Privacy Policy

Introduction

Eviction Response Team Limited (“we”, “us”, or “our”) is committed to protecting and respecting your privacy and ensuring that personal data is handled in a safe, fair, and lawful manner.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when individuals:

• visit our website
• contact us or submit enquiries
• apply for employment or work opportunities
• engage with our enforcement, security, investigation, or related services
• interact with surveillance systems operated by us in connection with our services

Eviction Response Team Limited operates as a data controller in relation to personal data processed as part of our business operations, except where we act strictly on behalf of a client as a data processor.

We process personal data in accordance with:

• • the UK General Data Protection Regulation (UK GDPR
• the Data Protection Act 2018
• the Privacy and Electronic Communications Regulations (PECR)
• relevant ICO guidance
• the Surveillance Camera Code of Practice where surveillance technologies are used.

We are committed to ensuring that personal data is:

• processed lawfully, fairly, and transparently
• collected for specified, explicit, and legitimate purposes
• limited to what is necessary for those purposes
• accurate and kept up to date
• retained only for as long as necessary
• protected by appropriate technical and organisational security measures.

This Privacy Policy may be updated periodically to reflect changes in our services, legal obligations, or regulatory guidance. The latest version will always be available on our website.

Data Controller and Contact Information

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the organisation responsible for determining how and why personal data is processed is:

Eviction Response Team Limited
Unit 43 Sir Thomas Longley Road
Rochester
Kent
ME2 4DP
United Kingdom
Email: hub@countyuk.com

Eviction Response Team Limited acts as the data controller for personal data collected and processed in connection with our website, business operations, recruitment activities, and the delivery of enforcement, security, and related services.

In certain circumstances, we may process personal data on behalf of our clients (for example, when providing contracted enforcement or investigation services). In those cases, we may act as a data processor and the relevant client organisation will be the data controller responsible for determining the purposes and means of processing.

Data Protection Contact

If you have any questions about this Privacy Policy, the personal data we hold about you, or how your data is processed, you may contact our data protection team using the details above.

You may also contact us to:

• exercise your data protection rights
• request further information about how your personal data is used
• raise concerns about our data handling practices.

We aim to respond to all legitimate enquiries relating to personal data within one calendar month, in accordance with UK data protection legislation.

Categories of Personal Data We Collect

We may collect and process different types of personal data depending on how individuals interact with us, the services we provide, and the operational activities we undertake as part of our enforcement and security work.

The categories of personal data we may process include the following.

Identity and Contact Information
This may include:

• name
• job title or role
• postal address
• email address
• telephone number
• company or organisation details where relevant

This information is typically collected when individuals contact us, submit enquiries, enter into contractual arrangements, or engage with our services.

Professional and Employment Information
Where individuals apply for roles or opportunities with us, we may process:

• employment history
• qualifications and certifications
• references
• right-to-work verification information
• vetting information where permitted by law.

Communications and Enquiry Information
We may process information contained in communications with us, including:

• enquiries submitted through our website
• email correspondence
• telephone call records or notes
• service requests
• complaint or feedback submissions.

Technical and Website Usage Data
When individuals visit our website, we may automatically collect certain technical information including:

• IP address
• browser type and version
• device information
• pages visited and navigation paths
• date and time of website access
• referring website addresses.

This information helps us improve website functionality, security, and user experience.

Surveillance and Security Monitoring Data
As part of our enforcement, security, and safety services, we may operate surveillance systems including:

• CCTV systems
• vehicle-mounted cameras
• body-worn cameras used by authorised personnel
• access control systems.

These systems may capture:

• video footage
• still images
• vehicle registration numbers
• location information
• time and date of recorded activity.

Surveillance systems are used in accordance with applicable legislation and regulatory guidance, including the Surveillance Camera Code of Practice.

Clear signage is normally displayed in areas where surveillance monitoring takes place.

Incident and Operational Records
During the course of enforcement, security, or investigative activities, we may process information relating to incidents or operational events. This may include:

• incident reports
• witness statements
• photographic or video evidence
• vehicle registration information
• descriptions of individuals involved in incidents
• communications relating to enforcement or investigation activities.

