Privacy Policy

Last updated: 22 September 2026

RWinvest is committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, and safeguard the personal information you provide when you use our services.

In this policy, “we”, “us” or “our” means the RWinvest entity you are dealing with (as defined below), and “you” means the individual whose personal information we collect, use and process — whether this information is collected on our website www.rw-invest.com, in person, by telephone, or otherwise.

We are a data controller and are responsible for deciding how we hold and use personal information about you. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The relevant RWinvest entities are:

• RW Invest North Ltd — Company number 10237041, registered office 44 The Pantiles, Tunbridge Wells, England, TN2 5TN
• RW Invest UK Ltd — Company number 05052108, registered office 44 The Pantiles, Tunbridge Wells, Kent, England, TN2 5TN
• RW Invest London Ltd — Company number 11404488, registered office 44 The Pantiles, Tunbridge Wells, England, TN2 5TN
• RW Invest Manchester Ltd — Company number 12909834, registered office 44 The Pantiles, Tunbridge Wells, England, TN2 5TN

We are registered with the Information Commissioner’s Office (ICO) under the following registration numbers:

• RW Invest UK: ZA101993
• RW Invest North: ZA243108
• RW Invest London: ZA458969
• RW Invest Manchester: ZA797295

Our operational office is at Units 2–4, One Baltic Square, Grafton Street, Liverpool, L8 5AN.

Data protection contact

Our data privacy contact is Michael Gledhill. For any question about this policy, how we handle your personal information, or to exercise your rights, please contact:
Email: [email protected]
Post: Data Privacy Contact, RWinvest, Units 2–4, One Baltic Square, Grafton Street, Liverpool, L8 5AN
You have the right to make a complaint at any time to the Information Commissioner’s Office (ico.org.uk), the UK supervisory authority for data protection matters. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Data protection principles

We will comply with data protection law. Personal information we hold about you must be:

1. Used lawfully, fairly and in a transparent way.
2. Collected only for valid purposes that we have clearly explained to you, and not used in any way that is incompatible with those purposes.
3. Relevant to the purposes we have told you about and limited only to those purposes.
4. Accurate and kept up to date.
5. Kept only as long as necessary for the purposes we have told you about.
6. Kept securely.

The information we collect

We may collect, store, and use the following categories of personal information:

• Contact details — name, title, postal address, telephone numbers, email address, social media handles and messaging service identifiers (e.g. WhatsApp, SMS)
• Identity information — date of birth, gender, nationality
• Identity verification documents — certified photographic ID (passports and driving licences), bank statements and utility bills, where required for a property purchase
• Financial information — bank account details for interest and rental payments; payment card details for reservation deposits (card details are destroyed after payment is taken)
• Professional information — job title, place of work
• Demographic information — postcode
• Investment preferences — the types of property, locations, price ranges and yield targets you tell us about
• IP address and device information — including browser type, operating system, and referral source
• Website behavioural information — pages you view, properties you look at, searches you run, and how you navigate our site
• Correspondence — any information you provide to us in emails, forms, telephone calls, WhatsApp, SMS or live chat

Special category data. We do not currently process special category personal data (such as data revealing racial or ethnic origin, religious beliefs, or health information). We will update this policy if this position changes.

How we collect your personal information

We typically collect personal information through:

• Enquiry and reservation forms on our website
• Direct correspondence over the telephone, email, WhatsApp, SMS or live chat (we may monitor and/or record phone calls for quality assurance and training purposes)
• Face-to-face and video meetings
• Property portals we advertise on (including Zoopla, Rightmove and Google)
• Marketing partners who are authorised to promote our properties on our behalf
• Cookies and similar technologies on our website (see the Cookies section below)

We may collect additional personal information about you during the course of your relationship with us.

