Privacy Policy

This policy applies to the website blockdesk.co.uk, operated by Avantone Services Ltd.

Data controller

1. What this policy covers

This policy explains what personal data we collect when you visit blockdesk.co.uk or contact us, why we collect it, how we use it, and your rights in relation to it. It does not cover personal data processed under a separate client services agreement — if you are an existing client, your engagement letter sets out how we handle data relating to your block and its directors.

2. What data we collect and why

Contact form submissions

When you submit the contact form on this website, we collect your name, email address, block address, and the content of your message. We use this to respond to your enquiry and, if you become a client, to begin setting up your block's file.

• Legal basis: legitimate interests (responding to your enquiry) and, where relevant, steps taken at your request prior to entering a contract.
• Retention: enquiries that do not result in a client relationship are deleted after 12 months. Enquiries that do result in a client relationship are retained as part of your client file for the duration of the engagement plus 6 years.

Email correspondence

If you contact us directly by email, we collect your name, email address, and the content of your message for the same purposes.

• Legal basis: legitimate interests.
• Retention: as above.

Website usage

We do not use analytics software, tracking pixels, or any third-party tools that collect data about how you use this website. We do not build profiles of website visitors.

3. Cookies

This website uses only strictly necessary cookies required for the contact form to function. These cookies do not track you, are not used for advertising, and are not shared with third parties. No consent is required for strictly necessary cookies under UK GDPR. A full description of cookies used is set out in our Cookie Policy.

4. Who we share your data with

We do not sell, rent, or trade personal data. We may share data with:

• Our email and hosting providers, who process data on our behalf under data processing agreements and are bound by equivalent data protection obligations.
• A property solicitor, where we seek legal advice on a matter relating to your block — only to the extent necessary and under professional confidentiality obligations.
• Regulatory authorities or law enforcement, where we are legally required to do so.

We do not transfer personal data outside the UK or EEA without appropriate safeguards in place.

5. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your personal data, subject to our legal obligations to retain certain records.
• Object to or restrict processing in certain circumstances.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent (note: we do not currently rely on consent as a legal basis for any processing described above).

To exercise any of these rights, contact us at privacy@blockdesk.co.uk. We will respond within one calendar month. If you are dissatisfied with our response, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

6. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the most recent revision. We will not retroactively reduce your rights under any previous version of this policy without your consent.

7. Contact

For any questions about this policy or how we handle your personal data: privacy@blockdesk.co.uk