Financial and Credit Information
Where required for contractual or risk-management purposes, we may process information obtained from credit reference agencies or identity verification services, including:

• identity verification data
• credit commitments
• payment history
• public record information.

Further details regarding credit reference checks are provided in the relevant section of this policy.

Criminal Offence and Allegation Data
In limited circumstances connected with enforcement activities, incident investigation, or cooperation with law enforcement agencies, we may process personal data relating to:

• alleged criminal activity
• incidents involving suspected offences
• reports made to law enforcement agencies.

Processing of such data is carried out in accordance with Article 10 UK GDPR and Schedule 1 of the Data Protection Act 2018 and is supported by an appropriate policy document where required by law.

Marketing and Preference Information
Where individuals have opted to receive communications from us, we may process:

• communication preferences
• marketing consent records
• engagement with communications.

Individuals can withdraw marketing consent at any time.

Sources of Personal Data

We collect personal data from a variety of sources depending on the nature of our services, operational activities, and interactions with individuals.

Personal data may be obtained from the following sources.

Information Provided Directly by Individuals
We may collect personal data directly when individuals:

• contact us through our website, email, telephone, or other communication channels
• submit enquiries or service requests
• apply for employment or work opportunities
• participate in surveys or provide feedback
• correspond with us regarding our services.

Our Clients and Contracting Organisations
Where we provide enforcement, security, investigation, or compliance services on behalf of a client, we may receive personal data from that client in order to carry out the contracted service.

This may include information necessary for:

• service delivery
• incident investigation
• compliance monitoring
• enforcement or security operations.

In these circumstances, the client organisation may act as the data controller, and we may process the data on their behalf as a data processor, depending on the contractual arrangement.

Employers, Referees, and Recruitment Sources
Where individuals apply for employment or work opportunities with us, we may obtain information from:

• referees provided by the applicant
• recruitment agencies or employment platforms
• previous employers (where references are sought and permitted by law).

Credit Reference Agencies and Identity Verification Providers
Where identity verification, fraud prevention, or affordability checks are required, we may obtain information from credit reference agencies or identity verification service providers.

These checks may provide information such as:

• identity verification data
• credit commitments
• payment history
• public record information.

Further information regarding credit checks is provided in the Credit Reference and Affordability Checks section of this policy.

Publicly Available Sources
We may collect information from publicly available sources where it is relevant to our business activities or necessary for legitimate purposes. This may include:

• professional networking platforms
• company websites
• public registers
• publicly available records.

Surveillance and Security Systems
Personal data may be collected through surveillance systems operated by us in connection with our enforcement, safety, and security services. These systems may include:

• CCTV systems
• vehicle-mounted cameras
• body-worn cameras
• access control systems.

Information collected through these systems is used only for legitimate operational purposes such as security monitoring, incident investigation, and crime prevention.

Third-Party Service Providers
We may receive personal data from third-party organisations that support our business operations, including:

• compliance service providers
• identity verification providers
• IT and system service providers
• professional advisers.

These organisations are required to process personal data in accordance with applicable data protection legislation and appropriate contractual safeguards.

How We Use Personal Data

We process personal data for a range of legitimate business, operational, and legal purposes connected with the delivery of our enforcement, security, investigation, and administrative services.
Personal data will only be processed where there is a lawful basis under UK GDPR and where the processing is necessary for clearly defined purposes.

The main purposes for which we process personal data include the following.

Providing Services and Responding to Enquiries
We use personal data to:

• respond to enquiries or requests for information
• provide services requested by clients or individuals
• manage contracts and service delivery
• communicate with clients, customers, or other stakeholders.

Operational Administration
We process personal data for internal administrative purposes including:

• maintaining business records
• managing client relationships
• operational planning and coordination
• service documentation and record keeping.

Enforcement, Security, and Safety Operations
Where relevant to our services, we may process personal data to support:

• security monitoring
• enforcement activities
• incident investigation
• protection of personnel, clients, and the public
• safeguarding and public safety measures.

This may include reviewing surveillance recordings, documenting incidents, and maintaining operational reports.

