Privacy Policy

1. Who we are

As a sole trader, Philip Tam is personally the data controller for information collected through this Site. All data protection enquiries can be made by email using the address above.

2. What information we collect

• Contact details you voluntarily provide, such as your name, email address, phone number, and the content of any message or enquiry you send.
• Basic technical information automatically provided by your browser when you visit the Site, such as IP address, browser type, device type, and general location inferred from your IP address.

We do not knowingly collect any special category data (such as health or financial information) through this Site. Please do not include such information in any enquiry unless it is genuinely necessary for us to assist you.

3. How we use your information

• To respond to enquiries submitted through the Site or by email.
• To maintain the security, performance, and proper functioning of the Site.
• To comply with our legal and regulatory obligations, including those arising from professional practice as a Chartered Surveyor.

We do not use information collected through this Site for marketing, profiling, or automated decision-making.

4. Legal basis for processing

We process personal data under the following legal bases:

• Legitimate interests — responding to enquiries you have voluntarily submitted, and operating and securing a small informational website, where this does not override your rights and interests.
• Legal obligation — where we are required to retain or disclose information to comply with applicable law or professional regulatory requirements.

5. Sharing and third parties

We do not sell or rent personal data. Limited information may be processed by trusted third-party infrastructure providers who host or secure this Site (for example, our hosting and content delivery provider), acting as processors on our behalf and only to the extent necessary to operate the Site. We do not share your data with any other third party except where required by law.

6. International transfers

This Site is operated from the United Kingdom. Our hosting and infrastructure providers may process data on servers located outside the UK. Where this occurs, we rely on appropriate safeguards recognised under UK GDPR, such as the UK's International Data Transfer Agreement or adequacy regulations, to ensure your data remains protected.

7. Cookies

This Site may use strictly necessary cookies or similar technologies required for basic security and operation (for example, provided by our hosting infrastructure). No marketing, advertising, or analytics cookies are intentionally used. For further detail, see our Cookie Policy.

8. Data retention

Personal data submitted through an enquiry is retained only for as long as necessary to respond to that enquiry and, where a professional engagement follows, for the period required by our professional and legal obligations thereafter. Where no engagement follows, enquiry data is ordinarily deleted within 24 months. Technical server data is retained only for the period necessary for security and operational purposes.

9. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including the use of reputable, security-conscious hosting infrastructure. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

10. Children's data

This Site is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

11. Your rights

Under UK GDPR, you have the right to: request access to your personal data; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; and request that your data be provided to you or transferred to another party in a portable format, where applicable.

To exercise any of these rights, contact [email protected]. We will respond within one month, as required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practice or applicable law. The version published on this Site at the time of your visit applies. We recommend checking this page periodically.

13. Contact and complaints

Questions or concerns about how your data is handled can be sent to [email protected].

You also have the right to lodge a complaint with the UK's independent supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113, though we would welcome the opportunity to resolve any concern directly first.