The Data Protection Act 2018 (DPA 2018) sets out the data protection framework in the UK and incorporates the Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) into the national law. Its purpose is to protect the “rights and freedoms” of natural persons (living individuals), and to ensure that personal data is not processed without their knowledge, and, wherever possible, that it is processed with their consent.

Under the DPA 2018 and the GDPR, Lettuce Property Management Ltd, is defined as the Data Controller and therefore has a legal duty to protect any information we collect from you. Lettuce Property Management Ltd (T/A Lettuce Student Accommodation) is a wholly-owned subsidiary of Topham Investments Ltd.

This notice explains what information we collect, when we collect it and how we use this. During the course of our activities, we will process personal data (which may be held on paper, electronically, or otherwise) about you and we recognise the need to treat it in an appropriate and lawful manner. The purpose of this notice is to make you aware of how we will handle your information.

What are the legal grounds for our processing of your personal information (including when we share it with others)?
We rely on the following legal bases to use your personal data:

Contractual obligations
In certain circumstances, we need your personal data to comply with our contractual obligations. For example, when preparing your tenancy agreement and guarantor documentation.

Legal compliance
If the law requires us to, we may need to collect and process your data. For example, our obligations under “Right to Rent” legislation.

Legitimate interest
Where it is in our legitimate interests to do so. For example:

What kinds of personal information about you do we process?
Personal data is information that relates to an identified or identifiable individual.

We collect information about you:

We collect the following information about you:

Information may also be provided to us indirectly by, including but not limited, to:

We, our service providers and partners collect certain information by using automated means, such as cookies, when you interact with our advertisements, mobile applications, or visit our websites, pages or other digital assets. The information we collect in this manner may include:

Please see our Cookie Policy for more information.

How do we use your personal information?
This means your personal information, which you supply to us may be used in a number of ways, for example:

Sharing your personal information
Furthermore, during the processing of your tenancy agreement, throughout the duration of your tenancy, after the tenancy end-date and in other circumstances where we are required to meet our legal and statutory obligations, provide our services to you, and protect our legitimate interests, information may be shared with third parties as is reasonably necessary, for example;

We will never knowingly share, pass or sell on your personal data to with a third party for marketing purposes without your consent.

For how long is your personal information retained by us?
Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected and in line with legal and regulatory requirements.

Your Rights

The UK GDPR provides the following rights for individuals:

The right to object
You have the right at any time to:

If you would like to exercise any of your rights above, please contact us at

Should you wish to complain about the use of your information, we would ask that you contact us to resolve this matter in the first instance. You also have the right to complain to the Information Commissioner’s Office in relation to our use of your information. The Information Commissioner’s contact details are noted below:

Information Commissioner’s Office
Wycliffe House
Water Lane

Telephone: 0303 123 1113

The Information Commissioner’s Office
Scotland 45
Melville Street

Telephone: 0131 244 9001

Information Commissioner’s Office
2nd floor
Churchill House Churchill way
CF10 2HH

Telephone: 029 2067 8400

Northern Ireland:
Information Commissioner’s Office
3rd Floor
14 Cromac Place

Telephone: 028 9027 8757

Access to your information and how to contact us
The accuracy of your information is important to us – please help us keep our records updated by informing us of any changes to your email address and other contact details. For further information on how your information is used, how we maintain the security of your information and your rights to access information we hold on you, please contact or telephone 02477 717171.

Updating this Privacy Notice
Lettuce Property Management reserve the right to amend and update this Privacy Notice when required therefore it is advisable you review this notice at regular intervals.