At a glance
- British Property Gateway for Real Estate Consultancy, our headquarters in Kuwait, is responsible for your personal data, and we handle it to UK data protection standards.
- We collect what you share with us through our forms, WhatsApp, email and meetings, plus limited technical data needed to run the website.
- We use it to answer your enquiry, deliver the services you ask for and meet our legal obligations. We never sell it.
- Our website uses no advertising cookies. We use Google Analytics cookies only if you agree, and you can change your choice at any time.
- You can ask to see, correct or delete your data, or object to how we use it, by emailing info@bpgcc.com.
01Who we are
British Property Gateway for Real Estate Consultancy (“BPG”, “we”, “us” or “our”) is a company headquartered in Kuwait City, Kuwait (registration no. 551600). We help investors, families and students from the GCC buy and manage property in the UK, supported by our UK company in London, British Property Gateway Ltd (registered in England and Wales), and our office in Dubai.
BPG owns and operates bpgcc.com and is the controller of the personal data described in this policy, which means we alone decide how and why it is used. British Property Gateway Ltd and our Dubai office support our operations and handle personal data only on our instructions — in the case of British Property Gateway Ltd, under a written data protection agreement with us. This policy covers bpgcc.com in English and Arabic, and the personal data we collect when you contact us or use our services in any other way — including by WhatsApp, email, phone, video call or in person.
Although we are based in Kuwait, we apply UK data protection law — the UK GDPR and the Data Protection Act 2018 — to all the personal data we handle, wherever you live.
All contact with BPG goes through our Kuwait headquarters; our UK company and Dubai office do not deal with clients or enquiries directly. If you have a question about this policy or how we handle your data, email info@bpgcc.com with “Privacy” in the subject line, or message us on WhatsApp at +965 9710 9118.
02The information we collect
Depending on how you deal with us, we may collect the following personal data:
- Contact details
- Your name, email address, phone or WhatsApp number, where you live and your preferred language.
- Enquiry details
- What you tell us when you request a consultation, such as your budget range, preferred UK city, investment objectives and any message you include.
- Client information
- If you go ahead with a purchase or another service, what we need to deliver it — for example identity documents, proof of address, information about the source of your funds, details of the property you buy, and the information your solicitor, mortgage broker or letting agent needs to act for you.
- Partner information
- If you are a developer, agent or property owner: your company name, your name and role, business contact details, website and details of the projects you submit.
- Applicant information
- If you apply to work with us: your contact details, location, the role you are interested in, your experience and languages, the CV or LinkedIn profile you share and anything else in your application.
- Communications
- Records of our emails, WhatsApp messages, calls and meetings with you.
- Technical data
- When you visit bpgcc.com, our hosting provider processes technical data such as your IP address, browser and device type and the pages you request, so that it can deliver and protect the site. When you submit a form, we also record the page you sent it from, the site language and the date and time.
We do not ask for special category data — such as information about your health, religion or ethnic origin — and ask that you do not include it in forms or messages. If you are a job applicant and need an adjustment for an interview, we will use that information only to make the adjustment.
We may also receive information about you from the professionals who act for you (such as your solicitor, mortgage broker, developer or letting agent), from someone who refers you to us, from a family member who contacts us on your behalf, and from public sources such as Companies House and HM Land Registry. If you give us information about someone else — for example a family member who will co-own or live in a property — please let them know and point them to this policy.
03How we use it and our legal basis
The law requires us to have a valid legal basis for each way we use your personal data. This table explains what we do and why.
| What we use it for | Our legal basis |
|---|---|
| Replying to your enquiry and arranging your consultation | Taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us |
| Providing our services — sourcing property and coordinating your solicitor, mortgage broker, developer and letting agent through completion and beyond | Performing our contract with you |
| Introducing you to the UK professionals you need to complete a purchase, with your agreement | Performing our contract with you, and our legitimate interests |
| Carrying out identity, anti-money-laundering and sanctions checks where required | Complying with our legal obligations |
| Reviewing partnership submissions and working with developers and agents | Our legitimate interest in building business relationships, and performing our contract with you |
| Assessing job and agent applications | Taking steps at your request before entering into a contract, and our legitimate interest in recruiting |
| Sending you news about new developments and the UK market | Your consent, which you can withdraw at any time |
| Running, securing and improving our website, and preventing spam and fraud | Our legitimate interest in operating a secure and effective website |
| Keeping business records, handling complaints and establishing or defending legal claims | Complying with our legal obligations, and our legitimate interests |
Where we rely on legitimate interests, we have balanced them against your rights and what you would reasonably expect. You can ask us for details of that balance, and you can object at any time (see “Your rights”).
If you do not give us information we need — for example, for legally required identity checks — we may not be able to provide the service you have asked for.