Crime Prevention and Detection
Personal data may be processed to support the prevention, investigation, and detection of crime, including:

• reviewing security incidents
• reporting relevant matters to law enforcement authorities
• cooperating with investigations conducted by police or regulatory bodies.

Fraud Prevention and Identity Verification
We may process personal data to:

• verify the identity of individuals
• prevent fraud or misuse of services
• conduct risk assessments
• carry out credit or affordability checks where appropriate.

Recruitment and Employment Management
Where individuals apply for employment or work opportunities with us, we may process personal data to:

• assess applications and suitability for roles
• carry out recruitment processes
• obtain references where appropriate
• manage employment or contractor relationships.

Legal and Regulatory Compliance
We may process personal data where necessary to comply with legal or regulatory obligations, including:

• responding to lawful requests from regulators or law enforcement agencies
• maintaining required business records
• complying with financial, employment, and regulatory requirements.

Service Improvement and Business Development
We may use personal data to:

• improve our services
• analyse operational performance
• enhance website functionality
• review customer feedback and satisfaction.

Where possible, this information may be used in aggregated or anonymised form.

Marketing Communications
Where permitted by law, we may send communications relating to our services or business activities.

Marketing communications will only be sent where:

• the individual has provided consent, or
• communication is permitted under applicable marketing regulations.

Individuals can withdraw marketing consent at any time.

Lawful Basis for Processing Personal Data

Under the UK General Data Protection Regulation (UK GDPR), organisations must have a lawful basis for processing personal data.
Depending on the nature of the activity and our relationship with the individual, Eviction Response Team Limited may rely on one or more of the following lawful bases.

Performance of a Contract
We may process personal data where it is necessary to perform a contract or to take steps at the request of an individual prior to entering into a contract.

This includes processing necessary to:

• provide services requested by clients or customers
• manage contractual relationships
• administer service agreements
• respond to service enquiries.

Legal Obligation
We may process personal data where it is necessary for compliance with a legal or regulatory obligation.

Examples may include:

• responding to lawful requests from regulators or law enforcement authorities
• complying with financial, employment, or regulatory reporting requirements
• maintaining records required under applicable legislation.

Legitimate Interests
We may process personal data where it is necessary for the legitimate interests of our business or those of a third party, provided that such interests do not override the rights and freedoms of individuals.

Our legitimate interests may include:

• operating and managing our business effectively
• protecting our systems and infrastructure from security threats
• preventing fraud and misuse of services
• conducting risk management and compliance activities
• investigating incidents or security concerns
• protecting the safety of staff, clients, and the public.

Where we rely on legitimate interests as a lawful basis, we carry out legitimate interest assessments to ensure that individuals’ rights and freedoms are appropriately considered.

Consent
In certain circumstances we may rely on an individual’s consent to process personal data.

This may include:

• sending certain types of marketing communications
• placing non-essential cookies on our website
• collecting optional information through forms or surveys.

Where consent is used as the lawful basis, individuals have the right to withdraw consent at any time.

Public Interest and Crime Prevention
Where relevant to our enforcement and security activities, personal data may be processed where it is necessary for:

• the prevention or detection of crime
• the protection of public safety
• cooperation with law enforcement authorities.

Such processing is carried out in accordance with the UK GDPR and the Data Protection Act 2018.

Criminal Offence Data
Where we process personal data relating to criminal offences or allegations, such processing is carried out in accordance with Article 10 UK GDPR and Schedule 1 of the Data Protection Act 2018.
Where required by law, this processing is supported by an Appropriate Policy Document describing how such data is handled and protected.

Credit Reference and Identify Verification Checks

In certain circumstances, we may carry out identity verification, credit reference, and affordability checks to support our business operations, manage risk, and prevent fraud.

These checks may be carried out where individuals or organisations apply for services, enter into contractual arrangements with us, or where verification is required for compliance or risk assessment purposes.

Credit Reference Agencies
We may obtain information from credit reference agencies (CRAs) in order to assess identity, creditworthiness, and financial reliability.

