Privacy Policy

Last updated: January 2026

Conway Real Estate (“we”, “us”, “our”) is committed to protecting your privacy. We take appropriate technical and organisational measures against unlawful or unauthorised processing of personal information, and against the accidental loss of, or damage to, personal information. We maintain procedures and technologies to protect personal information from the point of collection to the point of secure destruction.

Who we are (Data Controller)

Conway Real Estate is the trading name of [Conway Real Estate Ltd (company number: 13754554) with registered office at c/o Moorhurst Partners LLP, Suite S2 Blackwell House, Guildhall Yard - EC2V 5AE, London. For the purposes of UK data protection law, Conway Real Estate Ltd is the “data controller” of personal information processed in connection with this website and our services.

Data Protection Contact: Simon Laight | simon@conwayrealestate.co.uk | 07932088364 

Personal Information

Personal information (also referred to as “personal data”) relates to any information identifying you, or information relating to you, that we can identify (directly or indirectly) from that information alone or in combination with other identifiers we possess or can reasonably access.

How we collect personal information

We may collect personal information when:

• you request details about our services or contact us (including via email, telephone, meetings or our website contact form);

• contact details are shared during business meetings (for example exchanging business cards);

• you request access to a data room, receive or request marketing materials, or subscribe to updates;

• information is provided to us to comply with applicable anti-money laundering (“AML”) and sanctions requirements (for example passport/ID, proof of address, source of funds/wealth information, and corporate ownership information);

• you apply for a job with us, work for us, or provide services to us (including as a supplier or consultant);

• you visit our website and it collects limited technical information (see “Cookies” below).

Types of personal information we may process

Depending on the context, we may process:

• identity and contact details (name, job title, employer, business address, email, telephone);

• correspondence and meeting notes;

• transaction-related information (your requirements, investment criteria, mandates, approvals, and instructions);

• compliance information (AML/identity verification, beneficial ownership, and sanctions screening results);

• recruitment information (CV, employment history, references, right-to-work information);

• technical information from your use of the website (IP address, device and browser information, and usage data).

We do not intend to collect “special category” personal data via the website. If you voluntarily provide such information, we will treat it appropriately and only process it where permitted by law.

Legal basis for processing personal information

We rely on a number of different legal bases for processing personal information, including:

• Consent – where you have provided consent for us to use your information for a specific purpose (for example, receiving certain marketing communications). You can withdraw consent at any time.

• Contract – where we need to process your information to perform a contract with you, or to take steps at your request before entering into a contract.

• Legal obligation – where we need to process your information to comply with applicable laws (including AML regulations and professional/regulatory obligations).

• Legitimate interests – where it is in our legitimate interests to process your information to run our business and provide our services (for example, responding to enquiries, maintaining our relationship network, and improving our services), provided these interests are not overridden by your rights.

How we use your information

We use personal information to:

• respond to enquiries and provide information about our services;

• provide advisory services, progress transactions and communicate with relevant parties;

• undertake due diligence, including identity verification and AML/sanctions compliance;

• manage and administer our business relationships and engagement processes;

• send market insights, relevant opportunities and updates where appropriate (and in line with your preferences);

• maintain business records, manage risk and protect our legal rights;

• recruit staff and manage employment/supplier relationships;

• maintain the security and performance of our website and systems.

Sharing personal information

We may share personal information with:

• professional advisers (lawyers, accountants, tax advisers), auditors and insurers;

• service providers acting on our behalf (IT hosting and support, document/data room providers, marketing/email platforms, analytics providers), under appropriate contractual protections;

• counterparties and stakeholders to a transaction where necessary to progress the matter (for example buyers/sellers, lenders, agents, valuers and other advisers), subject to confidentiality expectations and any contractual restrictions;

• regulators, law enforcement or other authorities where we are required or permitted to do so by law;

• a prospective buyer/seller of our business or assets (or their advisers) where personal information is relevant to the transaction.

We do not sell or rent your personal information to third parties for marketing purposes.

International transfers

We may use service providers whose servers are located outside the UK. Where personal information is transferred internationally, we will ensure appropriate safeguards are in place (for example, UK adequacy regulations or approved contractual clauses) to protect your information.

Security

We take reasonable technical and organisational measures to protect personal information. No method of transmission over the internet is completely secure, but we apply appropriate safeguards to reduce risk.

Retention

We will keep your information for as long as we need it for legitimate business or legal reasons, after which time the information will be securely deleted or anonymised.

Where we process information for AML/compliance purposes, retention periods may be governed by applicable law and professional requirements.

Your rights

Subject to applicable law, you may have rights to: access, rectification, erasure, restriction, objection, and data portability, and (where relevant) to withdraw consent.

To exercise your rights, please contact us using the details above. We may need to verify your identity before responding.

Complaints

If you have concerns about our use of your personal information, please contact us in the first instance so we can address the matter.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Cookies

Cookies are small text files stored on your device. Some cookies are strictly necessary for the website to function; others help us analyse usage and improve performance.

If we use non-essential cookies (for example analytics), we will request your consent via a cookie banner and you can change your preferences at any time.

You can also manage cookies through your browser settings. Disabling cookies may affect website functionality.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most recent version will be posted on our website with the updated date.