Introduction
e.surv is committed to protecting your privacy and this notice sets out how we handle and/or process your personal data. In this Privacy Notice the terms, ‘e.surv’, ‘we’, ‘us’ and ‘our’ are references to e.surv Ltd (trading as e.surv Chartered Surveyors), company number 2264161, having a registered office
address of Orion House, Orion Way, Kettering NN15 6PP. e.surv is part of the LSL Property Services plc group of companies of which the ultimate parent company is LSL Property Services plc.
e.surv acts as both a data controller and a data processor depending on how we receive your personal data (e.g. if your data is provided to us directly by you, this makes us a data controller or, if your data was provided to us via a lender, this makes us the data processor and the lender the data controller).
We are committed to keeping your information secure and managing it in accordance with our legal responsibilities under applicable data protection laws. We are registered with the UK Information Commissioner’s Office (ICO) as a data controller under registration number Z7734013.
This Privacy Notice sets out the basis on which any personal data we collect from you through our website (www.esurv.co.uk) (the “Site”), or that you provide to us via other methods, will be processed by us. Please read the following carefully to understand our practices regarding your personal data
and how we will treat it, including:
By accessing, browsing, or otherwise using the site you are reminded to read and consider this Privacy Notice’ contents. If you do not agree with any part of this Privacy Notice, you should not use the site or use our services unless you are using the site or our services as a prospective employee.
We reserve the right to change the contents of the site, including this Privacy Notice at any time, by posting such changes on the Site. It is your responsibility to familiarise yourself with the Privacy Notice regularly to ensure that you are aware of any changes. Your continued use of the Site following the posting of any such changes will imply your acceptance of the revised Privacy Notice.
When accessing and using our website (https://www.esurv.co.uk) for our services we will collect and process the following personal information about you:
We will use the information that we collect about you for the following purposes:
If we want to use your information for any other purposes, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) of for which grant consent unless we are required to do otherwise by law.
We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:
We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner.
e.surv Chartered Surveyors (e.surv) is a leading provider of residential property risk and surveying services, committed to delivering accurate and professional guidance on time, every time.
Trading since 1989, e.surv now employs over 550 RICS (Royal Institution of Chartered Surveyors) registered valuers, supported by a network of consultant surveyors. We provide property risk expertise, RICS-compliant survey reports, energy performance certificates (EPCs) and residential property valuations for major UK mortgage lenders and private customers.
In June 2013, e.surv acquired Scottish surveying business, Walker Fraser Steele, which still operates under this brand across Scotland.
e.surv is part of the LSL Property Services group of companies, which includes an Estate Agency franchise, as well as the mortgage broker network, PRIMIS. It is one of the largest distributors and managers of valuation instructions in the UK and is appointed as Panel Manager for more than twenty mortgage lenders and other entities with interests in residential property.
We work on behalf of lenders, intermediaries, social housing entities, estate agents and provide a number of private survey products direct to the home-buying public (including Mortgage Valuations, RICS compliant Surveys, Building Surveys. EPCs and Remote Valuations). A Remote Valuation is an
inspection that is conducted using information accessible via online platforms and does not require a surveyor to physically visit the property.
The software used to provide e.surv’s services is a third-party software owned by CoreLogic UK. All personal data processed via this platform will be stored on CoreLogic UK and e.surv servers. All personal data within this platform will be ‘ring-fenced’ to the UK and will not be processed outside of
the UK for any purpose.
Our business receives instructions from major Banks, Building Societies, and financial institutions (lenders) to inspect and value properties for residential mortgage lending purposes. Where this is the case, we do not have a direct relationship with the end consumer (i.e., the Bank, Building Society, or
financial institution’s customer – the mortgage applicant)
Our business however also receives instructions to value and or survey properties for residential purposes from members of the general public. Where this is the case, the member of public is our direct customer. Within the scope of the data protection legislation, e.surv is a “Data Processor” where it receives instructions from a lender client to value and or survey properties. This is because the customer relationship is directly between a lender and its customer, not e.surv. In this regard, the lender is defining the purpose for which and way its customer’s personal data are or are to be processed and
e.surv processes the data in accordance with the lender’s instructions.
e.surv is a “Data Controller” as defined in data protection legislation where it has a direct relationship with a member of the public. We receive instructions to value and survey properties from the general public and therefore it is e.surv who is defining the purpose for which and way the personal data is or is to be processed.
