Privacy Policy
How we collect, use and protect your personal information.
Last updated July 2026
Steve Morris & Son LLP (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal data we collect, how we use it and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are the data controller for the information we hold. Our registered office is 1 Coleshill Street, Sutton Coldfield, West Midlands, B72 1SD. We are registered with the Information Commissioner’s Office (ICO) (registration number ZB834895).
Information we collect
- Enquiry & contact details — your name, email, phone number and message when you use our contact, valuation or viewing forms.
- Property interest — the properties, areas and services you enquire about.
- Applicant & tenancy information — where you apply for a property, information needed for referencing, right-to-rent and tenancy administration (including optional photo ID you upload).
- Technical data — anonymised analytics about how the website is used (only with your consent — see our Cookie Policy).
How we use your information
- To respond to your enquiries and provide the services you request.
- To arrange valuations, viewings and property alerts.
- To carry out lettings and property management, including referencing and legal compliance.
- To meet our legal and regulatory obligations (e.g. anti-money-laundering and right-to-rent checks).
Our lawful bases
We process your data on the bases of your consent (enquiries and marketing), the performance of a contract (tenancy), our legitimate interests (running our business responsibly), and legal obligation (compliance).
Who we share it with
We only share your data where necessary, for example with: referencing and credit-check providers (including Canopy); deposit protection (mydeposits); the Property Redress Scheme and Safeagent; trusted contractors for maintenance; our website, email and CRM platform providers; and where required by law. We never sell your personal data.
How long we keep it
We keep personal data only as long as necessary for the purposes above and to meet legal and regulatory requirements, after which it is securely deleted. Enquiry messages are typically retained for up to 24 months unless a longer period is required for a live tenancy or legal claim.
Your rights
You have the right to access, correct, erase, restrict or object to our processing of your data, and to data portability. To exercise any of these rights, contact us at [email protected].
Complaints
If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the ICO at ico.org.uk.