We currently obtain credit and identity verification information through:

Creditsafe Business Solutions Limited
Authorised and regulated by the Financial Conduct Authority (FCA)
FCA Firm Reference Number: 742313

Creditsafe uses its data partner:
TransUnion International UK Limited
Authorised and regulated by the Financial Conduct Authority (FCA)
FCA Firm Reference Number: 737740

Information Obtained from Credit Reference Agencies
Information obtained from credit reference agencies may include:

• identity verification data
• credit commitments and financial obligations
• payment history and credit behaviour
• public record information (such as insolvency records or court judgments)
• business credit information where relevant.

The information provided may be derived from multiple sources including financial institutions, public registers, and other data providers.

Purpose of Credit and Identity Checks
We may use information obtained from credit reference agencies for purposes including:

• verifying identity
• assessing creditworthiness
• evaluating financial reliability
• preventing fraud or misuse of services
• assessing business risk
• supporting contractual decision-making.

These checks help ensure that our services are provided responsibly and that financial and fraud risks are appropriately managed.

Type of Searches
Depending on the circumstances, the checks we conduct may involve:

• identity verification searches, which help confirm that personal details are accurate
• credit checks, which may assess financial history and credit commitments.

Where applicable, credit reference agencies may retain a record of the search.

Credit Reference Agency Data
Credit reference agencies may retain information about searches conducted and may share that information with other organisations in accordance with their own privacy policies.

Individuals can find further information about how credit reference agencies use and share personal data by reviewing the privacy notices of:

• Creditsafe Business Solutions Limited
• TransUnion International UK Limited

Individual Rights
Individuals have the right to:

• request access to personal data held about them
• request correction of inaccurate information
• obtain further details about how their information is used.

Requests relating to data held by credit reference agencies may need to be directed to the relevant agency.

CCTV, Surveillance and Monitoring Systems

As part of our enforcement, security, and safety operations, Eviction Response Team Limited may operate or utilise a range of surveillance and monitoring technologies. These systems are used to support the prevention and detection of crime, protect staff and the public, investigate incidents, and ensure the safe and effective delivery of our services.

Where surveillance systems are used, they are operated in accordance with:

• the UK General Data Protection Regulation (UK GDPR)
• the Data Protection Act 2018
• ICO guidance on the use of CCTV and surveillance systems
• the Surveillance Camera Code of Practice where applicable.

Types of Surveillance Systems Used
Depending on the nature of our services, we may use the following types of monitoring systems:

• Closed-Circuit Television (CCTV) systems
• Body-worn video cameras used by authorised personnel
• Vehicle-mounted cameras
• Access control or entry monitoring systems
• Security monitoring equipment used at client premises

These systems may capture information such as:

• video footage
• still images
• vehicle registration numbers
• date and time of recorded activity
• location information
• details of incidents or interactions.

Purpose of Surveillance
Surveillance systems are used strictly for legitimate operational purposes, including:

• crime prevention and detection
• maintaining public safety
• protecting staff, clients, and members of the public
• investigating incidents or complaints
• documenting enforcement activity
• protecting property and assets
• supporting legal or regulatory compliance.

Surveillance is not used in a manner that is excessive, intrusive, or inconsistent with its stated purposes.

Signage and Transparency
Where surveillance systems such as CCTV are in operation, appropriate signage will normally be displayed to inform individuals that monitoring is taking place.

Such signage typically identifies:

• that surveillance recording is in operation
• the organisation responsible for the system
• contact details for further information where appropriate.

Access to Surveillance Data
Access to surveillance recordings is restricted to authorised personnel who require access for legitimate operational purposes.

Appropriate safeguards are in place to ensure that surveillance data is:

• protected from unauthorised access
• stored securely
• accessed only where necessary.

Access may be granted for purposes including:

• reviewing incidents
• responding to complaints
• assisting investigations
• responding to lawful requests from authorities.

Disclosure of Surveillance Information
In certain circumstances, surveillance footage or related information may be disclosed to third parties where it is lawful and appropriate to do so.

This may include disclosure to:

• law enforcement agencies, such as police forces
• regulatory authorities
• courts or legal representatives
• insurance providers involved in incident investigations
• client organisations, where the monitoring relates to services provided on their behalf.