With regard to its employees, e.surv is a “Data Controller” as it is defining the purpose and manner of the processing of the data being given to it by its employees.
To support our processing activities, we use recognised and established UK suppliers, a list of these suppliers and what we use them for is available on request. The personal data supplied in the course of our duty as a Chartered Surveying Firm is not used by e.surv or any of our suppliers for marketing
purposes* or consumer profiling or selection.
*Where e.surv has received permission from a member of the general public; or a lender’s customer has given their permission to their lender, e.surv may make contact with the customer to offer other suitable survey or valuation products which will benefit the customer in relation to property energy
efficiency.
e.surv will only process the personal data it receives and collects if it has a lawful basis for processing it (see below, a requirement of UK GDPR and The Data Protection Act 2018).
Personal data means any information relating to a living individual who can be identified, directly or indirectly from the information such as name, date of birth, address, NI number, email address, fingerprint, or an opinion about an individual.
The UK GDPR and the Data Protection Act 2018 categorise personal data into two categories, personal data, and special category data. The Data Protection Act 2018 classifies special category data as the processing of personal data revealing:
e.surv may collect personal data from you in connection with your use of the site or when you call us to enquire about our services, this includes, but is not limited to:
We may also collect additional information from you if you decide to use our valuation or surveying products or services or if we contact you regarding your enquiry, including personal data such as:
Please note:
In some circumstances (e.g., where required by a lender client), we may also collect and/or process special category data, this includes, but is not limited to:
Data, including the personal data we process about you may be provided by a lender or directly provided by you or your appointed party/next of kin. Data is collected via:
We may also receive information about you from trusted sources such as:
government / Land / Police registers
This information may be provided via:
We may also collect personal data from you (and from others such as managers involved in the recruitment process and those supplying references and verification information) if you decide to apply for a job with us including
Your information will be used by us in connection with the following purposes:
Providing you with Valuation and Surveying Services (see “Services”): to allow us to provide you with the valuation and surveying products and services which you have asked us to provide:
Responding to your queries:
Legal and Regulatory Obligations:
Recruitment where you are a Job Applicant:
In this case, we will continue to use some of the information gathered during recruitment for the purpose of your employment and will transfer some of this to our employment systems and files
Where you are a job applicant we use your information either where necessary to comply with legal obligations (for example right to work checks or to carry out obligations under employment law in the case of medical information); to take steps to consider you as an applicant prior to being able to enter
into an employment contract with you; and where we consider it is necessary for the purpose of our legitimate interests listed above. We also use your information with your consent in relation to checks carried out in relation to unspent criminal convictions.
In the event that you were not satisfied with our recruitment decision and brought a legal challenge, we would use your information to defend the legal claim.
Other:
The lawful basis under Article 6 GDPR for processing your personal data can differ for each processing activity carried out. e.surv has identified the following lawful basis for processing:
The lawful basis under Article 9 GDPR and Schedule 1 of the Data Protection Act 2018 for processing your special category data can also differ for each processing activity carried out. e.surv has identified the following lawful basis for processing:
Article 9 GDPR
Schedule 1 DPA 2018
The personal data that you provide will be retained by us in accordance with applicable laws and our internal Retention Policy. However, we will take reasonable steps to destroy or de-identify personal data we hold if it is no longer needed for the purposes set out above. We will only hold your personal data on our systems for up to 15 years in accordance with our regulators guidelines (The Royal Institution of Chartered Surveyors) and for the relevant purposes for which it was collected. A copy of our Retention Policy is available on request.
Where you have used our website for our services, we will retain your personal information for 90 days to 2 years after user accounts remain idle or for as long as we need it to fulfil the purposes for which it was collected.
Where you are a job applicant, we will keep the information we receive about you throughout the recruitment process and for a period of six months after completion of the process. If you have not commenced employment with us, we will then remove your information (or de-identify it) where we have not received any query or challenge which is outstanding. We will retain it if needed to deal with any outstanding query or challenge to the process. Where you become our employee, we will keep your information where relevant to your employment and this will become part of your employment records.
The information you provide to us will be held on our computers in the United Kingdom and will be accessed by or given to our staff to fulfil their duties in the provision of the service you have requested from us.
We may also disclose your information to the third parties listed below for the following purposes:
We disclose information to the referees you have provided to obtain the relevant references.
