Last updated on: 13 August 2026
1. What this Privacy Policy Covers
We are Bernard Gordon & Co Limited (“Bernard Gordon”, “we”, “us”), a specialist commercial property agency, business brokerage and consultancy founded in 1993. We are committed to being open and transparent about how we handle personal data.
For the purposes of UK data protection law, Bernard Gordon is the “data controller” of personal data we collect through our website and in connection with enquiries about, and the provision of, certain services. This means we determine what personal data is collected through the website, how it is used and how it is protected, as described in this Privacy Policy (the “Website Privacy Policy”).
This Website Privacy Policy applies only to personal data collected through your use of our website, including information submitted through website enquiry forms and information collected in connection with your enquiries, subscriptions and interactions with our website.
2. What personal data we collect
Our website is primarily informational. We do not operate user accounts. Depending on how you interact with our website, we may collect the following personal data:
- Title and name
- Email address
- Contact number
- Company name
- Information relating to your enquiry or your interest in our services or properties
- Any other information you voluntarily provide to us through our website or communications with us
This information is collected through:
- Contact or enquiry forms on our website
- Online subscription forms
- Information that you provide to us directly
- Information that we manually add to our database where you have given us permission to do so
Where you subscribe to receive communications from us online, the personal data you provide may be automatically added to our customer database.
Certain information collected through our website, such as contact details submitted through forms, may directly or indirectly identify you. We use this information only for the purposes described in this Website Privacy Policy.
3. Why we collect your data
We collect your personal data for the following purposes:
- Responding to enquiries submitted through our website
- Managing and maintaining our database of contacts and subscribers
- Understanding and responding to your interest in properties and our services
- Sending you information about properties, services and other business opportunities that may be of interest to you
- Maintaining ongoing communications and engagement with you where appropriate
- Sending marketing communications where permitted by applicable law
- Complying with our legal and regulatory obligations, including applicable anti-money laundering (AML) requirements
4. Our lawful bases for processing
We only use your personal data when we have a valid legal reason to do so under applicable data protection laws.
Depending on the circumstances, we may rely on one or more of the following lawful bases:
- Legitimate interests, including responding to enquiries, managing our business relationships, understanding your interest in properties and providing information about properties or services that may be relevant to you;
- Consent, where we ask you to consent to receive particular marketing communications or where consent is otherwise required by law; and
- Compliance with a legal obligation, including where we are required to collect or retain information for anti-money laundering or other regulatory purposes.
5. Sharing your data
We may share your personal data with carefully selected third parties when this is necessary for our operations. We never sell your personal data. We may share your information with:
- Service providers that support the operation of our website and business, including our customer relationship management (CRM) and email marketing providers;
- Our website and search engine optimisation (SEO) service providers, where necessary for them to provide services to us;
- Professional advisers and other service providers where reasonably necessary for the operation of our business or to comply with our legal obligations; and
- Relevant third parties where necessary to provide services to you or respond to your enquiry.
We will only permit third-party service providers to process personal data where necessary for the services they provide to us and, where applicable, subject to appropriate contractual and data protection safeguards.
6. How long we keep your data for
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including for managing enquiries, maintaining our database, sending communications and complying with legal and regulatory obligations.
In particular, contact details may remain on our database while you continue to engage with us or receive communications from us. Where you unsubscribe from marketing communications, we will update our records accordingly and will not continue to use your contact details for marketing purposes, except where otherwise permitted or required by law.
Certain information may need to be retained for longer where required to comply with legal or regulatory obligations, including anti-money laundering requirements.
7. Data Security
We take the security of your personal data seriously and use appropriate and reasonable measures to protect it from loss, misuse, unauthorised access, alteration or disclosure. These measures, including the secure storage of data and associated tools, are designed to provide a level of security appropriate to the nature of the data we hold, and the risks involved in our processing activities.
8. Cookies and analytics
Our website may use cookies or similar technologies to function properly and understand how visitors interact with the site. Cookies are small text files placed on your device when you visit a website. Some are essential, while others help us improve performance and user experience.
We also use third-party service providers to assist with website search engine optimisation and may use analytics tools, such as Google Analytics.
Where required by applicable law, we will obtain your consent before placing non-essential cookies or using similar technologies on your device. You may also manage cookies through your browser settings.
9. Your Rights
If you are based in the United Kingdom (UK) or the European Economic Area (EEA), you have certain rights in respect of your personal data. In certain circumstances, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of any inaccurate or incomplete personal data.
- Request deletion of your personal data in certain circumstances.
- Request that we restrict certain processing operations.
- Request a copy of your personal data in a portable format (the right to data portability).
- Withdraw your consent at any time where we rely on consent as the legal basis for processing.
- Request human review of certain decisions based solely on automated processing and object to profiling where applicable.
- Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
- Object to certain processing of your personal data.
If you want to exercise any of these rights, please contact us using the email below. We will be required to verify your identity before responding.
10. Marketing
We may send you marketing communications by email regarding properties, services and other business opportunities that may be of interest to you, where permitted by applicable law. We currently send marketing communications on a regular basis, including daily communications in some circumstances.
You can opt out of receiving marketing communications at any time by clicking the “unsubscribe” link at the bottom of our marketing emails or by contacting us using the details set out in Section 12 below.
Where you unsubscribe from marketing communications, we will stop sending you marketing communications, subject to any information we are required to retain for legal or regulatory purposes.
11. International Transfers
Based on our current business operations, we do not generally transfer personal data outside the UK. However, certain third-party service providers we use to operate our website, communications and other aspects of our business may process or store personal data outside the UK. Where personal data is transferred outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.
12. Contact Us
If you have questions, concerns or complaints regarding this Privacy Policy or our use of your personal data, you can contact us by emailing [email protected]
Bernard Gordon will acknowledge any complaint within 30 days of receipt and will investigate and respond without undue delay. If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO).
We may update this Privacy Policy from time to time, and any material changes will be communicated to you.