All disclosures are assessed to ensure they comply with applicable data protection legislation.

Retention of Surveillance Footage
Surveillance recordings are retained only for as long as necessary to fulfil the purposes for which they were collected.

In most cases, routine surveillance recordings are retained for a limited period (typically around 30 days) before being automatically deleted, unless:

• the footage is required for an investigation
• it forms part of an incident report
• it is required for legal proceedings or law enforcement purposes.

Where recordings are required for evidential purposes, they may be retained for longer in accordance with legal or operational requirements.

Surveillance Governance
We take steps to ensure that surveillance systems are used responsibly and proportionately. This may include:

• periodic review of surveillance practices
• restricting access to authorised personnel
• maintaining secure storage of recordings
• ensuring staff are trained in appropriate data handling procedures.

Where required, we may conduct Data Protection Impact Assessments (DPIAs) before implementing surveillance systems that may present a higher risk to individuals’ rights and freedoms.

Sharing Personal Data and Law Enforcement Cooperation

Eviction Response Team Limited does not sell or rent personal data to third parties. However, in the course of operating our enforcement, security, investigation, and business services, it may be necessary to share personal data with certain organisations where there is a lawful basis to do so.

All data sharing is carried out in accordance with the UK GDPR, the Data Protection Act 2018, and applicable regulatory guidance. Where third parties process personal data on our behalf, appropriate contractual safeguards are implemented to ensure that personal data is handled securely and lawfully.

Service Providers and Operational Partners
We may share personal data with third-party service providers who support our business operations. These organisations may include providers of:

• IT systems and hosting services
• cloud storage and data management platforms
• identity verification services
• compliance and regulatory support services
• payment processing services
• administrative or operational support services.

These providers are required to process personal data only in accordance with our instructions and must implement appropriate security measures to protect the data.

Clients and Contracting Organisations
Where we provide enforcement, security, or investigation services on behalf of clients, we may share relevant personal data with those clients where necessary for service delivery, reporting, or incident management.
Depending on the contractual arrangement, the client organisation may act as the data controller, and we may process personal data on their behalf as a data processor.

Professional Advisers
Personal data may be shared with professional advisers where necessary for legitimate business purposes. This may include:

• legal advisers
• auditors
• insurers
• regulatory compliance advisers.

Such disclosures are made only where necessary and subject to appropriate confidentiality obligations.

Law Enforcement and Regulatory Authorities
We may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where such disclosure is lawful and necessary.

This may occur for purposes including:

• prevention or detection of crime
• investigation of incidents or suspected unlawful activity
• safeguarding or protection of individuals
• responding to lawful requests or legal obligations
• compliance with regulatory requirements.

Where appropriate, disclosures may be made to organisations including:

• police forces and law enforcement agencies
• courts or tribunals
• regulatory authorities
• government bodies.

Requests for information are assessed to ensure that disclosure is lawful, proportionate, and necessary.

Legal Proceedings and Dispute Resolution
Personal data may also be disclosed where necessary for the establishment, exercise, or defence of legal claims.

This may include sharing information with:

• courts
• legal representatives
• insurers
• dispute resolution bodies.

Safeguards for Data Sharing
Where personal data is shared with third parties, we take steps to ensure that:

• sharing is limited to what is necessary for the intended purpose
• appropriate legal bases
• confidentiality and security safeguards are in place
• third parties comply with applicable data protection laws.

International Data Transfers

In some circumstances, personal data processed by Eviction Response Team Limited may be transferred to, stored in, or accessed from countries outside the United Kingdom.

Such transfers may occur where we use service providers, technology platforms, or operational partners that operate internationally.

Whenever personal data is transferred outside the UK, we ensure that appropriate safeguards are in place to protect the information and ensure that individuals’ rights continue to be protected in accordance with UK data protection law.

Transfers to Countries with Adequacy Decisions
Where personal data is transferred to countries that have been formally recognised by the UK Government as providing an adequate level of data protection, those transfers may take place without additional safeguards.
Adequacy decisions confirm that the destination country provides a level of protection for personal data that is broadly equivalent to that provided under UK data protection law.