These parties are located in the UK.
The site may contain links to other sites. e.surv is not responsible for and accepts no liability for the content of other sites which are not under its strict control, in particular, we are not responsible for the protection and privacy of any information which you provide whilst visiting other websites and such
sites are not governed by our Privacy Notice.
e.surv is certified to the globally recognised standard for Information Security, ISO 27001:2013 and is externally assessed for conformance to this standard annually by the British Standards Institute. Certification to this standard ensures that our business regularly assesses external and internal threats
to the safety of information and operates with the relevant technical and operational security controls to keep data safe.
Likewise, e.surv is also certified to ISO 9001:2015, the globally recognised standard for Quality Management, which ensures that adequate risk management practices are in place to identify and treat emerging risks and check that procedures are operating effectively. Continued assessment of
conformance to this standard is conducted by the British Standards Institute annually.
You can obtain further information about data protection laws by visiting the Information Commissioner’s website at https://www.gov.uk/data-protection/the-data-protection-act.
Under relevant data protection legislation, individuals have rights over the processing, retention, and deletion of their Personal Data. Not all rights may be available to each data subject as the rights are dependent on the applicability of the purpose for processing and lawful basis of processing.
You can exercise your rights verbally or in writing. Upon request and where applicable, e.surv will comply with your request within 30 days of receipt. Where we have received your data from a lender (and you are their mortgage applicant), we will refer the request to the lender as the data controller and
comply with any of their requests in the first instance.
If your request is complex, we may require more time and can extend our response time by another 30 days (two months). If an extension is required, we will contact you within the original 30-day response date to explain why we are extending and provide you with a new response date.
Upon the event of having to verify your identification in order to proceed with the request, we will contact you as soon as possible. Once we are satisfied with your identity, we will continue to process your
request. Please note that only when we are satisfied with your identity will the 30-day response time begin.
If we refuse your request, we will provide you with a full explanation within 30 days of receipt along with justification as to why. We will also provide you with your right to complain to the supervisory authority and information of how to enforce your rights via judicial remedy.
The Right to be Informed; You have the right to know what personal data we are processing, how we process this data, why we process and to whom we share your data with. This right is satisfied upon receipt or notification of our privacy notice.
The Right of Access; You have the right to request copies of the personal data we hold and control relating to you and details of how we use that information.
The Right to Rectification; You have the right, if you think any of the personal data, we hold about you is inaccurate to request that it is corrected.
The Right to Erasure; You have the right to for your personal data to be deleted by us, however this only applies under certain circumstances.
The Right to Restrict Processing; You have the right to restrict what information we process about you depending on certain circumstances.
The Right to Object; You have the right to object/stop us processing your personal data where the lawful basis for this processing is legitimate interest, consent, or public interest.
The Right to Data Portability; You have the right to request an electronic copy of your personal data be sent to you, or to another organisation should you wish. This is however limited to the information being processed under the lawful basis of consent or the information is being processed under automated means.
The Right to Automated Decision Making and Profiling; you have the right to request that human intervention take place in such processing to challenge a decision being made under automated decision making and profiling.
If you have any questions or comments about our Privacy Notice or if you wish to exercise your right to access, correction or erasure or your right to ask us to stop processing your information mentioned you can contact us either by telephone, email or in writing whichever you prefer
Data Protection Officer:
e.surv has appointed its own data protection representative, Shane Ross. Shane is a member of the Risk & Governance teams at e.surv, reporting directly to the Risk & Governance director at e.surv.
For all e.surv related data protection matters, Shane can be contacted by writing to:
The Risk & Governance Department e.surv
Chartered Surveyors Orion House Orion
Way Kettering Northants, NN16 6PP
e.surv has an obligation to inform you within 72 hours of becoming aware of a data breach that is likely to result in a high risk to your data and rights and freedom, e.surv will also report such breach to the Information Commissioners Office (ICO) or its lender clients having investigated fully the suspected
breach.
If the breach is likely to result in a high risk to the rights and freedoms of individuals, e.surv will notify you if your personal data is NOT encrypted or NOT unintelligible.
If you have any concerns or complaints as to how we have handled your personal data you may lodge a complaint with the UK’s data protection regulator, the ICO, who can be contacted through their website at https://ico.org.uk/global/contact-us/ or by writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF