Privacy Policy & Terms

26-Aug-25

Hillwood Investment Properties International, Ltd.

(“Company”, “Us”, “Our”, “Ourselves”, or “We”) respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. The Company is the controller of personal data that you provide to Us in relation to this Website. The Company complies with all applicable data privacy laws, including (a) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”); (b) the GDPR as it forms part of domestic law of the United Kingdom by virtue of the European Union (Withdrawal) Act 2018 (“UK GDPR”); and (c) the Data Protection Act 2018, and the local laws applicable in the various countries in which Our group entities operate.

This Privacy Policy describes:

• The personal data We may collect or that you may provide when you access or use the Company’s website located at http://www.hillwooduk.com (the “Hillwood Site”).
• Our practices for collecting, using, maintaining, protecting, disclosing, and otherwise processing that personal data.

This Privacy Policy applies only to personal data We collect through the Hillwood Site and any electronic communications sent through the Hillwood Site.

This Privacy Policy DOES NOT apply to personal data that:

• We collect offline or on any other Company or affiliate apps or websites, including websites you may access through the Hillwood Site.
• You provide to or is collected by any third party.

Any other Company or affiliate websites and apps and the websites and apps of third parties have their own privacy policies, which We encourage you to read before providing personal data on or through them. Please read this Privacy Policy carefully to understand Our policies and practices regarding your personal data and how We will treat it. If you do not agree with Our policies and practices, do not use the Hillwood Site. By using the Hillwood Site, you agree to this Privacy Policy and Terms of Use. This Privacy Policy must be read together with the Cookie Policy available at hillwooduk.com/en-gb/cookie-policy that you have accepted in order to enter this site.

1. Personal Data We Collect and How We Collect It

We collect personal data from and about users of the Hillwood Site:

• Directly from you when you provide it to us
• Automatically when you use the Hillwood Site.

A. Personal Data We Collect

We may collect and process the following types of personal data:

• Identity Data includes first name, last name, any previous names, username or similar identifier, marital status, title, date of birth and gender.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Financial Data includes bank account and payment card details.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Usage Data includes information about how you interact with and use our website, products and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

It is important that the personal data we hold about you are accurate and current. Please keep us informed if your personal data changes during your relationship with us.

B. Cookie Policy

Please refer to Our Cookie Policy available at [which you have acknowledged in order to enter this site as regards data We may automatically collect about you when you access the Hillwood Site. This Privacy Policy must be read together with the Cookie Policy.

We do not perform behavioural tracking, such as using these technologies to collect data about your activities over time and across third-party websites, apps, or other online services.

2. How We Use Your Personal Data

We will only use your personal data fairly, to the extent necessary for those purposes outlined in this Privacy Policy, and where We have a lawful reason to do so. Any personal data that we receive but are not allowed to process will be promptly deleted.

The information we collect and what we use it for will depend on the nature of our relationship with you. This may include using your personal data:

• for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract;
• for compliance with a legal obligation to which We are subject;
• in order to protect your vital interests or those of another natural person;
• for the performance of a task carried out in the legitimate and considerable public interest or in the exercise of official authority vested in Us;
• to prevent threats to state or public security or to prosecute criminal offences;
• where processing is necessary for the purposes of the legitimate interests of Ourselves or the third party, except where such interests are overridden by the interests or fundamental rights and freedoms of yourself or another data subject that require the protection of personal data, in particular when the data subject is a child.
• Where we have your consent.

We use your data on the following bases:

We will not collect additional categories of personal data or use the personal data We collected for materially different, unrelated, or incompatible purposes without providing you with previous notice.

We will not use your personal data to conduct any automatic decision-making (profiling).

We will not retain your personal data for longer than necessary to fulfil the purpose for which it was collected; comply with any legal, regulatory, or reporting obligations; or otherwise fulfil a legitimate public interest or legal grounds to retain such data. You can request details of retention periods for your personal data by contacting us. When determining the relevant retention periods, we will take into account factors including: our contractual and business relationships with you; legal obligations under applicable law to retain data for a certain period of time; statute(s) of limitations under applicable law(s); (potential) disputes; and guidelines issued by relevant supervisory authorities.

3. Disclosure of Your Personal Data

We may disclose information that does not constitute personal data without restriction.

In addition, We may disclose personal data that We collect and/or you provide, to the extent legally permissible:

• if and to the extent required for any purposes of legitimate processing, to Our subsidiaries, affiliates and Our and their employees, contractors, service providers, and other third parties We use to support Our business and website and who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which it was disclosed to them.
• to the extent it is not inconsistent with the purpose of the processing, to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by the Company about the Hillwood Site users is among the assets transferred.
• to fulfill the purpose for which you provide it.
• with your consent.
• if and to the extent it becomes necessary to comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• to enforce Our rights arising from the Terms of Use or any contracts entered into between you and Us.
• if and to the extent it becomes necessary to protect the rights, property, or safety of Our customers, tenants, employees, or others. If necessary and legally permissible, this may include exchanging data with other companies and organizations for the purposes of public safety or fraud protection.

However, We will only transfer your personal data outside of the European Economic Area or United Kingdom (as applicable) if the transfer is compliant with the GDPR and/or the UK GDPR (as applicable) and all other applicable laws (e.g., as applicable where the transfer is to a country which has been assessed by the European Commission as ensuring an adequate level of protection for the concerned personal data and/or where the transfer is based on adequacy regulations pursuant to Article 45 of the UK GDPR as applicable, which may include forms of standard contractual clauses approved by the relevant supervisory authority in which case we will also ensure that appropriate safeguards are in place). You can request further details by contacting us.

