GDPR Compliance
Our commitment to data protection under UK GDPR
Keen Maple is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our compliance measures and your rights under these regulations.
Data Controller
Keen Maple acts as the data controller for personal information collected through this website and during the provision of our services. We determine the purposes and means of processing personal data in connection with our property consultancy services.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal information we hold about you. We will respond to such requests within one month.
Right to Rectification
You have the right to request that we correct any personal information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purpose for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly where we rely on legitimate interests as the lawful basis.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data where appropriate
- Regular testing and evaluation of security measures
- Access controls limiting who can view personal data
- Staff training on data protection obligations
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
International Transfers
We do not routinely transfer personal data outside the United Kingdom. Should any transfer be necessary, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Exercising Your Rights
To exercise any of these rights, please contact us at:
Keen Maple
47 Stonegate
York YO1 8AW
United Kingdom
[email protected]
We will respond to all legitimate requests within one month. Occasionally, it may take longer if your request is particularly complex or you have made multiple requests.
Complaints
If you have concerns about our data protection practices, we encourage you to contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
This compliance statement was last reviewed in July 2026.