Data Protection

Data protection at EVORENTIS

EVORENTIS is committed to handling personal information fairly, lawfully, transparently and securely. This page summarises the controls that support our public Privacy Notice.

Data minimisation

We aim to collect only the personal information reasonably needed to respond to enquiries, deliver services, administer client relationships and meet legal or regulatory requirements.

Security

Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, alteration or disclosure. Access is limited to people and service providers who need it for legitimate business purposes.

Retention and deletion

Personal information is retained only for as long as needed for the purpose for which it was collected, taking account of contractual, legal, tax, accounting and dispute-resolution requirements. Information that is no longer required is securely deleted or anonymised where appropriate.

Suppliers and international transfers

Where third-party providers process personal information for EVORENTIS, appropriate contractual and security safeguards will be used. If personal information is transferred outside the UK, EVORENTIS will use an appropriate lawful transfer mechanism where required.

Data incidents

Suspected personal-data incidents will be assessed promptly and, where legally required, reported to the Information Commissioner’s Office and affected individuals.

Questions and rights requests

Privacy questions and requests to exercise data-protection rights can be submitted through the Contact page. Our full public-facing information is set out in the Privacy Notice.

Last updated: September 2026.