Privacy Policy
Cobalt Ltd is committed to protecting your personal data. This privacy policy explains who we are, how and why we collect, store, use and share your personal information, and how you can contact us or the relevant supervisory authority if you have a concern.
The details you provide will only be used by Cobalt Ltd and any associated Cobalt group businesses in connection with the purposes set out below. We will never swap, share or sell your details without your consent, except where the law requires or permits us to do so.
We are responsible for certain personal information about you which you provide to us. When we do so, we act as 'controller' of that information for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The details you provide will only be used by Cobalt Ltd and any associated Cobalt group businesses in connection with the purposes set out below. We will never swap, share or sell your details without your consent, except where the law requires or permits us to do so.
We are responsible for certain personal information about you which you provide to us. When we do so, we act as 'controller' of that information for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What is the definition of personal data?
Personal data is any information that can identify you, either directly or indirectly. This may include your name, gender, date of birth, personal or professional interests, email address, postal address, telephone number, bank details, or information provided for credit or other financial checks.
The information we collect, and how we use it, will depend on the reason it is required. We will only collect data that is relevant and necessary for a clear and specific purpose.
The information we collect, and how we use it, will depend on the reason it is required. We will only collect data that is relevant and necessary for a clear and specific purpose.
Where do we obtain personal data from?
When you give it to us directly
We collect personal data about you when you register your interest with us, either by post, email, telephone or via our website
When you give it to us indirectly
We may also obtain information about you from other sources, such as a family member, friend, managing agent or professional adviser acting on your behalf.
Social Media
We will only contact you through social media sites such as Facebook, LinkedIn, Instagram or X if your privacy settings give us access to your contact details.
Website
We may collect information via cookies on our website, cobalt.ltd.uk, or through other automated monitoring of our website and technical systems. Details of the cookies we use, and how to control them, are set out in our separate cookie notice.
We collect personal data about you when you register your interest with us, either by post, email, telephone or via our website
When you give it to us indirectly
We may also obtain information about you from other sources, such as a family member, friend, managing agent or professional adviser acting on your behalf.
Social Media
We will only contact you through social media sites such as Facebook, LinkedIn, Instagram or X if your privacy settings give us access to your contact details.
Website
We may collect information via cookies on our website, cobalt.ltd.uk, or through other automated monitoring of our website and technical systems. Details of the cookies we use, and how to control them, are set out in our separate cookie notice.
How and why do we use your personal data?
We use your personal data in a number of ways, depending on your instructions and contact preferences, primarily by email and telephone. We will only process your data where we have your consent to do so, or another legal or legitimate reason, such as to take steps at your request before entering into a contract, to comply with a legal obligation, or where processing is necessary for our legitimate interests as a property and asset management business (for example, managing tenancies, properties and supplier relationships) and those interests are not overridden by your rights.
How we keep your data secure
We maintain appropriate technical and organisational measures to protect the personal data we hold against unauthorised or unlawful processing, and against accidental loss, destruction or damage. Access to personal data is restricted to those who need it to carry out their role, and we review our security arrangements periodically.
If something goes wrong
If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will assess the incident and, where required, notify the Information Commissioner's Office (ICO) without undue delay and, in any event, within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to you, we will also notify you directly, without undue delay, together with information on the steps we are taking and any action we recommend you take.
International transfers
We do not routinely transfer personal data outside the UK. Where we, or a supplier or service provider acting on our behalf, need to transfer personal data outside the UK, we will only do so where an adequate level of protection is in place, for example, under UK adequacy regulations or using UK International Data Transfer Agreements or Standard Contractual Clauses with appropriate additional safeguards.
Promotional communications
We may use your personal information to send you updates (by email, text message, telephone or post) about our services. Where we have a legitimate interest in processing your personal information for promotional purposes (see "How and why we use your personal data" above), we will not necessarily require your consent. However, where consent is needed, we will ask for this separately and clearly.
You have the right to opt out of receiving promotional communications at any time by:
● Contacting us using the details in "How can you ask us to stop using your personal data?" below
● Using the 'unsubscribe' link in emails or texts
You have the right to opt out of receiving promotional communications at any time by:
● Contacting us using the details in "How can you ask us to stop using your personal data?" below
● Using the 'unsubscribe' link in emails or texts
Who do we share your information with?
We will not share or sell your personal data with any third parties without your consent, other than to service providers and professional advisers who process data on our behalf and under our instructions (for example, IT, accounting and managing agent services), or where we are required to do so by law.
How long do we keep your data?
We keep information for no longer than is reasonably necessary for the purposes set out in this policy. In line with The Property Ombudsman's (ww.tpos.co.uk) code of practice, we generally keep personal information for 7 years after our last contact with you, unless a longer period is required to comply with a legal, regulatory or accounting obligation, or to establish, exercise or defend legal claims.
How can you ask us to stop using your personal data?
You have the right to withdraw consent for us to contact you at any time and to object to or restrict certain processing, by the following methods:
By email: hello@cobalt.ltd.uk
By post: Cobalt Ltd, Suite 5, 7 High Street, Chislehurst, Kent, BR7 5AB
Withdrawing this consent may limit the services you receive from us and our ability to communicate effectively with you. Your rights will not be affected.
By email: hello@cobalt.ltd.uk
By post: Cobalt Ltd, Suite 5, 7 High Street, Chislehurst, Kent, BR7 5AB
Withdrawing this consent may limit the services you receive from us and our ability to communicate effectively with you. Your rights will not be affected.
How can you update or correct the personal data we hold on you?
You have the right to correct your data and update your preferences at any time. You also have the right to ask us to erase your data, and to ask us to stop processing it, in certain circumstances. We will respond to any such request within one month, as required by UK data protection law.
How can you lodge a complaint about the way in which we have used your data?
If you have contacted us and are unhappy with the way we have dealt with your query about the use of your data, you have the right to lodge a complaint with a supervisory authority.
The ICO (Information Commissioner's Office) is the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
You can find out more or report a concern through the ICO website: ico.org.uk/concerns/handling
The ICO (Information Commissioner's Office) is the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
You can find out more or report a concern through the ICO website: ico.org.uk/concerns/handling
How will you know if we make changes to this privacy policy?
The date displayed below indicates when this privacy policy was last updated.
4 September 2026
4 September 2026