Transfers Using Approved Safeguards
Where personal data is transferred to countries that do not benefit from a UK adequacy decision, we implement appropriate safeguards to ensure that personal data remains protected.

These safeguards may include:

• the UK International Data Transfer Agreement (IDTA)
• the UK Addendum to the EU Standard Contractual Clauses (SCCs)
• contractual agreements requiring organisations to protect personal data in accordance with UK data protection standards.

These safeguards are designed to ensure that personal data transferred outside the UK receives an equivalent level of protection.

Security and Risk Assessment
Before transferring personal data internationally, we may assess the risks associated with the transfer and ensure that appropriate technical and organisational measures are in place to protect the data.
Where necessary, additional safeguards may be implemented to address potential risks relating to international data access.

Further Information
Individuals may request further information about international data transfers or the safeguards we use by contacting us using the details provided in this Privacy Policy.

Data Security

Eviction Response Team Limited is committed to ensuring that personal data is protected against unauthorised access, loss, misuse, alteration, or disclosure.

We implement appropriate technical and organisational security measures designed to protect personal data in accordance with the requirements of the UK GDPR and the Data Protection Act 2018.

These measures are regularly reviewed to ensure that they remain appropriate for the nature, scope, and sensitivity of the data processed.

Technical Security Measures
We implement a range of technical safeguards to protect personal data, which may include:

• secure IT systems and network protections
• encryption or secure transmission of sensitive data where appropriate
• user authentication and password protection
• restricted system access based on authorised roles
• monitoring systems to detect unauthorised access or security threats
• secure backup and recovery procedures.

These measures help protect personal data against accidental loss, unauthorised access, or malicious activity.

Organisational Security Measures
We also implement organisational controls designed to ensure that personal data is handled responsibly and securely. These may include:

• restricting access to personal data to authorised personnel who require it for legitimate business purposes
• staff training on data protection and information security responsibilities
• confidentiality obligations for employees and contractors
• internal policies governing the handling and protection of personal data
• procedures for managing data protection incidents or breaches.

Surveillance and Operational Data Security
Where personal data is collected through surveillance systems or operational activities, additional safeguards may be applied to ensure that recordings and operational records are protected.

These safeguards may include:

• restricted access to surveillance recordings
• secure storage of evidence and incident documentation
• controlled access to operational systems used by authorised personnel.

Data Breach Management
We maintain procedures for identifying, investigating, and responding to potential personal data breaches.
Where a personal data breach occurs that is likely to result in a risk to individuals’ rights and freedoms, we will:

• notify the Information Commissioner’s Office (ICO) where required by law, and
• notify affected individuals where appropriate.

Security Review and Improvement
We regularly review our information security practices to ensure they remain effective and proportionate to the risks involved in our processing activities.

Security measures may be updated as part of ongoing risk management, technological developments, or regulatory requirements.

Data Retention

Eviction Response Team Limited retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, contractual, and operational requirements.

Retention periods are determined based on factors such as:

• the nature and sensitivity of the personal data
• the purpose for which the data was collected
• legal or regulatory obligations
• operational and evidential requirements
• applicable limitation periods for legal claims.

Where personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a secure manner.

Typical Retention Periods
Although retention periods may vary depending on the circumstances of a particular case, the following general retention periods are applied where appropriate.

Customer and Contractual Records
Records relating to contracts, service delivery, and business transactions may be retained for up to six years after the end of the contractual relationship in order to comply with legal and accounting requirements.

Enquiries and General Correspondence
Information relating to enquiries or general communications may be retained for up to 12 months, unless further retention is required for operational or legal reasons.

Recruitment and Employment Applications
Information relating to recruitment processes may be retained for up to 12 months following the completion of the recruitment process, unless a longer retention period is required by law or with the applicant’s consent.

Credit Reference and Identity Verification Data
Information obtained through credit reference agencies or identity verification providers is retained only for as long as necessary to complete the relevant assessment and meet regulatory or contractual requirements.

Surveillance and Operational Records
Where surveillance systems or operational activities generate recordings or reports, these records may be retained for defined periods.