4. Exercising Your Rights Regarding Your Personal Data

You have certain legal rights in respect of your personal data including the right to information (Article 15 of the GDPR), right to rectification (Article 16 of the GDPR), right to be forgotten (Article 17 of the GDPR), right to restriction of processing (Article 18 of the GDPR), right to data portability (Article 20 of the GDPR), right to object (Article 21 of the GDPR) as well as right to lodge a complaint (Article 77 of the GDPR).

In particular your rights include a right to:

• object to the use of your personal data. When you exercise this right, We will either stop using your personal data or explain to you why We are unable to do so.
• to restrict Our use of your personal data, so that it can only continue subject to restrictions.
• ask for a copy of the personal data that We hold about you, subject to certain exemptions, e.g. if the personal data were recorded only because they may not be erased due to legal or statutory provisions on retention, or only serve the purposes of monitoring data protection or safeguarding data and providing information would require a disproportionate effort, and appropriate technical and organizational measures make processing for other purposes impossible.
• ask Us to update or correct inaccurate information about you.
• require Us to delete (or stop making active use of) your personal data if it is no longer needed for the purpose for which it was collected (except if We are legally allowed to keep your personal data, e.g. if the deletion would conflict with retention periods set by statute or contract or if, in the case of non-automated data processing, deletion would be impossible or would involve a disproportionate effort due to the specific mode of storage and if your interest in deletion can be regarded as minimal).
• where Our processing is based on consent, the right to withdraw that consent.
• request a copy of the personal data that you provided to Us so that you can use it for your own purposes.
• object to any decision that significantly affects you being taken solely by a computer or other automated process.
• to require personal data that you have provided to the Company and that are processed by using automated means, based on your consent or the performance of a contract with you, to be provided to you in machine-readable format so that they can be “ported” to a replacement service provider.

If you wish to exercise any of these rights, please contact . The fulfilment of such requests may be subject to further exceptions or exemptions permitted under the GDPR, the UK GDPR or other data privacy laws (in which case We will inform you about the occurrence of such exception or exemptions if you contact Us to exercise your rights – for example, We will not be able to comply with your request to delete your personal data if and to the extent We are under legal obligation to retain such personal data).

We will require you to provide satisfactory proof of your identity in order to ensure that your rights are respected and protected. This is to ensure that your personal data is disclosed only to you.

We will usually respond to legitimate requests within one month of receipt. In some cases (for example, if your request is particularly complex or you have made multiple requests) we may need more time, in which case we will let you know and keep you updated. If your request is clearly unfounded, repetitive or excessive, we may not be required to fulfil it or we may charge a reasonable fee to do so.

5. Data Security

We have implemented appropriate (technical and organizational) measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration, and disclosure. In this respect, We in particular take into account the relevant technical guidelines and recommendations from the UK’s Information Commissioner’s Office. All data you provide to Us is stored on secure servers behind firewalls and encrypted. However, the safety and security of your data also depends on you. We urge you to be careful about giving out personal data in public areas of the Hillwood Site such as message boards. The personal data you share in public areas may be viewed by any user of the Hillwood Site. Unfortunately, the transmission of personal data via the internet and mobile platforms is never completely secure. We are not responsible for the circumvention of any privacy settings or security measures We provide.

6. Terms of Use

All information appearing on the Hillwood Site is provided for your convenience only.

All artwork, videos, images, content, text, and other materials appearing on the Hillwood Site are subject to copyrights owned by Company, its affiliates, or its licensors. Any reproduction, retransmission, or replication of all or part of any materials, content, image, video, or recording found on the Hillwood Site is expressly prohibited unless the Company or copyright owner of the material has expressly granted its prior written consent to reproduce, retransmit, or republish the material. All rights reserved.

The names, trademarks, service marks and logos of the Company appearing on the Hillwood Site may not be used in any advertising or publicity, or otherwise to indicate the Company’s sponsorship of, or affiliation with, any product or service, without the Company’s prior express written permission.

The Hillwood Site may contain links to social media sites that are not under the control of the Company. These links are provided as a convenience to you and the Company is not responsible for the content, policies, or security protocols of any such sites. The inclusion of any such link within the Hillwood Site does not imply any approval or endorsement of such linked sites or their operators.

Any claim relating to the Privacy Policy and/or Terms of Use, or the operation or use of the Hillwood Site or the products and services thereon, shall be governed by the laws of [England and Wales] without regard to its conflict of law provisions. The venue for any claim to be brought before court shall be in London, United Kingdom.

7. Children Under the Age of 13

The Hillwood Site is not intended for children under 13 years of age, and We do not knowingly collect personal data from children under 13. If We learn that We have collected or received personal data from a child under 13 without verification of parental consent, We will delete that data. If you believe We might have any data from or about a child under 13, please contact Us at HIP@hillwood.com.

8. Contact Information

To ask questions or comment about this Privacy Policy and Terms of Use, contact Us at: HIP@hillwood.com or by calling Our number: +(44) 02038593520.

Complaints

You have a right to file complains with the relevant data protection authority. Contact details of the UK’s Information Commissioner’s Office can be found at https://ico.org.uk/.

A list of other data protection authorities within the European Economic Area is available at https://edpb.europa.eu/about-edpb/board/members_en.

9. Changes to this privacy policy

We may update or change this privacy policy from time to time. We will notify you of changes where we are required to do so.