Lengo Homes Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what we collect, why, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Lengo Homes Ltd is the data controller for information collected through this website and our associated services. Our registered address is . You can contact our data team at [email protected].
2. What We Collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity | Name, username, date of birth | You, directly |
| Contact | Email address, phone number, postal address | You, directly |
| Financial | Income, employment status, credit information | You (mortgage applications) |
| Documents | ID, payslips, bank statements | You (mortgage applications) |
| Property | Property address, listing details, images | You, directly |
| Technical | IP address, browser type, pages visited | Automatically (cookies) |
| Usage | Searches, saved listings, inquiry history | Automatically |
| Communications | Messages, inquiry records, support tickets | You, directly |
3. How We Use It
We use your personal data to:
- Create and manage your account and preferences
- Display and manage property listings
- Process and facilitate mortgage applications
- Connect you with agents, sellers, and landlords
- Send transactional emails (inquiry confirmations, status updates)
- Send marketing communications (where you have consented)
- Improve and secure the Platform through analytics
- Comply with our legal and regulatory obligations
4. Legal Basis for Processing
We process your data on the following legal grounds:
- Contract: Processing necessary to provide the services you've requested (account management, listings, mortgage applications)
- Legitimate interests: Platform security, fraud prevention, service improvement, and direct marketing to existing customers
- Consent: Marketing emails to new contacts; use of non-essential cookies
- Legal obligation: Compliance with financial regulations and law enforcement requests
6. How Long We Keep Your Data
Retention periods depend on the type of data and our legal obligations:
- Account data: Retained while your account is active, then 2 years after deletion
- Mortgage application data: 6 years (required for regulatory compliance)
- Inquiry and communication records: 3 years
- Technical logs: 90 days
- Marketing consent records: Until you withdraw consent
7. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted data transmission (TLS/HTTPS), hashed password storage (bcrypt), access controls, and regular security reviews. Mortgage documents are stored in a private directory, inaccessible from the public web.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals promptly.
8. Your Rights
Under UK GDPR, you have the right to:
Access
Request a copy of the personal data we hold about you
Rectification
Ask us to correct inaccurate or incomplete data
Erasure
Ask us to delete your data ("right to be forgotten"), subject to legal obligations
Restriction
Ask us to restrict processing while a dispute is resolved
Portability
Receive your data in a structured, machine-readable format
Objection
Object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, email [email protected] with "Data Rights Request" in the subject line. We will respond within 30 days.
10. Children
Our Platform is not intended for, and does not knowingly collect data from, anyone under the age of 18. If we become aware that a child has provided us with personal data, we will delete it promptly. If you believe a child has submitted data to us, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy periodically. Where changes are material, we will notify you by email or by a prominent notice on the Platform before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact & Complaints
For any privacy-related questions or to exercise your rights, contact us:
- Email: [email protected]
- Address:
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.