Prototype: layout and copy for the Yuvello consumer site. Not the live site. Dashed blocks are placeholders that must be replaced before launch.
What we do with the information you give us, why we are allowed to do it, how long we keep it and what you can ask us to do about it.
[DRAFT, NOT YET APPROVED] This page was drafted from what the website actually does. It has not been reviewed by a solicitor or a data protection specialist, and several facts in it are still placeholders. It must not be published in this state. See the list of outstanding items at the foot of the page.
We are an estate agency. If you ask us to value, sell or let a property, if you register a search, if you enquire about a property or if you sign up to our newsletter, we need some information about you in order to do what you have asked.
We do not sell your information. We share it only with the people who need it to deliver the service, and where the law requires it. You can ask us what we hold, ask us to correct it, and in most cases ask us to delete it.
Yuvello Ltd is the data controller for the information described in this policy, which means we decide what is collected and what happens to it. We are registered in England and Wales.
If you have a question about your information, or you want to make a request or a complaint about it, use the contact details below and say what your question is about.
Yuvello Ltd
17355432
17 Hanover Square, Mayfair, London W1S 1BN
[PRIVACY CONTACT EMAIL TBC]
020 7377 4217
[ICO REGISTRATION TBC]
[DPO POSITION TBC]
Yuvello agents are self-employed. They run their own businesses under the Yuvello brand, and the agent who deals with you keeps records about your property and your enquiry in order to do their job.
[CONTROLLER POSITION TBC] The relationship between Yuvello Ltd and its agents has to be settled before this page is published, because it determines who is answerable to you for your information and who you can bring a request or a complaint to.
Each entry below is a thing we actually ask you for on this website or that we generate while dealing with you.
Your name, email address, phone number, the property address and postcode, what you are valuing for, and anything else you choose to tell us.
Why we need it
To arrange the valuation, carry it out and give you a figure, and to answer your questions afterwards.
Lawful basis
Steps taken at your request before entering a contract. Where you ask us to keep in touch afterwards, our legitimate interest in following up an enquiry we did not win.
How long we keep it
[RETENTION TBC]
Your name, email address, phone number, the areas you want, property type, bedrooms, budget, your must-haves, where you are up to in your own move, your mortgage position and your timescale.
Why we need it
So the agent covering your area can match you to properties and call you about them.
Lawful basis
Your consent, which you give by ticking the box on the form and can withdraw at any time.
How long we keep it
[RETENTION TBC]
Your name, email address, phone number, postcode, what the enquiry is about and your message.
Why we need it
To answer you, and to pass the enquiry to the right agent or department.
Lawful basis
Our legitimate interest in responding to people who contact us.
How long we keep it
[RETENTION TBC]
Your email address, and a record of when and how you signed up.
Why we need it
To send you new listings and local market notes.
Lawful basis
Your consent. Every email has an unsubscribe link and it works.
How long we keep it
Until you unsubscribe, plus a suppression record so we do not email you again by mistake.
Identity documents and proof of address, proof of funds or mortgage position, your solicitor's details, references and, for tenants, right to rent documents.
Why we need it
Because the law requires us to check who we are dealing with before and during a property transaction.
Lawful basis
Legal obligation, and performance of our contract with you.
How long we keep it
Five years from completion of the transaction or the end of our relationship with you, under regulation 40 of the Money Laundering Regulations 2017, then deleted unless there is a separate legal reason to keep it.
Technical information such as your device type, browser, approximate location from your IP address, and the pages you visit.
Why we need it
To keep the site working, keep it secure, and understand which parts of it are useful.
Lawful basis
Our legitimate interest in running a secure and functioning website. Where a cookie is not strictly necessary, the basis is your consent or, for some analytics, your right to opt out.
How long we keep it
[ANALYTICS RETENTION TBC]
Most of it comes from you, when you fill in a form on this site, call us, email us or speak to an agent.
Some of it comes from elsewhere. We may receive your details from a property portal when you enquire through it, from a third party that verifies identity or funds, from the Land Registry and other public records, and from a referral if somebody puts us in touch with you.
[SOURCES TBC] The exact list depends on which portals, referencing providers, and identity checking services Yuvello ends up using, and each one has to be named here before launch.
We share your information only where it is needed, and we do not sell it.
[PROCESSOR LIST TBC] Every supplier that handles personal data on our behalf must be named or described here, and must be under a written contract that meets Article 28 of the UK GDPR before any data reaches them.
We will send you marketing by email where you have asked us to, or where you have used our services before and have not told us to stop.
Stopping is always easy. Click unsubscribe in any email, reply and ask, or use the contact details at the top of this page. It takes effect on all marketing, not just the message you replied to, and it does not affect the emails we have to send you about a transaction you are part of.
[REFERRAL AND THIRD PARTY MARKETING TBC] If Yuvello intends to pass details to conveyancers, brokers or other partners for their own marketing, that needs separate, specific consent and must be described here.
[TRANSFERS TBC] Most cloud services store or process data outside the UK. Once the platforms are chosen, this section must say whether that happens, which countries are involved, and what safeguard is relied on, normally UK adequacy regulations or the International Data Transfer Agreement or Addendum.
We take reasonable technical and organisational measures to protect your information, including access controls, encryption in transit and keeping records in systems rather than in personal inboxes and spreadsheets.
[SECURITY MEASURES TBC] This paragraph should describe what is actually in place, not what is aspirational. It also needs a breach procedure behind it: a reportable breach has to reach the ICO within 72 hours of Yuvello becoming aware of it, which is not achievable without a named person and a documented process.
Cookies are small files a website stores on your device. Some are necessary for the site to work. Others measure how the site is used, or support advertising.
[COOKIE LIST AND BANNER TBC] This prototype sets no cookies at all. The live site will, and before launch it needs a cookie policy listing each one with its purpose and lifetime, and a banner that genuinely allows refusal. Note the change made by the Data (Use and Access) Act 2025, in force since 5 February 2026: some statistical and low risk cookies can now be set on an opt-out basis rather than requiring prior consent, but advertising and tracking cookies still require consent, and penalties under PECR now reach 17.5 million pounds or 4 per cent of global turnover.
You have the following rights over your personal information. To use any of them, contact us using the details at the top of this page. We will not charge you, and we will respond within one month. If your request is complicated we can extend that by two months, and we will tell you if we do.
If we need more detail to find what you are asking for, we can ask you to clarify, and the clock pauses while we wait for your answer.
If you are unhappy with how we have handled your information, tell us first. Use the contact details at the top of this page and say what has gone wrong. We will acknowledge your complaint within 30 days and take appropriate steps to look into it.
If you are still unhappy, you can complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113. Complaining to us first does not take away your right to go to them.
We will update this page when what we do with information changes. The date below is when it was last revised. If a change is significant we will tell you directly rather than rely on you noticing it here.
Draft, not published
20 September 2026
[APPROVAL TBC]
This block is for the Yuvello team and will be removed before launch.
Compare listings
Compare