Privacy Policy

Privacy Policy

We are Compass Estates Group Ltd, a private limited company registered in Scotland under company number SC741629 with our registered office at Alba Innovation Centre, the Alba Campus, Livingston EH54 7GA. Our Data Protection Lead can be contacted at

We have produced this privacy notice to keep you informed of how we handle your personal data. All handling of your personal data is done in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

What are your rights? When reading this notice, it might be helpful to understand that your rights under the GDPR include:

  • The Right to Be Informed: You have the right to be informed about the collection and use of your personal data.
  • The Right of Access: You can request access to your personal data.
  • The Right to Rectification: You have the right to ask to correct data that you think is inaccurate. You also have the right to ask to complete information you think is incomplete.
  • The Right to Erasure: This right is also known as "the right to be forgotten" and allows you to request the deletion or removal of your data where there is no compelling reason for its continued processing.
  • The Right to Restrict Processing: You have the right to request the restriction or suppression of your personal data.
  • The Right to Data Portability: This right allows you to obtain and reuse your data for your own purposes across different services.
  • The Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing.
  • Rights Related to Automated Decision Making Including Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Who is the Data Controller? Compass Estates Group Ltd is the Data Controller of your personal data. We determine the purposes and means of processing your personal data.

Lawful Basis for Processing Personal Data Under the GDPR, we must have a lawful basis for using your personal data. The lawful bases we rely on include:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose.
  • Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
  • Legal Obligation: The processing is necessary for us to comply with the law (not including contractual obligations).
  • Vital Interests: The processing is necessary to protect someone’s life.
  • Public Task: The processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
  • Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect your personal data which overrides those legitimate interests.

Data Retention We will keep your personal data only for as long as is necessary for the purpose for which it was collected. At the end of that retention period, your data will either be deleted completely or anonymized.

Changes to this Privacy Policy We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website at We will let you know via email and/or a prominent notice on our website, prior to the change becoming effective.

Who can you complain to? In addition to raising concerns directly with us via, you can direct any complaints regarding our handling of your personal data to the UK's Information Commissioner’s Office (ICO).