Privacy Policy
Effective Date: 01/09/2025
Last Updated: 01/09/2025
1. Introduction
Island Land ("we," "our," "us," or the "Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.islandland.co.uk, use our services, or interact with us in any capacity.
This policy applies to all personal data we process in connection with our property development facilitation services across Guernsey, Jersey, and the Isle of Man. By using our services or website, you consent to the data practices described in this policy.
Data Controller Details:
Company Name: SGS Ltd (Trading as "Island Land")
Registration Number: 34818
Registered Office: Po Box 565, Guensey GY1 6JW
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
• Contact us through our website, email, phone, or in person
• Register for our services or sign up for consultations
• Submit property information for assessment or planning applications
• Participate in surveys or provide feedback
• Subscribe to our newsletter or marketing communications
• Attend our events or webinars
2.1.1 Types of Personal Information
The personal information we may collect includes:
• Contact Information: Name, email address, phone number, postal address
• Property Information: Property addresses, ownership details, planning history
• Financial Information: Property valuations, mortgage details (where relevant)
• Professional Information: Company details, job title, professional affiliations
• Communication Records: Correspondence, meeting notes, call recordings
• Legal Information: Title deeds, planning documents, legal restrictions
• Technical Information: IP address, browser type, device information
2.2 Information We Collect Automatically
When you visit our website, we automatically collect certain information about your device and usage patterns through cookies and similar technologies:
• Device Information: IP address, browser type, operating system, device identifiers
• Usage Information: Pages viewed, time spent on site, click patterns, referral sources
• Location Information: General geographic location based on IP address
• Performance Data: Site loading times, error reports, user interactions
2.3 Information from Third Parties
We may receive information about you from third parties, including:
• Professional Partners: Architects, surveyors, legal advisors working on your project
• Public Records: Land registry, planning authority databases, public property records
• Credit Reference Agencies: For verification purposes where required
• Marketing Partners: Lead generation services with your consent
• Social Media: Information from social media platforms when you interact with us
3. How We Use Your Information
3.1 Primary Uses
We use your personal information for the following legitimate business purposes:
• Service Delivery: To provide our property development and planning services
• Planning Applications: To prepare and submit planning applications on your behalf
• Communication: To respond to inquiries and provide project updates
• Contract Management: To manage our contractual relationship with you
• Professional Services: To coordinate with architects, surveyors, and other professionals
• Auction Services: To market and sell properties through our auction platform
• Legal Compliance: To meet our legal and regulatory obligations
3.2 Marketing and Communications
With your consent, we may use your information to:
• Send marketing emails about our services and industry insights
• Invite you to events, webinars, and networking opportunities
• Share case studies and success stories (with anonymization where appropriate)
• Provide personalized service recommendations
• Conduct market research and customer satisfaction surveys
3.3 Website and Service Improvement
We use automatically collected information to:
• Improve User Experience: Optimize website functionality and content
• Security: Protect against fraud, security breaches, and technical issues
• Analytics: Understand usage patterns and improve our services
• Technical Support: Troubleshoot problems and provide customer support
4. Legal Basis for Processing
Under UK GDPR and applicable data protection laws, we process your personal data on the following legal bases:
4.1 Contractual Necessity
Processing is necessary for the performance of a contract with you or to take steps prior to entering into a contract.
4.2 Legitimate Interests
Processing is necessary for our legitimate business interests, including:
• Providing and improving our services
• Managing customer relationships
• Protecting our business and customers from fraud
• Direct marketing to existing customers
4.3 Legal Obligation
Processing is necessary to comply with legal obligations, including:
• Anti-money laundering regulations
• Tax and accounting requirements
• Planning and property law compliance
4.4 Consent
Where we have obtained your explicit consent for processing, such as for marketing communications or cookies.
5. How We Share Your Information
5.1 Professional Partners
We may share your information with trusted professional partners who assist in delivering our services:
• Architects and Designers: For site assessments and planning applications
• Surveyors: For property surveys and valuations
• Legal Advisors: For legal due diligence and contract preparation
• Planning Consultants: For specialized planning expertise
• Marketing Agencies: For property marketing and auction services
5.2 Regulatory Authorities
We may share information with regulatory bodies when required:
• Planning Authorities: For planning application submissions
• Land Registry: For property title verification
• Tax Authorities: For tax compliance and reporting
• Financial Conduct Authority: If required for regulatory compliance
• Law Enforcement: When legally obligated to do so
5.3 Service Providers
We work with third-party service providers who process data on our behalf:
• IT Service Providers: For website hosting, data storage, and technical support
• Communication Services: For email marketing and customer communications
• Payment Processors: For secure payment handling
• Analytics Providers: For website and marketing analytics
• Document Storage: For secure document management and storage
5.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, personal information may be transferred as part of the transaction, subject to appropriate safeguards.
