This privacy notice will help you understand how Wallacea Living uses and protects your personal data.
We are Wallacea Living Opco Limited, registered in England and Wales at Bury Lodge, Bury Road, Stowmarket, England, IP14 1JA with company number 13529550.
You can contact our voluntarily appointed Data Protection Officer at simon.ghent@wallacealiving.com if you have any concerns or wish to exercise your rights.
1.1 Our Promises
We’re committed to your data privacy and security. As such we give you these promises:
- We will only collect data about you that is relevant and necessary;
- Your data will only be held on systems that meet compliance standards;
- Your data will only be accessed by those who need it and we will minimise the amount of data that is processed, wherever possible;
- We won’t share or sell your data to any third party, except for the marketing of our own services to you, unless either you have agreed, we are required to share it by law, or we need to fulfil our service commitments to you through a third party that meets our own privacy standards;
- We will always remember that it is your personal data, not ours. As such we will ensure complete transparency and openness with you wherever possible.
- We respect your rights as outlined in the next section and will respond to all requests promptly.
1.2 Your Rights
You have the following rights over any data we hold about you:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You can read more about your rights here.
If you would like to uphold your rights then please contact our Data Protection Officer at simon.ghent@wallacealiving.com.
If you are in dissatisfied with our response you also have the right to lodge a complaint with the Data Protection Authority. This can be done at https://ico.org.uk/concerns/
1.3 How we Collect your Data
We mainly only process the data you have provided to us. This may be from:
- Filling in a form on our website,
- Attending one of our events
- Interactions on Social Media
- Sourcing you basic details from third parties
- Visiting or residing at one of the sites we operate
- Entering a competition or prize draw
Should you purchase our products and services we may also carry out credit and suitability checks. We will let you know in advance of us doing this.
If you belong to an organisation, we may also source your information from public databases and other sources for our Legitimate Interests.
If you ask for us to send information to a relative or friend, you warrant you have the consent from them to share their data with us.
1.4 What Data we Collect
We try and minimise the data held and the exact data elements we hold will be dependent on your journey with us. Typically, data elements we collect include:
- Name
- Current Address
- Telephone Number
- Email Address
- Images of you if you visit our events
Should your enquiry develop, we may also add:
- Date of Birth and age verification
- Passports or other proof of identity and address
- Financial Details including credit check information
- Health Assessments including health records and contacts
- Next of Kin and other needed contacted
- References and other background data
- CCTV footage should you visit our sites
Some of this data is called “special category data” because it requires sensitive treatment. We handle this type of data particularly carefully.
If you work for an organisation, we will collect your work email address and employee name.
Calls may also be recorded for information holding, quality and training purposes.
1.5 How we Process your Data
Data is processed/stored mainly on encrypted cloud services such Microsoft 365, Azure, AWS, our Residents App and Salesforce, including Pardot for marketing. We only store “special categories of data” on our care facility platform and in certain circumstances in Salesforce.
In addition, we may use Large Language Models (LLM) to help us fulfil some of our services to your employee. A full list of these systems can be provided on request. These services all have strong data security at the heart of their systems including ISO27001 and SOC2 certification.
We ensure that access to these services is strictly controlled and include strong authentication processes like Multi Factor Authentication.
If we connect on Social Media platforms, we may transfer this information to our platforms to track our interactions.
Data will be processed in either the UK, EEA/EU data centres or on US based servers that have demonstrated strong Data Security. We may also process your data in countries outside the UK or European Union from time to time in other aspects of our business.
Further to Section 119A of the Data Protection Act 2018 and noting Case C-311/18 in the European Court of Justice, if your data is transferred or processed outside of the UK or EEA, we ensure the safeguards of International Data Transfer Agreements (IDTAs) or Addendums are enforced. Where this is not possible, we ensure that European Standard Contractual Clauses are entered.
We regularly review suppliers for data security compliance to ensure your data is safe and track where your data is held.
All our processes are subject to various internal policies to ensure that your data privacy and security is upheld.
1.6 What we use your Data for
We process your data for several reasons:
- To better understand your needs.
- To develop our services and products and deliver these to you.
- To send invitations to events and follow these up if you have signed up to them
- To send promotional material by post
- To send you promotional emails containing the information we think you will find interesting.
- To administer competition draws, verify age, select winners, and arrange prize collection.
- To contact you to fill out surveys and participate in other types of market research.
- To customize our website according to your online behaviour and personal preferences.
- To ensure you receive high levels of care and safety
- To deliver marketing collateral that may have your image (based on your consent)
We ensure we have a “legal basis” to use your data for the purpose we have collected it for.
Legal Basis for Processing your Data
Your data is only processed based on a defined legal basis. These are:
- Contractual Obligation – We may process your personal data to fulfil a contract with you or your agents.
- Consent – We may require your consent for marketing activity or holding certain data.
- Legitimate Interest –We may hold personal data based on our Legitimate Interests.
- Legal Obligation – We may need to process some of your data for legal obligations.
1.7 Who we share your data with
We share information where agents, resellers or suppliers are involved in the delivery of your service. These include:
- Construction Companies who you will purchase your property from
- Joint agents with us such as funders
- Representatives or professional advisers such as solicitors, accountants and surveyors
- Shared services providers such as leisure facility owners
- Other entities associated directly with Wallacea Living
- If required by law to do so
We use remarketing services from third parties. These may also rely on the use of cookies. You can read more about these in our Cookies Policy.
Wallacea uses a Third-Party Data Protection Officer (DPO) for compliance purposes. Should you have a data protection query or complaint your details may be passed to him to assist us. In all other cases our DPO does not have access to your data.
For competitions and prize draws we may publish or make available winners’ names and the counties they reside in for transparency purposes.
Our website and other materials sent to you may contain links to other third-party websites. We may also offer buttons to social media that link to third party services. We’re not responsible for the content or your data privacy these sites provide through their tools or sites.
If Wallacea is involved in a merger, acquisition or asset sale, personal data may be transferred between parties, but we will provide notice before personal data is transferred and becomes subject to a different privacy policy.
1.8 Data Retention
Dependent on the data you provide us and for what purpose it is provided we may need to retain your data based on your journey with us. Typically, we will retain your data for 5 years if you do not join our community.
If you wish to find out more about your specific data retention, please contact us.
1.9 Data Permissions
Every marketing email sent from Us allows you to opt out of receiving emails from us, except for the purposes of fulfilling any contractual arrangements, by pressing the “unsubscribe” link at the footer of the email. You can also contact us directly to uphold your rights by emailing simon.ghent@wallacealiving.com
We will typically ask for consent to market to you, however, when you enter a competition or prize draw you will receive marketing communications from us unless you opt out. Opting out of marketing does not affect entry to any competition or prize draw we may offer from time to time.
You can also contact us at the email address above and request to opt out, view, export or delete your data.
If you request for your data to be deleted, your name and email address will be added to an exceptions list and all other data removed to the extent possible.
If you ask for us to send information to a relative or friend, you warrant you have the consent from them to share their data with us.
2.0 Legal Compliance
We seek to uphold our legal obligations as covered by the Data Protection Act 2018, Data Use and Access Act 2025 and the General Data Protection Regulation 2016. Our Data Protection Authority is designated as the Information Commission (IC) formally the Information Commissioners Office (ICO).This Privacy Policy is reviewed on a regular basis and was last reviewed in July 2025.
We retain the right to update this notice at any time. We will always document any changes and will publish the latest version on the company’s intranet.
Revision 3.5
Dated: 25.03.2026
