third parties, except where there is a lawful and legitimate reason for doing so.

In the unlikely event that the business and activity of York Conservation Trust are transferred to or integrated with those of another charitable entity, your details may be disclosed to our advisors and to any transferee of the business and activity.

5. Lawful Basis for Processing

Each lawful basis for processing personal data is set out in Article 6 of the GDPR. We may process your personal data on more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal basis we are relying on to process your personal data where more than one basis has been set out below. At least one of these must apply whenever we process personal data:

Consent:  you have given clear consent for us to process your personal data for a specific purpose for example when you contact us and give us your permission to contact you back and keep you updated.
Contract:  the processing is necessary for a contract we have with you (for example, to process and deliver services to you and to manage our relationship with you), or because you have asked us to take specific steps before entering into a contract. This will include when we contract with you for the lease of one of our properties.
Legal obligation:  the processing is necessary for us to comply with a legal or regulatory obligation (not including contractual obligations). For example, if we are required to share information to a local authority, HMRC or the Police.
Legitimate interests: the processing is necessary for our legitimate interests (for example to administer and maintain our Website) or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Please visit the ICO’s website about the types of lawful basis that we will rely on to process your personal data.

6. Your Legal Rights

Individuals have various rights under Data Protection Law to access and understand personal data about them from data controllers, and in some cases ask for it to be erased or amended or no longer processed, but subject to certain exceptions and limitations. Please click on the links below to access the Information Commissioner’s

Office website to find out more about these rights:
Request access to your personal data
Request correction of your personal data
Request erasure of your personal data
Object to processing of your personal data
Request restriction of processing your personal data
Request transfer of your personal data
Right to withdraw consent

If you wish to exercise any of the rights set out above, please contact us. If you are unhappy with how we are processing your personal data, you have the right to complaint to the ICO. The Information Commissioner can be contacted at:

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
https://ico.org.uk/concerns/

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We try to respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

7. How long we keep personal data

We will retain personal data securely and only in line with how long it is necessary to keep for a legitimate and lawful reason and in accordance with our retention policies.
For example:

Consumer or contract law, or future claims, may require that details are kept for as long as we or you may have rights to exercise under a contract (which might be up to seven years after that contract is concluded).
Even where you have requested that we no longer keep in touch with you, we will need to keep a record of the fact in order to fulfil your wishes (called a ‘suppression record’).

We consider such retention periods to be necessary for, and consistent with, the purposes for which the personal data was collected. If you have any specific queries about how our retention policy is applied (or wish to request that personal data that you no longer believe to be relevant is considered for erasure), please contact us directly. However, we ask you to bear in mind that we may have lawful and necessary reasons to hold on to some personal data even following such request.

8. Disclosing Your Personal Data

We may have to share your personal data with the parties below in order to provide our services to you. We require all third parties to respect the security of your personal data and to treat it in accordance with the law, and when they are processing personal data on our behalf we do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions and in accordance with the law. Examples of our third parties include:

Third parties who you authorise to provide services to you
Sub-contractors for the performance of any contract we enter into, with them or you
Service providers acting as processors who provide IT and system administration services for example our online property management system and online accountancy software
Professional advisers including lawyers, bankers, auditors and insurers based who provide consultancy, banking, legal, insurance and accounting services

9. Contact

General enquiries regarding this Privacy Notice, or our Cookies Policy, should be directed to:

Privacy / Cookies Enquiries
York Conservation Trust
92 Micklegate
York
YO1 6JX

Email: privacydata@yorkconservationtrust.org

We do not have a Data Protection Officer within the meaning of Data Protection Law, but our staff dealing with requests will have relevant training and be able to respond to your enquiry.

If you believe that we have not complied with this Privacy Notice or acted otherwise than in accordance with Data Protection Law, you should first notify us directly. You can also make a referral to or lodge a complaint with the ICO although the ICO recommends that steps are taken to resolve the matter with the data controller directly before involving the regulator.