Skip to main content Scroll Top

Privacy Policy & GDPR

This document brings together the Privacy Policy and operational annexes (registers and templates) intended to facilitate a rapid presentation in the event of an inspection by the supervisory authorities (CNIL).

  • Home
  • Privacy Policy & GDPR

Last updated: 15 December 2025

PRIVACY POLICY

Beauchamp Estates France is committed to protecting the privacy of its clients, users and visitors to its website. This Privacy Policy explains how we collect, use, store and protect your personal data, in accordance with the GDPR and applicable French laws.

1. Definitions and interpretation

We may collect and process the following personal data:

  • Information provided directly by you: when requesting information about our properties or services, or when subscribing to our newsletter, you may be required to provide your name, email address, telephone number and property preferences.
  • Information collected automatically: when you visit our website, certain data may be collected automatically, such as your IP address, browser type, pages viewed and time spent on the website.
  • Information from third parties: we may receive information about you from commercial partners or third‑party platforms.

2. Information about us

Our website is hosted and managed by a service provider located in France: OVH CLOUD, 2 rue Kellermann, 59100 Roubaix, France.
VAT number: 656 687187.

Our Data Protection Officer (DPO) is Adrien Willig‑Lamy, reachable by email at [email protected], by telephone at +33 (0)4 93 94 45 45, or by post at: Beauchamp Estates, 19 rue des États‑Unis, 06400 Cannes – France.

3. Scope of this notice

This notice applies to all personal data that we process. Unless otherwise stated, we act as data controller for such personal data.

Our website may contain links to other websites. Please note that we have no control over how your data is collected, stored or used by such websites or companies. We recommend that you review their privacy policies before providing any personal data.

4. Your rights

You have the right to:

  • Be informed about the collection and use of your personal data;
  • Access the personal data we hold about you;
  • Rectification of inaccurate or incomplete data;
  • Erasure (right to be forgotten);
  • Restriction of processing;
  • Data portability;
  • Object to processing;
  • Rights relating to automated decision‑making and profiling.

If you have a complaint regarding our processing of your personal data, please contact us (see section 16). If you are not satisfied with our response, you may lodge a complaint with the CNIL.

CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — Tel: +33 (0)1 53 73 22 22 — Website: www.cnil.fr

5. What information is collected?

Depending on your use of our website and real estate services, we collect a minimum of identification data (name, email and/or telephone number, postal address). Identity and compliance checks (AML/CFT) may require additional documents and data, including for beneficial owners where the client is a company.

Examples of data that may be collected include:

  • Identity data: name, date and place of birth, supporting documents (passport, proof of address), nationality, photograph, signature;
  • Contact details: postal addresses, email addresses, telephone numbers;
  • Professional and financial information: employer, position, taxable income, bank details;
  • Browsing data: IP address, browser type/version, operating system, URL navigation path;
  • Sensitive/specific data in limited cases (criminal convictions/offences) with explicit consent.

6. How do we use your data?

Your data is processed on the basis of:

  • performance of a contract,
  • your consent,
  • a legal obligation, or
  • our legitimate interest.

Purposes include account management, website access, personalisation, market research, service improvement, performance of services and contractual obligations, responding to enquiries, and marketing within legal limits.

You may withdraw your consent at any time and request deletion of your data.

7. Where is your data stored?

Data is processed and stored securely for no longer than necessary for its purpose. By default, data is stored in France/EU. Backups or analyses outside the EU may occur with appropriate safeguards. Security measures include access control, passwords/encryption, limited access and staff training.

8. Do we share your data?

We may share data with our agencies and associated companies (Beauchamp Estates Mayfair, St John’s Wood, Private Office, Mykonos, France, Leslie J Garfield & Co) where necessary.

Third‑party service providers may also process data for compliance, due diligence, promotion, analytics and administrative/technical operations. Contractual and security guarantees are imposed.

Anonymous usage statistics may be shared for legitimate purposes.