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
04Marketing
We will only send you marketing — such as new UK developments or market updates — if you have agreed to receive it. Sending us an enquiry does not sign you up to marketing.
You can change your mind at any time by telling us on WhatsApp, using the unsubscribe link in any marketing email, or emailing info@bpgcc.com.
07International transfers
We are headquartered in Kuwait, with offices in London and Dubai, and serve clients across the Gulf, so your personal data is accessed and stored in more than one country — including the UK, Kuwait, the United Arab Emirates and the United States, where some of our providers operate.
When personal data is transferred from the UK to a country that does not have UK “adequacy regulations” — including from our UK company to our headquarters in Kuwait — we use a safeguard approved under UK law, such as the International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or, for certified US providers, the UK Extension to the EU–US Data Privacy Framework. Where none of these is available, we transfer data only when it is necessary for a contract with you or for steps you have asked us to take — for example, replying to you in your own country. You can ask us for details of the safeguards we use.
08How long we keep it
We keep personal data only for as long as we need it for the purposes above, then delete or anonymise it securely. Our standard retention periods are:
| Type of information | How long we keep it |
|---|---|
| Enquiries that do not go ahead | Up to 24 months after our last contact with you |
| Client records, including identity and anti-money-laundering checks | 6 years after our relationship ends, to meet legal, tax and regulatory requirements |
| Partner submissions | Up to 24 months after our last contact, or for the length of our partnership plus 6 years |
| Unsuccessful job and agent applications | 6 months after we tell you our decision, unless you agree we can keep them for future roles |
| Marketing preferences | Until you withdraw consent — we then keep a record of your opt-out so we can respect it |
| Technical data | Server logs are kept briefly by our hosting provider; analytics are aggregated and do not identify you |
We may keep information for longer if the law requires it or if we need it to establish or defend a legal claim.
09How we protect it
We use appropriate technical and organisational measures to protect your personal data, including encrypted (HTTPS) connections, limiting access to people who need it, and working with reputable providers that are contractually committed to protecting it.
No transmission over the internet is completely secure. Please do not send identity documents or other sensitive files through our website forms — when we need them, we will tell you how to send them securely.
If a personal data breach is likely to put your rights at risk, we will report it to the Information Commissioner’s Office within 72 hours where required, and tell you without undue delay if the risk to you is high.
10Your rights
Under UK data protection law you have the right to:
- Access
- Ask for a copy of the personal data we hold about you.
- Correction
- Ask us to correct information that is inaccurate or incomplete.
- Deletion
- Ask us to delete your data where there is no good reason for us to keep it.
- Restriction
- Ask us to pause using your data — for example, while we check that it is accurate.
- Objection
- Object to our use of your data based on legitimate interests, and object to direct marketing at any time.
- Portability
- Ask us to send data you gave us to you, or to another organisation, in a commonly used digital format.
- Withdraw consent
- Where we rely on your consent, withdraw it at any time. This does not affect anything we did before you withdrew it.
To use any of these rights, email info@bpgcc.com. We may need to confirm your identity first. We will respond within one month, or within three months if your request is complex — in which case we will tell you. There is normally no fee.
Some rights have exceptions — for example, we may have to keep certain records by law. If we cannot fully meet your request, we will explain why.
11If you live outside the UK
Many of our clients live in Kuwait, Saudi Arabia, the United Arab Emirates, Qatar, Bahrain and Oman. We apply the standards in this policy to everyone, wherever they live. If the data protection law of your country gives you additional rights — for example Saudi Arabia’s Personal Data Protection Law or the UAE’s Personal Data Protection Law — contact us to exercise them and we will respond in line with the law that applies to you.
If you are in the European Economic Area, you have equivalent rights under the EU General Data Protection Regulation and may complain to the data protection authority in your country.
12Children
Our website and services are intended for adults. We do not knowingly collect personal data from anyone under 18, except where a parent or guardian gives it to us — for example, details of a student who will live in a property they are buying. If you think a child has sent us their information, contact us and we will delete it.
13Complaints
If you are unhappy with how we have handled your personal data, please tell us first at info@bpgcc.com so we can try to put it right. We will acknowledge your complaint within 30 days and respond without undue delay.
You also have the right to complain to the UK data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or on +44 303 123 1113, or to the data protection authority where you live or work.
14Changes to this policy
We may update this policy to reflect changes to our services or the law. The “last updated” date at the top shows when it last changed. If we make significant changes, we will let you know — by email or WhatsApp where we have your details, or with a notice on this website.
15Contact us about privacy
British Property Gateway for Real Estate Consultancy, Kuwait City, Kuwait (registration no. 551600), is responsible for your personal data, including data handled by our UK company and Dubai office. We are not required to appoint a Data Protection Officer; our management team in Kuwait oversees data protection. Please send all privacy questions and requests to our Kuwait headquarters:
UK data protection regulator: ico.org.uk