Last Updated: May 2026
1. Introduction
RightToManage.co.uk ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.
We are a specialist Right to Manage claim service operating in England and Wales. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect and process the following types of personal information:
Information You Provide Directly
- Contact Information: Name, email address, telephone number, postal address
- Building Information: Building address, flat number, number of flats in building, lease details
- RTM Eligibility Information: Information about your building's eligibility for Right to Manage, including number of qualifying tenants, commercial space proportion, and leaseholder support levels
- Communication Content: Information contained in emails, contact forms, and other communications with us
Information Collected Automatically
- Usage Data: IP address, browser type, operating system, pages visited, time spent on pages, referring website
- Cookies and Similar Technologies: We use cookies to improve your experience on our website
3. How We Use Your Information
We use your personal information for the following purposes:
- Service Provision: To provide Right to Manage claim services, eligibility assessments, and cost estimates
- Communication: To respond to your enquiries, provide updates about your RTM claim, and send service-related communications
- Legal Compliance: To comply with legal obligations, including anti-money laundering requirements and professional regulations
- Service Improvement: To analyse website usage and improve our services
- Marketing: To send you information about our services (only with your consent, and you can opt out at any time)
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract Performance: Processing necessary to provide our RTM claim services
- Consent: Where you have given explicit consent for marketing communications
- Legitimate Interests: For business administration, service improvement, and fraud prevention
- Legal Obligation: To comply with legal and regulatory requirements
5. Data Sharing and Disclosure
We do not sell or rent your personal information to third parties. We may share your information with:
- Service Providers: Companies House, Land Registry, process servers, and other third parties necessary to complete your RTM claim
- Professional Advisers: Solicitors, barristers, or tribunal representatives where your RTM claim requires legal representation
- Legal Requirements: Where required by law, court order, or regulatory authority
- Business Transfers: In the event of a sale, merger, or acquisition of our business
All third parties are required to maintain the confidentiality and security of your personal information.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- Active RTM Claims: Throughout the claim process and for 6 years after completion
- Enquiries Not Proceeding: 2 years from last contact
- Marketing Consent: Until you withdraw consent or 3 years from last engagement
- Financial Records: 6 years as required by UK tax law
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data (subject to legal obligations)
- Right to Restrict Processing: Limit how we use your personal data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for marketing purposes
- Right to Withdraw Consent: Withdraw consent for processing at any time
To exercise any of these rights, please contact us at info@righttomanage.co.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Secure encrypted data transmission (SSL/TLS)
- Access controls and authentication
- Regular security assessments and updates
- Staff training on data protection
- Secure backup and disaster recovery procedures
9. Cookies
Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. You can control cookie settings through your browser preferences. For detailed information about the cookies we use, please see our Cookie Policy.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit.
11. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. International Data Transfers
Your personal information is stored and processed within the United Kingdom. If we transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
15. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):