9. Transfers outside France/EU

Any transfer outside the EU/EEA is governed by an adequacy decision of the European Commission or by Standard Contractual Clauses ensuring GDPR‑equivalent protection.

In certain cases, disclosure of data may be required by law.

10. How long do we keep your data?

  • Services: for the duration of the contract, then up to 7 years after termination (unless earlier deletion is requested).
  • Newsletters: until withdrawal of consent.

11. Change of ownership

In the event of a sale or change of control, relevant data may be transferred to the new owner for the same purposes. You will be informed and may request deletion or object to the transfer.

12. How can you control your data?

You may limit processing, unsubscribe from marketing communications and register with preference services (e.g. Bloctel) to reduce unsolicited calls.

13. Right not to provide information

Access to the website is possible without providing data, but certain services may require it.

14. How can you access your data?

You may exercise your right of access free of charge by contacting us (see section 16).

15. Cookies

Our website uses first‑party cookies and, where applicable, third‑party cookies, in accordance with PECR regulations. Analytics services (e.g. Google) may be used. Please refer to our Cookie Policy.

16. Contact

Beauchamp Estates is a member of ANM Consommation, a consumer dispute resolution body.

ANM Consommation — 2 rue de Colmar, 94300 Vincennes — Email: [email protected] — www.anm-conso.com

Complaints procedure: contact the relevant office Director, then the Managing Director, then the Mediator.

17. Changes to this Privacy Notice

We may update this notice due to legal or operational changes. Updates are published on our website. Continued use implies acceptance.

18. Mandatory registers

In accordance with the GDPR, we maintain:

  • a register of processing activities,
  • a security incident register,
  • a data subject rights request register.

19. GDPR governance and internal organisation

Beauchamp Estates France has implemented internal governance to ensure ongoing GDPR compliance.

This includes:

  • Appointment of a Data Protection Officer (DPO);
  • Clear internal roles and responsibilities;
  • Procedures covering the entire data lifecycle;
  • Regular staff awareness and training.

All staff are subject to strict confidentiality obligations.

20. Use of informal communication channels

Beauchamp Estates may use SMS or instant messaging tools (e.g. WhatsApp) strictly for:

  • Organising property viewings;
  • Operational follow‑up of files;
  • Transmission of information requested by the client.

Sensitive documents must not be shared via these channels.

21. Data retention policy

Indicative retention periods:

  • Prospects: 3 years from last active contact;
  • Clients: contract duration + legal obligations (up to 7 years);
  • Marketing data: until consent withdrawal;
  • CCTV: 30 days;
  • Accounting and tax data: legal retention periods.

Data is securely deleted or anonymised thereafter.

22. Commercial prospecting and profiling

Prospecting and segmentation may be carried out based on consent or legitimate interest. No legally significant decisions are made solely through automated processing.

23. Enhanced protection of high‑value data

Measures include:

  • Strict access controls;
  • Strong authentication where available;
  • Encryption of sensitive data;
  • Limited data sharing;
  • Regular audits.

Any breach is handled according to Annex D.

24. Exercising data subject rights

Requests may be sent by email to [email protected] or by post. Identity verification may be required. Requests are processed within one (1) month.

25. Legal bases summary

Contract performance, legal obligation, consent and legitimate interest.

26. Electronic marketing

Marketing communications are sent based on consent or existing commercial relationships. Opt‑out is possible at any time.

27. Cookies and trackers management

Non‑essential cookies are only deposited after explicit consent via a CNIL‑compliant banner. Refusal does not affect access to essential features.

28. CCTV (if applicable)

Used solely for security purposes. Retention period: maximum 30 days.

29. Minors’ data

Services are not intended for minors under 15. Any data collected in error will be deleted promptly.

30. Processors and Article 28 GDPR compliance

Internal DPO contact:
Adrien Willig‑Lamy — [email protected] — +33 (0)4 93 94 45 45

Updated: 15 December 2025