How we use your personal information

We will only use your personal information when the law allows us to. The lawful bases we rely on are:

1. Contract — where processing is necessary to enter into or perform a contract with you (for example, processing your reservation, arranging a property viewing, or handling a purchase).
2. Legal obligation — where we need to comply with a legal or regulatory requirement (for example, anti-money-laundering identity checks).
3. Legitimate interests — where processing is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests (for example, understanding how our website is used, security monitoring, and marketing to existing customers).
4. Consent — where you have given us specific consent, particularly for direct marketing via email, WhatsApp or SMS.

What we use your personal information for

• To respond to your enquiries and provide the property investment services you request
• To send you information about properties, availability, floor plans, and price lists
• To arrange viewings, meetings, and video screenshare sessions
• To process reservations, purchases, and interest or rental payments
• To carry out identity verification and anti-money-laundering checks
• To administer any contract we have entered into with you
• To keep you updated with construction progress on your property investment
• To make suggestions and recommendations about property investments that may interest you
• To communicate with you about our services and to respond to any questions or complaints
• To improve our website, services and marketing based on how customers interact with them
• Internal record keeping, reporting, and administration
• To protect our website from fraud, abuse, and bot traffic (see the “Cookies and site security” section below)

Some of these grounds may overlap, and there may be several grounds that justify our use of your personal information at any one time.

Direct marketing

We may send you marketing communications about new property investments, special offers, and other information we think you may find useful. This may include:

• Email newsletters and property announcements
• SMS and WhatsApp updates
• Retargeted advertising on third-party platforms (see “Cookies” below)

We will only send you direct marketing communications by email, WhatsApp or SMS where you have consented to receive them, or where we have a lawful basis to do so (for example, you have previously enquired about a property from us and have not opted out).

You can opt out of marketing at any time by:

• Clicking the “unsubscribe” link in any marketing email
• Replying “UNSUB” to any SMS or WhatsApp message from us
• Emailing [email protected]
• Calling us on +44 (0)151 808 1250

Standard message and data rates from your mobile carrier may apply to SMS and WhatsApp messages.

Cookies and website tracking

Our website uses cookies and similar technologies to enable core functionality, understand how visitors use the site, protect against abuse, and deliver relevant marketing. A full list of the cookies we use — including the name, duration, and purpose of each one, grouped by category (Necessary, Functional, Analytics, Performance, and Advertisement) — is set out in our separate Cookie Policy.

When you first visit our website, you will be shown a cookie banner allowing you to accept or reject each category of non-essential cookies. You can change your preferences at any time by clicking the “Consent Preferences” button in the site footer.

Third-party services that set cookies on our website fall into the following categories:

• Analytics — services that measure how visitors use our website in aggregate
• Advertising — services that deliver retargeted and personalised advertising, and measure the performance of our campaigns across search, social, and display networks
• CRM and lead capture — services that store enquiries you submit, track your interactions with our team, and manage follow-up communications
• Chat and screenshare — services that enable live chat and scheduled video calls with our team
• Security — services that protect our website and forms from bots and abuse, including Cloudflare Turnstile (see below)

The specific vendors we use in each category, and the cookies they set, are listed in our Cookie Policy.

Cloudflare Turnstile

We use Cloudflare Turnstile on our forms to protect against bots, spam and abuse. Turnstile runs invisibly in the background when you interact with a form on our website — you will not usually see a challenge or checkbox.

Turnstile processes a limited set of technical signals from your browser (including your IP address, TLS fingerprint, user-agent header, and the identifier of the form you are interacting with) solely to distinguish human visitors from automated bot traffic. Cloudflare has told us that it cannot directly identify any individual from these signals.

When Turnstile is protecting our forms, Cloudflare acts as our data processor and processes these signals on our instructions to secure our website. When Cloudflare processes these signals to improve Turnstile’s own bot-detection capabilities, Cloudflare acts as an independent data controller. Cloudflare’s processing is described in full in the Cloudflare Turnstile Privacy Addendum and the Cloudflare Privacy Policy.

