Legal

Privacy Policy

Last updated: 24 September 2026

This policy explains how personal information is collected and used when you visit the RIG Property website (rigproperty.com) or send us an enquiry through it. We have written it to reflect how the website actually works today.

Who we are

The data controller responsible for your personal information is:

Information we collect through our enquiry forms

The website has six enquiry forms: Property Management, Rent-to-Rent Serviced Accommodation, Rent-to-Rent HMO, Lease Options, Deal Sourcing and General Contact.

All six forms ask for:

• Your name (required)
• Your email address (required)
• Your phone number (optional)
• A message telling us more about your enquiry (optional)

The Property Management, Rent-to-Rent Serviced Accommodation, Rent-to-Rent HMO and Lease Options forms also ask for the following, all optional: property location, property type, number of bedrooms, number of bathrooms, and whether the property has parking.

The Deal Sourcing form also asks for the following, all optional: where in Dorset you are looking to invest, property type, how much you are looking to invest, and number of bedrooms where relevant.

The General Contact form also asks for a property postcode (optional).

Each enquiry is also labelled with the service it relates to and the page of the website it was sent from.

We do not ask for identity documents, dates of birth or details of your personal financial circumstances through the website forms. Please avoid including this kind of information in your message.

Spam protection

Our forms include a hidden anti-spam field that people do not see. Submissions that complete it are treated as automated (bot) submissions and are rejected. Rejected submissions are not sent to HubSpot or by email.

How we use your information

We use the information you submit to:

• respond to your enquiry and discuss your property or investment requirements;
• understand which of our services is relevant to you;
• keep a record of our communications and the progress of your enquiry.

Our lawful bases under UK GDPR are: taking steps at your request before potentially entering into a contract with you (Article 6(1)(b)), where you are asking about using our services; and our legitimate interests in responding to, recording and managing enquiries (Article 6(1)(f)). We do not rely on consent to handle your enquiry, and we do not use enquiry details for marketing.

Where your enquiry goes

When you submit an enquiry form:

• Your enquiry is processed through servers operated by Lovable, the platform that hosts the website and handles form submissions.
• It is then sent to our customer relationship management (CRM) system, HubSpot. A Contact record is created containing your name, email address and phone number (if provided). If a Contact with the same email address already exists, that record is updated with the details you submit.
• A new Deal record is created in HubSpot for each enquiry and linked to your Contact record. It holds the service you enquired about, your property or investment answers, your message and the page you enquired from.
• Once HubSpot has saved the enquiry, a notification email containing your enquiry details is sent from notify.rigproperty.com to hello@rigproperty.com using Lovable's email service, so our team knows to follow up.
• Our hello@rigproperty.com mailbox is hosted by Microsoft 365.

The website itself does not keep a separate database of enquiries.

Third-party service providers

We use the following providers, where applicable, to run the website and handle enquiries:

• HubSpot — our CRM, where enquiry Contacts and Deals are stored.
• Lovable — website hosting, processing of form submissions, and sending of notification emails. Lovable may also process standard hosting and visitor logs (such as IP address, browser information and pages requested) and technical error information if a page fails to load correctly.
• Microsoft 365 — hosts the hello@rigproperty.com mailbox that receives enquiry notifications.
• Google Fonts — supplies the website's typefaces. When fonts are loaded, Google may receive your IP address and browser information.

International transfers

Some of these providers, or their own sub-processors, process information outside the UK. Where this happens, the transfer is protected as follows:

• HubSpot (HubSpot, Inc., USA) — HubSpot is certified under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as providing adequate protection for transfers to certified US organisations. HubSpot's data processing terms also include standard contractual clauses.
• Lovable (Lovable Labs AB, Sweden) — Sweden is in the European Economic Area, which the UK recognises as providing adequate protection. Where Lovable uses sub-processors outside the UK and EEA, its data processing agreement relies on recognised safeguards, including the EU-US Data Privacy Framework and its UK Extension and standard contractual clauses.
• Microsoft 365 (Microsoft) — Microsoft is certified under the UK Extension to the EU-US Data Privacy Framework, and its data protection terms include standard contractual clauses with the UK Addendum.
• Google Fonts (Google) — Google is certified under the UK Extension to the EU-US Data Privacy Framework and also relies on standard contractual clauses.

You can ask us for more information about these safeguards using the contact details below.

Cookies, analytics and tracking

The website currently has:

• no newsletter sign-up;
• no advertising pixels;
• no analytics tracking;
• no marketing cookies.

If we introduce any of these in future, we will update this policy and ask for your consent where required.

Booking

Our "Book Direct" option is not yet connected to a booking system. There is currently no Guesty integration and no booking information is collected through the website.

Marketing

Sending an enquiry does not subscribe you to marketing communications. If we send marketing communications in future, we will only do so with the appropriate consent or other lawful basis, and you will be able to opt out at any time.

How long we keep your information

We keep personal information only for as long as is necessary for the purposes described in this policy. We decide how long to keep it using the following criteria:

• Enquiries that do not lead to working together — kept while the enquiry is active and for a reasonable period afterwards in case you come back to us, then reviewed and deleted from HubSpot and our mailbox when no longer needed.
• Enquiries that lead to working together — kept for as long as we have a relationship with you, and afterwards for as long as we need to meet legal, tax or accounting obligations or to deal with any claims.
• If you ask us to delete your information — we will delete it unless we need to keep it for one of the reasons above.
• Hosting, email-sending and error logs — kept by Lovable for the periods set out in its own terms and policies.

Your rights

Under UK data protection law (UK GDPR), you have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, where applicable;
• ask us to restrict how we use your information, where applicable;
• object to our use of your information, including where we rely on legitimate interests;
• ask for your information in a portable format, where applicable.

To exercise any of these rights, email us at hello@rigproperty.com or write to RIG Management Ltd, 18 High West Street, Dorchester, Dorset, DT1 1UW. We may need to confirm your identity before acting on a request.

Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint.

Changes to this policy

We may update this policy when the website or our services change. The date at the top shows when it was last updated.