GDPR Compliance

Last Updated: August 19, 2026

Our Commitment to GDPR

solar-stone is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and other applicable privacy laws.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Processing is necessary for us to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests

What Personal Data We Collect

We collect and process the following categories of personal data:

• Identity data: name, title
• Contact data: email address, postal address
• Profile data: property preferences, rental requirements, budget information
• Technical data: IP address, browser type, time zone settings
• Usage data: information about how you use our website and services

How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide property search and rental assistance services
• To communicate with you about properties and services
• To improve our website and services
• To comply with legal and regulatory requirements
• To protect our business and website from fraud and other illegal activities

Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Data Protection Officer

For any questions regarding our GDPR compliance or to exercise your rights, please contact us at [email protected].

Response Time

We will respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

International Transfers

We do not transfer your personal data outside the European Economic Area. Should this change in the future, we will ensure appropriate safeguards are in place.

Automated Decision Making

We do not use automated decision making or profiling in our processing of your personal data.

Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.