Because Turnstile is a security service that is strictly necessary to protect our website and forms, we rely on our legitimate interests as the lawful basis for using it, and no consent banner opt-in is required.

Data sharing

We may share your personal information with third parties where required by law, where necessary to administer our relationship with you, or where we have another legitimate interest in doing so. Third parties we share personal information with include:

• Letting agency partners — if you enquire about renting a property. We share your details with our appointed letting agency partners for the purpose of dealing with property rentals.
• Solicitors — if you reserve or purchase a property. We share your identity verification documents and reservation information with the appointed solicitors for the purpose of processing your purchase.
• Property developers — we share the information from our reservation form with the developer for the purpose of processing your purchase, and your bank details for the purpose of processing interest and rental payments.
• Our marketing partners — where a marketing partner is authorised to send communications on our behalf, we may share your contact details with them under contract, solely for the purpose of that authorised communication.
• Third-party service providers — including analytics, advertising, CRM, hosting, IT security, and communications platforms that process personal data on our behalf. All such providers are contractually required to process personal data only on our instructions and to keep it secure.
• Insurers, auditors and professional advisers — to comply with our insurance, audit, and professional obligations.
• Regulators and law enforcement — where required by law, to investigate a suspected breach, or to establish or defend a legal claim.
• In connection with a business sale, merger or restructure — a full or partial sale of the RWinvest business could involve sharing personal data with the acquiring party. Any acquiring party would be required to use your personal data in the same way as set out in this privacy notice.

A full list of the third-party service providers we currently use is available on request from [email protected].

We do not sell your personal data.

International transfers

Some of the third parties we use store or process personal data outside the UK, including in the European Economic Area and the United States. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place — for example, UK Addendum to EU Standard Contractual Clauses, or transfers to jurisdictions covered by a UK adequacy decision. To request further information or a copy of the safeguards in place, please email [email protected].

Third-party links on our website

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Data security

We have put in place appropriate technical and organisational measures to prevent your personal information from being accidentally lost, misused, or accessed in an unauthorised way, altered, or disclosed. Details of these measures are available on request. We limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know, and they are subject to a duty of confidentiality.

We have put in place internal procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and the applicable legal requirements.

In some circumstances, we may anonymise your personal information so that it can no longer be associated with you, in which case we may use it without further notice to you. Once you are no longer a customer, we will retain and securely destroy your personal information in accordance with applicable laws and regulations.

Details of specific retention periods for different categories of personal information are available on request from [email protected].

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to receive a copy of the personal information we hold about you (a “subject access request”) and check that we are lawfully processing it.
• Right to rectification — to have any incomplete or inaccurate information we hold about you corrected.
• Right to erasure — to ask us to delete or remove personal information where there is no good reason for us continuing to process it.
• Right to restrict processing — to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format, and to have it transferred to another controller where technically feasible. This right only applies to information you initially provided by consent, or where we used the information to perform a contract with you.
• Right to object — to object to processing where we are relying on legitimate interests, or to object at any time to direct marketing.
• Right in relation to automated decision-making — to be informed of, and to challenge, decisions made about you using automated means. We do not currently make decisions about you using solely automated means; we will notify you if this changes.
• Right to withdraw consent — where we are relying on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact [email protected]. You will not have to pay a fee to access your personal information (or to exercise any of the other rights), but we may charge a reasonable fee if your request is clearly unfounded or excessive, or refuse to comply in such circumstances. We may need to request specific information from you to help us confirm your identity before responding.

Your duty to inform us of changes

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

If you fail to provide personal information

If you fail to provide certain information when requested, we may not be able to provide you with our services or perform any contract we have entered or are trying to enter into with you.

Changes to this policy

We reserve the right to update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this policy and, where appropriate, notify you directly.

RW Invest North Ltd, RW Invest UK Ltd, RW Invest London Ltd and RW Invest Manchester Ltd — trading as RWinvest.