CCTV and Surveillance Recordings
Routine surveillance recordings are typically retained for approximately 30 days, after which they are automatically deleted unless required for:

• an ongoing investigation
• incident reporting
• legal proceedings
• law enforcement requests.

Incident Reports and Operational Records
Records relating to incidents, investigations, enforcement activities, or security operations may be retained for longer periods where necessary for evidential, legal, or regulatory purposes.

Legal and Regulatory Retention
In some circumstances, personal data may be retained for longer periods where required by:

• legal obligations
• regulatory requirements
• law enforcement investigations
• ongoing legal proceedings or potential claims.

Secure Disposal
When personal data is no longer required, it will be securely disposed of using appropriate methods to prevent unauthorised access or recovery.

This may include secure deletion of electronic records and secure destruction of physical documents.

Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, individuals have a number of rights in relation to their personal data.

These rights allow individuals to understand how their personal data is used and, in certain circumstances, to request access to or control over that information.

The rights available to individuals include the following.

Right of Access
Individuals have the right to request confirmation as to whether we process personal data about them and to obtain a copy of that personal data.

This is commonly referred to as a Subject Access Request (SAR).

Where a request is made, we will provide:

• confirmation of whether personal data is being processed
• a copy of the personal data held
• supplementary information explaining how the data is used.

Right to Rectification
Individuals have the right to request that inaccurate or incomplete personal data is corrected.
If personal data we hold is incorrect or outdated, individuals may ask us to update or amend the information.

Right to Erasure
In certain circumstances, individuals have the right to request that personal data is deleted. This is sometimes referred to as the “right to be forgotten.”

This right applies where:

• the data is no longer necessary for the purpose it was collected
• consent has been withdrawn (where consent was relied upon)
• the individual successfully objects to processing
• the data has been processed unlawfully.

This right is not absolute and may not apply where we are required to retain data for legal or regulatory reasons.

Right to Restrict Processing
Individuals may request that we restrict how their personal data is processed in certain circumstances.
For example, this may apply where:

• the accuracy of the data is contested
• the processing is unlawful but the individual does not want the data erased
• the data is required for legal claims.

Right to Data Portability
Where processing is based on consent or a contract and carried out by automated means, individuals may request that their personal data be provided in a structured, commonly used, and machine-readable format.

They may also request that the data be transmitted to another organisation where technically feasible.

Right to Object
Individuals have the right to object to processing where it is based on legitimate interests.
Where an objection is raised, we will stop processing the personal data unless we can demonstrate compelling legitimate grounds for continuing the processing that override the individual’s interests, rights, and freedoms.

Individuals also have the right to object to personal data being used for direct marketing purposes.

Rights in Relation to Automated Decision Making
Individuals have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, except where permitted by law.

Further information regarding automated processing is provided in the relevant section of this policy.

Exercising Your Rights
Requests to exercise any of the rights described above can be made by contacting us using the contact details provided in this Privacy Policy.

We will respond to requests without undue delay and normally within one calendar month, in accordance with applicable data protection legislation.

In some cases, we may request additional information to verify the identity of the individual making the request before responding.

Complaints and the Information Commissioner’s Office (ICO)

Eviction Response Team Limited is committed to handling personal data responsibly and in accordance with applicable data protection laws.

If you have any concerns about how your personal data has been collected, used, or handled, we encourage you to contact us in the first instance so that we can investigate and address your concerns.

Contacting Us
You can contact us regarding any data protection concern using the following details:

Eviction Response Team Limited
Unit 43 Sir Thomas Longley Road
Rochester
Kent
ME2 4DP
United Kingdom
Email: hub@countyuk.com

We will investigate your concern and aim to respond as quickly as possible and normally within one calendar month.

Right to Lodge a Complaint with the ICO
If you are not satisfied with our response, or you believe that your personal data has been processed in a way that does not comply with data protection law, you have the right to lodge a complaint with the UK supervisory authority.

The UK supervisory authority responsible for data protection matters is the Information Commissioner’s Office (ICO).

You can contact the ICO using the following details:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Website: https://ico.org.uk
Telephone: 0303 123 1113

Authorised by

Marc Mooney

Dated: 16/06/2025