Privacy Policy

Depending on how you interact with us, we may collect:

• Contact details: name, postal address, email address, telephone number.
• Enquiry and communication data: information you provide via contact forms, email, or telephone, including the content of your enquiry.
• Client and tenancy data: for landlords and tenants engaging our services — property details, tenancy terms, rent and payment records, bank account details for rent collection and disbursement, and correspondence relating to the management of your property.
• Client due diligence (CDD) data: for the purposes of our obligations under Jersey anti-money laundering and countering the financing of terrorism (AML/CFT) legislation, we may collect identity documents (e.g. passport, proof of address), and source of funds/wealth information.
• Technical data: IP address, browser type, device information, and pages visited on the Website, collected via cookies and similar technologies (see section 8).

We collect personal data directly from you (for example, when you complete a form on the Website, email us, or engage us as a client), from publicly available sources, and in some cases from third parties such as letting agents, referencing agencies, or your legal or financial advisers, where relevant to the services we provide.

We process personal data for the following purposes, relying on the lawful bases indicated:

• To respond to enquiries and provide information about our services — legitimate interests (responding to prospective clients) or steps taken at your request prior to entering a contract.
• To provide property management and lettings services to clients — performance of a contract (the Terms of Engagement).
• To carry out client due diligence, ongoing monitoring, and AML/CFT screening — compliance with a legal obligation, given our status as a registered person under Jersey's AML/CFT regime and our JFSC Class S registration.
• To manage client accounts, rent collection, and disbursement to landlords — performance of a contract and legal obligation (client money handling).
• To maintain business records and respond to regulatory requests — legal obligation and legitimate interests.
• To improve and secure the Website — legitimate interests.
• To send service-related communications — legitimate interests or, for marketing communications, your consent, which you may withdraw at any time.

We may share personal data with:

• Contractors and third-party service providers engaged in connection with the management of your property (e.g. maintenance contractors, insurers).
• Our professional advisers, including lawyers, accountants, and bookkeepers, where necessary for the provision of our services.
• The Jersey Financial Services Commission, the Jersey Financial Intelligence Unit, and other regulatory or law enforcement bodies, where we are legally required or permitted to do so.
• IT and software service providers who host or support our systems, subject to appropriate data processing terms.

We do not sell personal data to third parties.

Where personal data is transferred outside Jersey (for example, to a cloud service provider), we will ensure an appropriate safeguard is in place, such as transferring to a jurisdiction assessed as providing an adequate level of protection, or entering into an appropriate data transfer agreement, in accordance with the DP Law.

We retain personal data for as long as necessary to provide our services, to meet legal and regulatory obligations (including AML/CFT record-keeping requirements, which typically require retention for a minimum period after the end of a business relationship), and to establish, exercise, or defend legal claims. Retention periods vary depending on the category of data and the purpose for which it was collected.

Under the DP Law, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data, in certain circumstances;
• object to, or request that we restrict, certain processing;
• request data portability, where applicable; and
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details in section 11 below. We may need to verify your identity before responding. Some rights are subject to exemptions, for example where retention is required for regulatory or legal reasons.

The Website may use cookies and similar technologies to operate effectively and to understand how visitors use the site. Where non-essential cookies are used, we will seek your consent via a cookie banner, and you can manage your preferences through your browser settings at any time.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including access controls, encryption where appropriate, and restricting access to personal data to staff and contractors who need it.

The Website is not directed at children, and we do not knowingly collect personal data from children.

If you have questions about this Policy or wish to exercise your data protection rights, please contact Falcon Consultants Limited.

If you are not satisfied with our response, you have the right to lodge a complaint with the Jersey Office of the Information Commissioner (JOIC):

• Website: www.jerseyoic.org
• Address: 5th Floor, Capital House, 8 Church Street, St Helier, Jersey, JE2 3NN

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version, with its last updated date, will always be available on the Website.