Site Visitor Privacy Notice

About us

ZPG Limited (ZPG) decides how and why to use your personal data with other companies in the property division of ZPG and the RVU group of companies as follows:

Property division including*:

  • Hometrack Data Systems Limited
  • Houseful Limited
  • Vebra Solutions Limited
  • Zoopla Limited

RVU

  • Confused.com (Inspop Limited)
  • Money.co.uk (Dot Zinc Limited)
  • Mojo Mortgages (Life’s Great Limited, Life’s Great Group Limited and Life’s Great Tech Limited)
  • Tempcover.com (Tempcover Limited
  • Uswitch.com (Uswitch Limited)

*There are additional Houseful group brands including Zoopla Pro, Zoopla Move, Movemnt, Community (Bricks and Chatter), Jupix, Alto, Yourkeys, PropertyFile and Expert Agent.

We respect and protect your privacy

Scope

This privacy notice relates to the processing of personal data through the use of security cameras at our Cardiff and London offices and through the recording of information about you as a site visitor when you visit our Cardiff, Fleet and London offices.

What personal data do we collect?

Data you provide to us

To be allowed access to our offices, you must share some of your data with us. We collect the minimum amount of data from you as we can and if you do not share this data with us, we will be unable to permit you access to our premises. Typically, you might share things like: 

  • Name(s)
  • Phone number
  • Email address
  • Employer / business name
  • Purpose of your visit
  • Your point of contact in our business

Where you provide us data you do so on your own behalf, or where providing us with someone else’s data, you must have their permission to do so.

Data we collect about you

When you enter our offices:

  • Entry and exit dates/times
  • Images of you

How do we use your data?

We use your data as follows:

  • To record your arrival and departure
  • To record images

Why can we use your data?

To use your data, we must have a valid and legal reason (a ‘lawful basis’). 

Our reason for using your data is usually one of the following:

Legitimate interests

We have a legitimate interest in using your data including

  • Notifying the person your are visiting of your arrival
  • Knowing who is on our premises in case of fire or other emergency
  • Preventing and detecting crime
  • Site security

Vital interests

If you are in an accident or other emergency we may need to pass your data to emergency services to ensure you are given critical medical care.

Who might we share your data with?

We may share your data as follows:

To comply with the law

We may pass your data on when required to do so by law or in response to a request from law enforcement or another regulatory authority.

We may disclose your data to enforce our agreements with you or to protect our rights, property, or safety, or that of our staff or others. This includes sharing data for security and fraud prevention purposes.

This data sharing may be to another ZPG company or to an organisation external to our group of companies.

In emergencies

If we believe someone is in danger, we reserve the right to share data to help protect them.

How do we store your personal data?

We take the protection of your data very seriously.

We follow best practices to secure your data, and we only keep it when the law allows and it is needed for the purposes it was collected. If necessary, we may retain data longer where such data is required for the resolution of a dispute or if we have been asked to by law enforcement.

We retain images for a minimum of 4 weeks.

We may store or process your data outside of the United Kingdom, where local privacy laws do not provide as much protection. When we do that, we use approved data transfer safeguards and legal frameworks 

Your data rights

You have data rights granted to you under data protection law which you can exercise at any time. We manage all rights requests raised to us as the law requires. This means there may be legal reasons why we cannot complete all requests. We have one calendar month to fulfil your rights request but can extend this up to a further two months if we decide it is necessary.

In relation to visiting our sites, your rights are:

Right to be informed: where you have given us your data, you may ask us, for example, about the type of information we hold; how we process your data, including who we have shared it with and how long we will keep your data for.

Right to withdraw consent: where you have given us consent to use your data, you may withdraw this at any time.

Right to erasure: you can ask us to delete the data we have about you. We must comply with this request, unless retaining your data is necessary, for example:

  • to comply with a legal, regulatory, or contractual obligation which requires the use or retention of your data under UK law; or
  • to exercise or defend legal claims.

Right to rectify: although we make efforts to keep it correct, based on the latest data available to us, you can ask us to amend data that is incorrect or is not complete.

Right to restrict data processing: in some situations, you can ask us to limit the use of your data. For example, if your data is due to be erased from our records as the retention period has expired, you may ask us to retain a copy of that data for a period of time - this may be relevant if you have commenced legal proceedings.

Right to object: you can object to our use of your data, when we use it based on our legitimate interests or those of a third-party. If this happens, we will not use your data, unless we can show legitimate reasons and an overriding interest for its use, or for the exercise or defence of legal claims. 

Right of access: you may ask us to give you a copy of the data that we hold about you. We will give you a copy of your data if you request it, once we have checked your identity (ID checks will vary based on the data we hold about you).

Right to complain: you can file a complaint with the ICO (Information Commissioner’s Office), the United Kingdom’s data protection regulator. However, we’d prefer it if you first contact us to let us try to solve your problem – you can find our contact details below.

Contact us

If you want to use one of your personal data rights, please complete the form in our secure portal, or write to us at the address below:

Address: Privacy Team, The Cooperage, 5 Copper Row, London, SE1 2LH.

Changes to this notice

This privacy notice was updated on 22 July 2025. We reserve the right to update this notice and will post any changes on this page, so please check back frequently.