Skip to content
Red Cardinal Property Investment

Legal

Privacy Policy

How we collect, use and protect your personal data.

Book a ConsultationView Investments

Last updated: April 2026

Who we are

Red Cardinal Property Investment (“we”, “us”) is a UK company registered with Companies House (No. 14716108) and registered with the Information Commissioner's Office as a data controller. Our registered office is 33 Cavendish Square, London, W1G 0PW.

For all privacy matters contact our Data Protection Lead at info@redcardinal.co.uk or write to the address above.

What we collect

We collect the following personal data:

  • Contact details you submit via our forms (name, email, phone, message)
  • Investment preferences you tell us (budget, city, investor type, yield target)
  • Technical data, IP address, browser, device type, referring URL
  • Cookies (see Cookies section)
  • Transaction data if you instruct us on a property purchase (bank details, source-of-funds documentation, ID verification)

How we use it

We use your data for the following purposes:

  • To respond to enquiries, lawful basis: your consent / legitimate interest
  • To provide our consultancy and lettings services, lawful basis: contract
  • To send market research and property alerts (if you've subscribed), lawful basis: consent
  • To comply with legal obligations (AML/KYC, tax, regulatory reporting), lawful basis: legal obligation
  • To improve our service and website, lawful basis: legitimate interest

Who we share it with

  • HubSpot (CRM, US with standard contractual clauses)
  • Supabase (database hosting, EU-based)
  • Resend (transactional email, US with standard contractual clauses)
  • Solicitors, mortgage brokers and developers introduced to you with your consent
  • HMRC, Companies House, The Property Ombudsman and ICO when legally required

We do not sell your data to third parties.

How long we keep it

  • Enquiry data: 3 years from last contact
  • Client transactional records: 6 years from end of relationship (HMRC requirement)
  • AML records: 5 years from end of business relationship
  • Marketing subscribers: until you unsubscribe

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion (right to erasure) subject to our legal obligations
  • Restrict or object to processing
  • Data portability, receive your data in machine-readable form
  • Withdraw consent at any time
  • Complain to the Information Commissioner's Office

To exercise any of these rights email info@redcardinal.co.uk. We'll respond within 30 days.

Cookies

We use the following cookies:

  • Essential, session management, cookie consent record, admin authentication
  • Analytics (optional), Google Analytics 4 for anonymised usage statistics
  • Marketing (optional), Meta Pixel for conversion tracking

You can reject non-essential cookies via the consent banner or at any time by clearing your browser cookies.

Changes to this policy

We review this policy annually. Material changes will be emailed to subscribers and posted on this page.

CallWhatsAppBook Call