Privacy & Data Protection Policy

Last updated June 2026

Established in 1770, John Jarrold advertised his honourable intentions as a shopkeeper and assured customers of his “utmost assiduity to merit their encouragement.” These are values we hold strong today throughout our company including our views on your data and privacy protection.

Jarrolds (Property Management) Limited respects your privacy and is committed to protecting your personal data. This privacy notice is to let you know how Jarrolds (Logistics) Limited processes and manages your personal data. This includes through your use of this website, what you tell us about yourself, what we learn about you by having you as a valued customer and the choices about what marketing you would like us to send you. This notice explains how we do this and tells you about your privacy rights and the law that protects you.

Jarrolds (Property Management ) Limited is the controller and responsible for your personal data (referred to as “Jarrolds”, “we”, “us”, or “our” in this privacy notice). This privacy notice is issued on behalf of Jarrolds (Property Management) Limited.

Our Privacy Promise

We promise:

  • to keep your data safe and private;
  • not to sell or give away your personal data; and
  • to give you ways to manage and review your marketing choices at any time.

Data Protection Law

As well as our Privacy Promise, your privacy is protected by data protection and privacy law, including the UK version of the General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. 

The types of personal data we collect

“Personal data” means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Type of personal data Description
Consents Data Any permissions, consent or preferences that you give us. This includes how you want us to contact you.
Contact Data Your email address, telephone number, home address and how we contact you.
Financial Data Information about payments, charges, or financial transactions connected to you.
Health Data Information about accidents or injuries
Technical Data Details on your internet protocol (IP) address, specific device identifiers, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
Security Data CCTV footage recorded when you visit one of our commercial sites 

Where we collect personal data from

We collect personal data about you where you have supplied information directly to us, for example when you:

  • when you contact us by telephone, email or post;
  • When you engage us to provide services in relation to a residential or commercial property..

To help us improve the service we offer, as you interact with our website we will also automatically collect Technical Data about your equipment, browsing action and patterns using cookies and other similar automated technologies.

Please also see our cookie policy at https://jarrold.com/privacy-policy/ for further details.

How we use your personal data

Data protection law says that we must have one or more lawful reasons to process your data. Typically, we rely on one or more of the following lawful bases for processing your personal data:

  • Performance of a contract with you: When it is necessary to use your personal data to enter into a contract with you (or your business) or to perform a contract we have with you (or your business).
  • Compliance with a legal obligation: When it is necessary to use your personal data to allow us to comply with a legal obligation.
  • Our legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
  • Consent: We may use your personal data when you have given your consent to it.

We have set out below, in a table format, a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

What we use your personal data for Type of personal data Lawful basis
To lease a commercial property to you.
  • Contact Data
  • Identity Data
  • Financial Data
  • Performance of a contract with you
  • Necessary for our legitimate interests
To lease a residential property to you
  • Contact Data
  • Identity Data
  • Financial Data
  • Performance of a contract with you
To manage our relationship with you and your business (including dealing with your feedback and correspondence)
  • Contact Data
  • Identity Data
  • Performance of a contract with you
  • Necessary to comply with a legal obligation
  • Necessary for our legitimate interests (to keep our records updated and ensure we maintain high standards of customer service)
To develop new ways to meet our customers’ needs and to grow our business.
  • Behavioural/Profile Data
  • Technical Data
  • Transactional Data
  • Necessary for our legitimate interests (to improve our offering to customers)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
  • Identity Data
  • Technical Data
  • Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
  • Necessary to comply with a legal obligation
To meet legal requirements around tenancy and occupational compliance.
  • Identity Data
  • Contact Data
 Legal obligation
To meet Health and Safety requirements
  • Identity Data
  • Contact Data
  • Health Data
 Legal obligation
To meet financial and tax obligations
  • Identity Data
  • Contact Data
  • Financial Data
 Legal obligation 

Marketing

We may use your Contact Data, Behavioural and Technical Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.

You will receive marketing communications from us if you have requested information from us or purchased goods and/or services from us and you have not opted out of receiving that marketing.

Third-party marketing

We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

Opting out

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a purchase of products or services.

Who we share your personal data with

We may have to share your personal data occasionally with other likeminded companies who take privacy seriously to enable us to support our business, such as:

Type of service provider Reasons to share personal data
Website Development and Management To be able to provide a website that provides the best possible user experience to our customers.
Property Maintenance Contractors To carry out repairs and maintenance to properties
Payment Service Providers To be able to help us to process payments, prevent fraud and reduce credit risk.
Insurers To ensure that properties have appropriate insurance coverage
E-Mail Marketing To be able to create targeted email marketing campaigns.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Sending personal data outside of the UK

Your personal data may be transferred for processing by our external third parties, some of whom may be based outside the UK. External third parties include service providers who provide IT and system administration services to us, and professional advisers who provide banking, legal, insurance, and accounting services to us.

