Privacy Policy

Last updated: October 2025 · Effective: October 2025

This privacy policy explains how EPO — Expeditious Property Operations ("EPO", "we", "us", "our") collects, uses, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

EPO is a back-office support service for UK letting agents. Our registered address is 1 Lettings Lane, London, EC1A 1AA, United Kingdom. You can contact us at hello@epoproperty.co.uk.

2. What data we collect

We collect and process the following categories of personal data:

Contact data: name, email address, phone number, company name
Usage data: IP address, browser type, pages visited, time on site (via analytics if consent is given)
Communication data: the content of enquiries submitted through our contact form
Application data: CV/resume and covering information submitted through our careers form

3. How we use your data

We use your personal data for the following purposes:

To respond to enquiries submitted through our website
To send service-related communications you have requested
To process employment applications
To improve our website and services (analytics, with consent only)
To comply with legal obligations

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

Legitimate interests — responding to business enquiries
Consent — analytics cookies (withdrawable at any time via our Cookie Policy)
Contract — processing applications for employment
Legal obligation — retaining records as required by law

5. Data retention

We retain enquiry data for 2 years. Job application data is retained for 6 months after the role is filled. Analytics data is retained for 13 months.

6. Your rights

Under UK GDPR, you have the right to: access your personal data; rectify inaccurate data; request erasure; object to processing; request restriction of processing; data portability. To exercise any right, contact us at hello@epoproperty.co.uk.

7. Third-party processors

We share data with the following processors under written Data Processing Agreements: Nodemailer/Resend (transactional email); analytics provider (with consent); Cloudflare (DDoS protection and CDN).

8. Cookies

We use essential cookies for site functionality and optional analytics cookies with your consent. See our Cookie Policy for full details.

9. Complaints

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk.

10. Changes to this policy

We may update this policy periodically. Material changes will be highlighted on this page with a revised "last updated" date.