Privacy Policy
1. Who We Are
ASAP House Buyers (UK) trading as Civic Rescue ("Civic Rescue", "we", "us", "our") is the data controller for personal information collected through this website and our enquiry process. We are registered in England and Wales. Our registered office is Ground Floor 6&7 Eastway Business Village, Olivers Place, Preston, Lancashire, United Kingdom, PR2 9WT.
This Privacy Policy explains what personal data we collect, how we use it, your rights under UK GDPR and the UK Data Protection Act 2018, and how to contact us with any concerns.
If you have any questions, please email us at: privacy@civicrescue.co.uk
2. What Data We Collect
We may collect the following categories of personal data:
- Identity data: your name;
- Contact data: your phone number and email address;
- Property data: address, estimated value, outstanding mortgage, and arrears (where provided via our calculator or enquiry form);
- Correspondence data: records of communications between you and us;
- Technical data: IP address, browser type, device information, and pages visited — collected automatically when you use our Site;
- Cookie data: as described in our Cookie Policy.
We do not collect any special category data (such as health, ethnicity, or financial account details) unless you voluntarily provide it in correspondence.
3. Legal Basis for Processing
We rely on the following legal bases under UK GDPR:
- Consent (Article 6(1)(a)): when you submit an enquiry form and explicitly agree to be contacted;
- Legitimate interests (Article 6(1)(f)): to respond to enquiries, improve our services, and detect fraud — where our interests are not overridden by your rights;
- Contract (Article 6(1)(b)): where processing is necessary to take pre-contractual steps at your request or to perform a contract with you.
4. How We Use Your Data
We use the personal data we collect to:
- Respond to your enquiry about selling your property;
- Prepare and issue a purchase offer;
- Progress a sale transaction if you choose to proceed;
- Fulfil our legal and compliance obligations;
- Improve and maintain our website and services;
- Detect and prevent fraud or abuse.
We will never sell your personal data to third parties.
5. Who We Share Data With
We may share your data with the following categories of recipients, only to the extent necessary:
- Our solicitors — for conveyancing and legal processing;
- Surveyors and valuers — to produce a desktop or physical valuation;
- IT and hosting providers — who process data on our behalf under data processing agreements;
- Regulatory or law enforcement bodies — where required by law.
All third-party processors are contractually required to handle your data in accordance with UK GDPR.
6. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations:
- Enquiries that do not result in a sale: 12 months from last contact;
- Completed transactions: 7 years from completion (statutory accounting and legal obligations);
- Technical/analytics data: 26 months.
7. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
- Access: you may request a copy of the personal data we hold about you;
- Rectification: you may ask us to correct inaccurate data;
- Erasure: you may ask us to delete your data in certain circumstances;
- Restriction: you may ask us to restrict processing of your data;
- Portability: you may request your data in a structured, machine-readable format;
- Objection: you may object to processing based on legitimate interests;
- Withdraw consent: where we rely on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at privacy@civicrescue.co.uk. We will respond within one calendar month.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113.
8. International Transfers
We store all personal data within the UK or the European Economic Area (EEA). If we ever transfer data outside these areas, we will ensure appropriate safeguards are in place (such as UK Adequacy Regulations or Standard Contractual Clauses).
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.