We will only transfer your personal data to countries that provide an adequate level of protection for personal data (currently all countries in the European Economic Area have been found to provide such protection) or if the transfer is subject to appropriate safeguards as required under data protection laws in the UK or if a specific derogation applies.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

If you choose not to give personal data

We may need to collect personal data by law, or under the terms of a contract to supply goods and/or services.

If you choose not to give us this personal data, it may delay or prevent us from meeting our obligations. It may also mean that we cannot supply the goods and/or services you have requested from us, and we would therefore have to cancel your order.

Any data collection that is optional will be made clear at the point of collection.

Data security

We employ appropriate security measures and safeguards to keep your personal information secure, including but not limited to the following:

Network protection: Traffic between our systems and the public internet is filtered through enterprise firewalls.

 

Encryption: Personal data is encrypted in transit using industry-standard protocols. Payment card details are always encrypted.

 

Access controls: Systems are protected by strong authentication and role-based access so people only see the information needed for their job. Offices, venues, and data centres have physical access controls.

 

Monitoring and testing: We monitor for vulnerabilities and suspicious activity and run regular penetration tests to check and strengthen our defences.

 

Identity checks: We verify identity before sharing any personal information by phone or email to prevent disclosure to the wrong person.

 

Administrative and physical safeguards: We apply organisational, technical, and physical measures across collection, storage, and disclosure of personal data.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

How long we keep your personal data

We will limit the amount of personal data we hold in compliance with our data retention policy and reduce the amount of data held the older your data becomes. We may keep your data for as long as is legally necessary, for example to support a warranty claim or to support our internal reporting purposes.

Your rights and how to use them

Accessing your data.

Email elizabeth.smith@jarrold.com with subject “Access request” or write to:
Jarrolds
1 – 11 London Street
Norwich
Norfolk
NR2 1JF

Include your name, any customer ID, and where you want the response sent. If you’d like an electronic copy, say so and provide your email. We’ll respond within one month (extendable by up to two months for complex requests) and may ask for information to confirm your identity where necessary.

Correcting inaccurate or incomplete data.

Tell us what’s wrong and the correct details at elizabeth.smith@jarrold.com. We’ll verify and update.

Requesting that we delete your data.

Email elizabeth.smith@jarrold.com explaining why you want deletion. We’ll delete where no lawful reason requires us to keep it (e.g. legal obligations) and will tell you if we must retain some data.

Restricting how we use your data.

To do this: Email elizabeth.smith@jarrold.com if you believe your data is inaccurate, used unlawfully, no longer needed, or you’ve objected and we’re assessing our grounds. We’ll pause use where the law allows.

Objecting to our use of your data.

Email elizabeth.smith@jarrold.com if we rely on legitimate interests. We’ll stop unless we have compelling lawful grounds.

Ask us to stop direct marketing.

Click unsubscribe in our emails, adjust preferences in jarrold.com, or email elizabeth.smith@jarrold.com. We will stop marketing (including related profiling).

Data portability.

Email elizabeth.smith@jarrold.com to receive the data you gave us in a structured, commonly used, machine-readable format, or ask us to send it to another organisation (where technically possible). Applies when processing is based on consent or contract.

Withdraw consent at any time.

Update settings in jarrolds.co.uk or email elizabeth.smith@jarrold.com. This will not affect past processing already carried out.

To complain.

If you have concerns about how we handle your personal data, you can contact us at elizabeth.smith@jarrold.com and we’ll try to resolve it. 

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance using the contact details set out below.

Cookies

We use “cookies” as a shorthand for cookies and similar technologies (for example, web beacons in emails and link-tracking). They help our site work, improve your experience, and provide insights so we can keep content relevant. Some also support advertising and email analytics.

You can block or delete cookies in your browser settings. Note: parts of our site may not work properly without them.

For details on types of cookies we use and how to control them, see our Cookie Policy on https://jarrold.com/privacy-policy/.

 

Contact Us

Email
elizabeth.smith@jarrold.com

Telephone
01603 677282

 

Post
Jarrolds Property Management Limited
St James Mill
Whitefriars
Norwich
NR3 1SH