6. Data Security
6.1 Security Measures
We implement robust security measures to protect your personal information:
• Encryption: Data is encrypted in transit and at rest
• Access Controls: Strict access controls and authentication procedures
• Regular Updates: Systems are regularly updated and patched
• Staff Training: Regular training on data protection and security best practices
• Incident Response: Procedures in place for detecting and responding to security breaches
• Secure Facilities: Physical security measures for offices and equipment
6.2 Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
• Notify the relevant supervisory authority within 72 hours
• Notify affected individuals without undue delay
• Take immediate action to contain and remedy the breach
• Implement additional safeguards to prevent future incidents
7. Data Retention
7.1 Retention Periods
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:
• Active Client Data: Duration of our business relationship plus 7 years
• Planning Applications: 10 years after project completion
• Financial Records: 7 years for tax and accounting purposes
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months for Google Analytics data
• Legal Documents: As required by applicable law
7.2 Secure Disposal
When personal information is no longer needed, we securely delete or destroy it using industry-standard methods to ensure it cannot be recovered or reconstructed.
8. Your Rights
Under UK GDPR and applicable data protection laws, you have the following rights regarding your personal information:
8.1 Right of Access
You can request a copy of the personal information we hold about you, including details about how we process it.
8.2 Right to Rectification
You can request that we correct any inaccurate or incomplete personal information.
8.3 Right to Erasure
You can request deletion of your personal information in certain circumstances, such as when it's no longer necessary for our legitimate business purposes.
8.4 Right to Restrict Processing
You can request that we limit how we process your personal information in certain situations.
8.5 Right to Data Portability
You can request that we transfer your personal information to another organization in a structured, commonly used format.
8.6 Right to Object
You can object to our processing of your personal information for direct marketing purposes or based on legitimate interests.
8.7 Right to Withdraw Consent
Where processing is based on consent, you can withdraw your consent at any time.
8.8 How to Exercise Your Rights
To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within one month of receipt. We may request additional information to verify your identity before processing your request.
9. Cookies and Tracking Technologies
9.1 What Are Cookies
Cookies are small text files stored on your device when you visit our website. We use cookies and similar tracking technologies to enhance your browsing experience and analyze website usage.
9.2 Types of Cookies We Use
• Essential Cookies: Necessary for the website to function properly
• Performance Cookies: Help us understand how visitors use our website
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness
9.3 Cookie Management
You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality. Our cookie banner allows you to manage your cookie preferences when you first visit our site.
10. International Data Transfers
10.1 Data Processing Locations
Your personal information may be processed in countries outside your jurisdiction, including within the European Economic Area (EEA) and in third countries.
10.2 Safeguards for International Transfers
When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place:
• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Standard Contractual Clauses: EU-approved contractual protections
• Binding Corporate Rules: For transfers within multinational organizations
• Certification Schemes: Industry-recognized data protection certifications
11. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
12. Contact Information and Complaints
12.1 Privacy Enquiries
For any questions about this Privacy Policy or our data practices, please contact us.
12.2 Complaints
If you have concerns about how we handle your personal information, you can:
1. Contact us directly using the details above
2. File a complaint with the relevant data protection authority:
• UK: Information Commissioner's Office (ICO) - ico.org.uk
• Guernsey: Office of the Data Protection Commissioner - odpa.gg
• Jersey: Jersey Office of the Information Commissioner - jerseyoic.org
• Isle of Man: Isle of Man Information Commissioner - inforights.im
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
• Post the updated policy on our website with a new effective date
• Notify you by email if you have provided us with your email address
• Provide notice through our website or other appropriate means
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information.
14. Definitions
For the purposes of this Privacy Policy:
• "Personal Data/Information" means any information relating to an identified or identifiable natural person
• "Processing" means any operation performed on personal data, including collection, use, storage, and disclosure
• "Data Controller" means the entity that determines the purposes and means of processing personal data
• "Data Processor" means an entity that processes personal data on behalf of the data controller
• "UK GDPR" refers to the UK General Data Protection Regulation as incorporated into UK law
