Skip to content
Nightingale Partners

Privacy policy

Last updated:

This notice explains how Nightingale Partners Limited, Nightingale Capital Partners and Nightingale Property Asset Management collect, use and protect personal data in connection with our commercial property services and this website. It covers clients, prospective clients, business contacts and website visitors. We handle personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended.

Data controllers

Nightingale Partners Limited, Nightingale Capital Partners and Nightingale Property Asset Management act as data controllers for the personal data they handle. The controller responsible for your information will depend on which entity you deal with. Their ICO registration numbers are ZA346039, ZA370566 and ZA557751 respectively. You can contact us to clarify which entity is responsible for your data.

Our contact address is 3 Mandeville Place, London W1U 3AW. For privacy questions or to exercise your rights, email [email protected].

Personal data we collect

Depending on your interaction with us, we may collect:

  • Identity and contact information, such as your name, business, postal address, email and telephone number.
  • Enquiry and correspondence information, including property requirements and the messages you send us.
  • Financial and transaction information, such as bank details, payments and information needed to provide our services.
  • Identification and verification information where required for legal or regulatory checks.
  • Technical and usage information, such as IP address, browser and device information, pages visited and referral information.
  • Your cookie preferences and the date you recorded or changed them.

Please do not include sensitive personal information in a general website enquiry unless it is necessary.

Where information comes from

  • Directly from you through enquiries, correspondence, meetings, contracts and business transactions.
  • From your organisation, representatives or other parties involved in a property transaction.
  • From public sources and industry information providers, where relevant to our services or required checks.
  • From website technologies and analytics providers, including Google, as explained below and in our cookie policy.
  • From advertising networks, search engines and social media platforms when we run advertising campaigns. These services may provide information about visits, interactions with advertisements and enquiries attributed to our campaigns, subject to your consent where required.

How we use data and our lawful bases

We use personal data only where we have an appropriate lawful basis:

  • Enquiries and services: to respond to requests, advise on property and carry out instructions. Our basis is taking steps at your request before entering a contract, or performing a contract with you. Where you represent a business or are not a party to the contract, we rely on our legitimate interest in communicating with business contacts and providing our services.
  • Legal and regulatory obligations: to carry out required identity or anti-money-laundering checks and maintain records where applicable. Our basis is compliance with a legal obligation.
  • Business administration and security: to manage relationships, protect our systems, prevent misuse and establish or defend legal claims. Our basis is our legitimate interests in operating and protecting our business, balanced against your rights and interests.
  • Relevant business communications: to provide property suggestions or business updates where permitted. We rely on legitimate interests where appropriate, or consent where required by the Privacy and Electronic Communications Regulations (PECR). You can object or opt out at any time.
  • Optional analytics cookies: to understand website use, based on your consent. The separate, limited measurement sent before cookie consent is explained below.
  • Advertising measurement and personalisation: when we run advertising campaigns, to measure their effectiveness and, where enabled, show relevant advertisements. We rely on your consent for optional advertising cookies, advertising tracking and personalisation where required. You can withdraw that consent at any time through Cookie settings.

Where information is required by law or necessary for a contract, we will explain this when requesting it. Without that information, we may be unable to provide the relevant service.

Website enquiries

When you use the enquiry form, the website sends your enquiry directly to us and keeps a copy of it so we can track and respond to enquiries. We receive your name, email address, optional telephone number and message, and use them to respond and handle your request. A confirmation email is sent to the address you provide.

Cookies, Google Analytics and advertising

We use Google Analytics 4 to understand how visitors reach and use the website. Analytics cookies are optional and are not set unless you allow them. Necessary local storage remembers your cookie choices. Our cookie policy lists the cookies and similar technologies, their purposes and durations, and provides controls to change your choices.

With Google's Advanced Consent Mode v2, the Google tag loads before you decide about cookies. When analytics consent is denied, it can send limited cookieless measurement signals to Google, such as page and browser information and your consent state, without storing analytics cookies. These requests involve processing technical information; cookieless does not necessarily mean anonymous. We rely on our legitimate interest in understanding and improving website use for this limited measurement, subject to your rights, including the right to object. Contact us using the privacy address below to raise an objection.

We may use advertising tracking through search engines, social media platforms and other advertising networks from time to time to measure the effectiveness of our campaigns and, where enabled and with your consent, show relevant advertisements. Providers may include Google, Meta or other platforms; mentioning them here does not mean we currently use their advertising services. Advertising services may process technical and usage information, advertising identifiers and interactions with advertisements or our website. Campaigns may be switched on or off, so these services are not necessarily active on every visit. Optional advertising cookies and consent-dependent tracking are only enabled with your consent, which you can change or withdraw through Cookie settings. Our cookie policy will list any advertising cookies introduced before they are used.

The Google tag is configured with advertising data redaction and URL passthrough. Under Advanced Consent Mode, where advertising measurement is enabled, Google may receive limited cookieless measurement signals when advertising consent is denied; these can still involve processing technical information and any such use remains subject to applicable data protection and consent requirements. This Google-specific behaviour does not mean other advertising providers' tracking loads before consent. Google's own processing is described in its privacy policy and its information about data from sites that use Google services. Other providers explain their own processing in their privacy notices, such as Meta's privacy policy.

Third-party maps and links

The Google map on our contact page loads only when you choose to view it. Google then receives technical information about that visit and may use cookies under its own policies. Other external links take you to websites whose privacy practices we do not control; please read their notices.

Who may receive your data

Where necessary for the purposes above, we may share relevant information with service providers supporting our website, IT, email and business administration; professional advisers; parties and representatives involved in your property instructions; and authorities where disclosure is legally required. We limit disclosures to what is needed and require providers acting on our behalf to protect data and use it only under our instructions. Google and any advertising providers we use receive the measurement or advertising information described above, subject to the applicable consent choices.

International transfers

Some providers, including Google, may process information outside the UK. Where we transfer personal data internationally, we must ensure that a permitted transfer mechanism applies, such as UK adequacy regulations or appropriate contractual safeguards with any required additional measures. You can contact us for information about the safeguards relevant to your data and how to obtain a copy.

How long we keep information

We keep personal data only for as long as needed for the purpose for which it was collected. We assess retention by considering the nature and sensitivity of the information, whether an enquiry or instruction remains active, contractual and legal record-keeping requirements, and applicable periods for legal claims. We then delete or anonymise information when it is no longer required. Contact us if you need the retention period applicable to a particular record. Cookie and local-storage durations are listed in our cookie policy.

Keeping information secure

We use appropriate organisational and technical measures to protect personal data, limit access to people who need it for their work, and require those handling it to maintain confidentiality. No internet or email transmission is completely secure. We handle personal data breaches in accordance with applicable reporting and notification requirements.

Your rights

Subject to the conditions and exemptions in data protection law, you can:

  • Request access to your personal data and a copy of it.
  • Ask us to correct inaccurate or incomplete information.
  • Request erasure or restriction of processing in appropriate circumstances.
  • Object to processing based on legitimate interests, including the limited website measurement described above.
  • Object to direct marketing at any time.
  • Request portability where processing is automated and based on consent or a contract.
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
  • Exercise applicable rights concerning decisions based solely on automated processing that have legal or similarly significant effects.

To make a request, email [email protected] or write to our address above. We may need to verify your identity. We normally respond within one month; where the law permits an extension or a pause, we will explain why. Requests are normally free of charge. You can withdraw analytics or advertising cookie consent through Cookie settings in the footer or our cookie policy.

You may complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint. We would welcome the opportunity to address your concerns first, but you do not have to contact us before approaching the ICO.

Changes to this policy

We review this notice when our practices or legal requirements change. The last-updated date above shows when it was revised. Switching campaigns on or off within the advertising uses described here does not itself require a change to this notice. If we introduce materially different uses of personal data, we will update this notice and obtain consent where required before that use begins.

Contact

Questions about this notice or our privacy practices should be sent to: [email protected].

See also our cookie policy and terms of website use. For general enquiries, email [email protected].