Privacy & GDPR Statement

Blue Book Agency
Last updated: 20 July 2026

1. Introduction

Blue Book Agency (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy sets out how we collect, use, store and protect personal data in the course of our business as a residential property agency specialising in high-value property for sale, and explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are registered with the Information Commissioner’s Office (ICO). Our ICO registration number is ZB521303.

Please read this policy carefully. By engaging our services or using our website at www.bluebookagency.com, you acknowledge that you have read and understood this policy.

2. Who We Are

Blue Book Agency is the data controller in respect of the personal data we collect and process. This means we determine the purposes and means by which your personal data is used.

Contact details:
Blue Book Agency
12a Perrymead Street, London SW6 3SP
Email: [email protected]
Telephone: 020 3598 4646
Data Protection Contact: Lindsay Cuthill

If you have any questions about how we handle your personal data, or wish to exercise any of your rights, please contact us using the details above.

3. What Personal Data We Collect

Depending on your relationship with us, we may collect and process some or all of the following categories of personal data:

• Identity and contact information — name, title, postal address, email address, telephone numbers, and any other contact details you provide to us.
• Property information — details of properties you own, are seeking to purchase, or have an interest in, including address, asking or offer price, and sale progression details.
• Financial position — information about your ability to proceed with a property transaction, for example whether you are a cash buyer, have an Agreement in Principle, or are in the process of selling an existing property. We do not handle, process, or hold financial payment information such as bank account or card details.
• Communication records — records of correspondence and communications between us, whether by email, letter, telephone or otherwise.
• Preferences and requirements — your property search criteria, lifestyle preferences, and any other information you share with us to help us identify suitable properties or buyers on your behalf.
• Professional information — in some circumstances, publicly available professional information (such as business role or employer) where this is relevant to understanding your circumstances.
• Website usage data — technical information collected automatically when you visit our website, including IP address, browser type, pages visited and time spent on the site. See Section 10 (Cookies) for further detail.

Given the nature of our clientele, we may also process source-of-funds and source-of-wealth information and identity documents where required for anti-money laundering purposes (see Sections 5 and 6).

We do not knowingly collect personal data from or about children under the age of 18.

4. How We Collect Your Personal Data

We collect personal data in the following ways:

• Directly from you — when you instruct us to sell a property, register as a buyer, make an enquiry, complete a form on our website, correspond with us, or attend a viewing.
• From third parties — including other estate agents, solicitors, buying agents, or introducers acting on your behalf, and publicly available sources such as the Land Registry or Companies House.
• Automatically — through our website via cookies and similar technologies.

5. Lawful Basis for Processing

We are required by law to have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract — where you have instructed us to act on your behalf, whether as a seller or buyer, we process your personal data as necessary to fulfil our obligations under that agreement and to progress the transaction.
• Legitimate interests — we process certain personal data where it is in our legitimate interests to do so and those interests are not overridden by your rights. This includes maintaining our buyer and seller database, sending relevant property information to registered applicants, and conducting due diligence in the ordinary course of our business.
• Legal obligation — in some circumstances we are required to process your personal data to comply with legal obligations, including Anti-Money Laundering (AML) regulations. Although we do not handle money, as regulated estate agents we are required under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 to conduct identity verification and retain records accordingly.
• Consent — where we rely on your consent, for example to send you general marketing communications, we will make this clear at the point of collection. You may withdraw your consent at any time by contacting us at [email protected].

6. How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide property agency services, including marketing properties for sale and identifying suitable properties for buyers
• To communicate with you about properties, viewings, offers and transactions
• To match your property requirements against our available and off-market instructions
• To introduce buyers to sellers, and vice versa, in connection with a potential transaction
• To comply with our legal and regulatory obligations, including identity verification under AML regulations
• To maintain our client and applicant database and provide you with relevant property updates
• To send marketing communications where you have consented or where we have a legitimate interest in doing so
• To respond to enquiries submitted via our website or other channels
• To improve our website and services

7. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Other parties to a transaction — for example, a buyer’s solicitor or buying agent, where this is necessary to progress a sale
• Professional advisers — including solicitors, surveyors, mortgage brokers and financial advisers involved in a transaction
• Marketing and creative suppliers — such as photographers, designers and printers engaged to produce marketing collateral for a property instruction, who are bound by confidentiality obligations
• Property portals and media — where a property is listed publicly, personal data relating to the property (but not typically to you personally) may be shared with portals such as Rightmove and Primelocation, and with publications such as Country Life
• IT and software providers — including our CRM, email platform and website hosting providers, who process data on our behalf under data processing agreements
• Regulatory and legal authorities — where we are required to do so by law, court order, or regulatory obligation

All third parties with whom we share personal data are required to handle it securely and in accordance with applicable data protection law.

8. International Transfers

We do not routinely transfer your personal data outside the UK. Where any transfer does occur, for example through the use of cloud-based software with servers located abroad, or where we are dealing with an overseas buyer, seller or referral partner, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as reliance on adequacy decisions or Standard Contractual Clauses.

9. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations.

At the end of the relevant retention period, personal data is securely deleted or anonymised.

10. Cookies

Our website uses cookies — small text files placed on your device — to improve your browsing experience and to understand how visitors use the site.

We use the following types of cookies:

• Strictly necessary cookies — essential for the website to function and cannot be switched off
• Analytics cookies — help us understand how visitors interact with the site (e.g. Google Analytics). These are only placed with your consent
• Marketing cookies — used to track visitors across websites for advertising purposes. These are only placed with your consent

You can manage your cookie preferences via our cookie banner when you first visit the site, or by adjusting your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website.

11. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you (a “Subject Access Request”)
• Right to rectification — you may ask us to correct any inaccurate or incomplete personal data
• Right to erasure — in certain circumstances, you may ask us to delete your personal data. This right is not absolute and may be overridden by our legal obligations
• Right to restrict processing — you may ask us to suspend processing of your personal data in certain circumstances, for example while the accuracy of data is contested
• Right to data portability — where processing is based on consent or contract and carried out by automated means, you may ask us to provide your data in a structured, machine-readable format
• Right to object — you have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing for direct marketing immediately upon such a request
• Right to withdraw consent — where we rely on consent as our lawful basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal
• Rights related to automated decision-making — we do not make decisions about you using solely automated processing or profiling

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. There is no charge for making a request, though we may charge a reasonable fee or decline to respond if requests are manifestly unfounded or excessive.

12. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. These include password-protected systems, encrypted email where appropriate, restricted access to personal data on a need-to-know basis, and staff awareness of data protection obligations.

Given the profile of many of our clients, we take particular care to ensure that personal and transactional information is handled discreetly and disclosed only to those directly involved in a transaction.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, inform you directly without undue delay.

13. Complaints

If you are unhappy with how we have handled your personal data, we encourage you to contact us in the first instance so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection matters:

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

14. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

Blue Book Agency is registered in England and Wales. Company number: 14628075. VAT number: 433357404. Registered address: 12a Perrymead Street, London SW6 3SP.