Legal

Privacy policy

How Graystone Property Investments Ltd uses personal information. Last updated: November 2026.

Who we are

Graystone Property Investments Ltd is the controller of your personal information. Graystone Property Investments Ltd. Registered in England & Wales, company no. 16735018. Registered office: 4 Dare Road, Cwmdare, CF44 8UB.

We are registered with the Information Commissioner's Office. Our registration number is CSN9067006.

Questions about this policy or your information: email Daniel@Graystonepropertyinvestments.com or call 07340 248947. Daniel Gray, Founder & Director, handles these requests. We have not appointed a data protection officer.

What we collect

We only collect what we need to speak with you and, if you go further, to work on a deal.

  • Investor sign-up form. Your name, email address, phone number, and the investment criteria you choose to tell us — such as budget, strategy, areas and timescales.
  • Email and phone. Whatever you send us when you write or call, and a record of that conversation.
  • Deal Ready checks. If you want to reserve a property, we ask for proof of identity, proof of address and proof of funds. That can include copies of official documents.
  • This website. A record of your cookie choice, and — only if you accept — HubSpot analytics cookies described below.

You give us this information yourself. We do not buy contact lists.

Why we use it

UK GDPR requires us to name a lawful basis for each use. These are ours.

  • Providing the sourcing service. Taking the steps you ask for before a contract, and performing that service if we work together (Article 6(1)(b)). This covers understanding your criteria, sending a deal pack you have asked for, and supporting a purchase you have decided to make.
  • Anti-money-laundering checks. A legal obligation under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (Article 6(1)(c)). We cannot confirm you as Deal Ready without the identity, address and funds evidence the law requires.
  • Enquiries and the waiting list. Our legitimate interest in answering people who contact us, and in getting in touch with people on the waiting list when a place opens (Article 6(1)(f)). You can object to this at any time.
  • Marketing emails and non-essential cookies. Your consent (Article 6(1)(a)). You can withdraw it at any time. Withdrawing consent does not affect use that was already lawful.

You do not have to give us information. If you don't join the waiting list, I simply won't be able to get in touch when a place opens. If you don't provide the Deal Ready documents, we can't introduce you to a live purchase. We do not make decisions about you by solely automated means.

Who we share it with

We do not sell your personal information.

  • HubSpot hosts the sign-up form and holds our investor records. HubSpot is our processor for that system. Form and contact data may be stored in the EU and may also be accessed from the United States. Where information leaves the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or its Addendum, or the UK–US data bridge.
  • Identity-checking providers, when we carry out Deal Ready checks.
  • Solicitors, brokers and selling agents, and only when you decide to proceed with a particular deal, and with your knowledge.
  • HMRC, the police or other authorities, where the law requires us to disclose information.
  • WhatsApp. If you message us on WhatsApp, Meta processes that conversation as well as us.

How long we keep it

  • Investor-list details: until you ask us to remove them, or after two years with no contact from you, whichever comes first.
  • Anti-money-laundering records: five years after the business relationship ends, which is the period the Money Laundering Regulations require.
  • Deal and contract records: six years, so we can deal with any later legal claim.

Your rights

You can ask us to:

  • provide a copy of the information we hold about you (access)
  • correct anything that is wrong (rectification)
  • delete it, in the circumstances the law allows (erasure)
  • limit how we use it (restriction)
  • stop using it for legitimate interests or for direct marketing (objection)
  • send you, or another service, information you gave us, in a portable format (portability)
  • withdraw consent, where we rely on consent

Email Daniel@Graystonepropertyinvestments.com or call 07340 248947. We may need to confirm it is you before we act. We aim to reply within one month.

You can also complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Website ico.org.uk. Helpline 0303 123 1113. We would appreciate the chance to put things right first.

Cookies

A cookie is a small file a site stores on your device. We also use your browser's local storage for the same kind of job. Strictly necessary storage does not need consent. Analytics cookies do, and we do not set them unless you click Accept.

The sign-up form is embedded from HubSpot so it can reach us. You can submit it if you reject analytics cookies. We do not load HubSpot's analytics script (js.hs-scripts.com) until you accept.

  • Your cookie choice

    Strictly necessary

    We store Accepted or Rejected in local storage on your device (graystone-cookie-consent). It is not sent to us as a tracking cookie. It lets us remember your choice and show the banner only when we need to.

    Kept in this browser until you clear site data.

  • __hs_do_not_track

    Strictly necessary

    Set when you have not accepted analytics cookies. It tells HubSpot not to track you. We remove it if you later accept.

    Up to 6 months.

  • __hstc

    Analytics · only after Accept

    HubSpot's main visitor cookie. It records that you have been to the site and how often.

    6 months.

  • hubspotutk

    Analytics · only after Accept

    HubSpot uses this to recognise a browser over time, including when a form is submitted, so contacts are not duplicated.

    6 months.

  • __hssc

    Analytics · only after Accept

    HubSpot uses this to group page views into one visit.

    30 minutes.

  • __hssrc

    Analytics · only after Accept

    HubSpot uses this to tell whether you have started a new visit.

    Until you close the browser.

reopens the banner so you can accept or reject. You can also clear cookies in your browser. The footer of every page has the same Cookie settings link.

How we protect it

We limit access to people who need it for the work, use reputable providers, and expect them to keep information secure. No website or email is perfectly secure, so please don't send passwords or full card numbers by email.

Changes to this policy

We will post any update on this page and change the date at the top. Last updated: November 2026.

Contact us

Join the waiting list

When a place opens, I'll be in touch.

Join the waiting list