Last updated: October 2026
Meta-grove is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This statement outlines our approach to protecting the personal data of our clients, website visitors, and business contacts.
We recognise that effective data protection is fundamental to maintaining trust and operating ethically within the property advisory sector.
Meta-grove acts as the data controller for personal information collected through our website and business operations.
Contact details for data protection enquiries:
Meta-grove
17 Grosvenor Street
Mayfair
London W1K 4QH
United Kingdom
Email: [email protected]
We process personal data only when we have a lawful basis under UK GDPR. The specific legal basis varies depending on the purpose:
When you engage our services, we process your personal data to fulfill our contractual obligations, including conducting property searches, arranging viewings, and managing tenancy applications.
We process certain data based on our legitimate business interests, such as maintaining client records, improving our services, and protecting against fraud. We carefully balance these interests against your rights and freedoms.
We process and retain specific data to comply with legal requirements, including tax obligations, anti-money laundering regulations, and property sector compliance standards.
For certain processing activities, particularly marketing communications, we obtain your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
Under UK GDPR, you have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data along with supplementary information about how it is used.
You may request correction of inaccurate personal data or completion of incomplete data we hold about you.
In certain circumstances, you may request deletion of your personal data. This right is not absolute and may be limited by legal obligations requiring us to retain certain information.
You may request that we limit how we use your personal data in specific situations, such as while we verify the accuracy of data you have contested.
Where processing is based on consent or contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, machine-readable format.
You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of the rights described above, please submit a written request to [email protected] or send correspondence to our postal address.
We will respond to your request within one month of receipt. In complex cases, we may extend this period by an additional two months and will inform you of any such extension.
We do not charge a fee for processing most requests. However, we reserve the right to charge a reasonable administrative fee for manifestly unfounded, excessive, or repetitive requests.
We may require proof of identity before fulfilling requests to ensure we release personal data only to the correct individual.
We implement appropriate technical and organisational security measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:
In the event of a personal data breach that poses a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach.
Where a breach is likely to result in high risk to affected individuals, we will communicate the breach directly to those individuals without undue delay, providing information about the nature of the breach and recommended protective measures.
We primarily process personal data within the United Kingdom. In limited circumstances, we may transfer data to service providers located outside the UK.
When such transfers occur, we ensure appropriate safeguards are in place, such as:
We integrate data protection considerations into our business processes and systems from the outset. This includes:
When we engage third-party service providers who process personal data on our behalf, we ensure they:
We maintain written contracts with all data processors that specify their data protection obligations.
We maintain comprehensive documentation demonstrating our compliance with UK GDPR, including:
If you are dissatisfied with how we have handled your personal data or responded to a rights request, you may lodge a complaint with the UK supervisory authority:
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: ico.org.uk
We encourage you to contact us first so we may attempt to resolve your concerns directly.
We review and update this GDPR compliance statement periodically to reflect changes in our practices, legal requirements, or regulatory guidance. The date at the top of this page indicates when the statement was last revised.