Privacy Policy
This page explains what personal information I collect — whether you're browsing this website or applying for a tenancy — why, and what rights you have over it. It's written in plain language rather than legal jargon — if anything is unclear, just get in touch.
The data controller.
This website and the letting business behind it are operated by Richard Kiru, trading as Christopher Lily Property Services ("I", "me", "my"), an independent property advisor and letting agent based in London. For the purposes of UK data protection law, I am the "data controller" of the personal information described on this page.
You can contact me about anything on this page at richard@christopherlily.co.uk or 07976 385502.
Website enquiries.
I only collect personal information through this site that you choose to submit. Depending on which form you use, that may include:
General enquiries (Contact page): your name, email address, phone number and the contents of your message.
Investor registration (Property Search & Acquisition page): your name, email address, phone number, budget, property type, area(s) of interest, minimum discount required, investor experience and any additional requirements you provide.
I don't use tracking cookies to build a profile of you, and I don't buy or scrape personal data from third parties. If you don't submit a form, the only information I hold about your visit is the anonymous analytics data described below.
If you apply for a tenancy, or act as a guarantor.
Renting a property involves more detailed checks than a website enquiry. If you apply to rent a property through me, or you act as someone's guarantor, I collect information from your application, from your employer, from previous landlords, from credit reference agencies, and from guarantors where relevant. This can include:
• name, email address, phone number, date of birth, current and previous addresses, marital status, National Insurance number, nationality, next of kin, and — where relevant — your university or college, or the friends you'd be staying with
• the equivalent details for any guarantor
• property address, tenancy term, rent, deposit, and utility/service responsibilities
• employment status, employer contact details, payroll number, length of employment, salary and any other income
• bank account details, and any existing loan, credit card or store card agreements
• welfare benefits you may be eligible for or currently receive, where relevant to affordability
This is more sensitive information, so I only collect what's genuinely needed to reference and set up a tenancy properly, and I don't ask for it as part of a general website enquiry.
Why I process your information, and on what basis.
Responding to your enquiry. When you contact me through the Contact form, I use your details to reply and discuss your property needs. This is done on the basis of my legitimate interest in responding to enquiries from prospective clients, which I've judged doesn't override your own interests or rights.
Matching you with investment opportunities. When you register your requirements through the investor form, I use your details to contact you when a property matching your criteria becomes available. This is done on the basis of your consent, given when you submit the form — you can withdraw it at any time by emailing me and asking to be removed from the list.
Referencing and managing a tenancy. If you apply to rent a property, I use your information (and your guarantor's, where relevant) to carry out reference and affordability checks — including whether there are any money judgments, or a history of bankruptcy or insolvency — and to set up and manage the tenancy, including protecting a tenant's deposit with a government-approved scheme (currently mydeposits) and, where relevant, handling matters through the Property Redress Scheme. This is necessary to perform that contract, to take steps at your request before entering into it, and to comply with my legal obligations as a letting agent, including right-to-rent immigration checks.
Who sees your information.
Form submissions on this site are sent using FormSubmit.co, a third-party service that relays the submission to my personal email inbox and doesn't use your information for its own purposes.
For tenancy and referencing purposes, I may share your information with landlords, local councils, utility providers, credit reference agencies, and guarantors or referees you've named, strictly for the purposes of setting up and managing the tenancy. Where I'm legally or contractually required to, I'll also share the minimum necessary information with the relevant deposit or redress scheme (mydeposits, DPS, PRS), with parties assisting in tracing or recovering unpaid rent, or, in the event I sell or merge the business, with the new owner. Beyond this, I don't sell, rent or share your personal information with third parties for marketing purposes, and your information is stored within the UK.
I keep website enquiry and investor registration data for as long as it's relevant — typically no more than 24 months from your last contact with me. Tenancy and referencing records are kept for the duration of the tenancy and for up to 6 years afterwards, in line with standard limitation periods for contractual and tax records, unless a longer period is required by law or you ask me to delete data sooner where I'm not obliged to keep it.
Website analytics.
This site uses Google Analytics to understand how visitors use it — for example, which pages are popular — so I can improve it. Google Analytics uses cookies and collects information such as your approximate location, device and browsing behaviour on this site. It doesn't identify you by name.
You can opt out of Google Analytics tracking across all websites using the Google Analytics opt-out browser add-on, or by blocking cookies in your browser settings.
What you can ask me to do.
Under UK data protection law, you have the right to:
• ask for a copy of the personal information I hold about you
• ask me to correct anything that's inaccurate or incomplete
• ask me to delete your information, where there's no good reason for me to keep it
• ask me to restrict or object to how I'm using it, including objecting to marketing
• ask for your information to be provided to you or moved elsewhere
• withdraw your consent at any time, where I'm relying on consent (such as the investor list)
To exercise any of these, just email richard@christopherlily.co.uk. I'll aim to respond within one month.
If you're unhappy with how I've handled your data.
If you have any concerns about how I've used your personal information, please contact me first at richard@christopherlily.co.uk so I can try to put it right — I aim to respond within 30 days.
If you're not satisfied with my response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
I am registered with the ICO under registration reference ZA528448, which you can verify on the ICO's public register.
Kept up to date.
I may update this policy from time to time, for example to reflect changes in the law or in how this site and my business work. This version replaces my June 2019 fair processing notice and was last updated in August 2026.
Get in touch