Privacy Policy
This website sets no cookies, runs no analytics and loads nothing from third parties. It collects nothing about you at all. This policy explains that, and what happens to your information when you do get in touch.
Last updated 13 August 2026.
1. Who we are
Goldfinch Consulting, trading as Goldfinch Property Consulting, is a sole trader based in Central London. Claudia Nahrath is the data controller for the personal data described in this policy.
- Email — claudia@goldfinch-consulting.co.uk
- Telephone — +44 (0)7555 225 760
- Website — goldfinch-consulting.co.uk
- ICO registration — we are registered with the Information Commissioner’s Office as a data controller under registration number ZA000000.
Please write to us at the email address above for any question about this policy or about the information we hold on you.
Before publishing — complete or remove this line. The ICO registration number above is a placeholder. Organisations that hold personal data on electronic devices for business purposes generally must pay the annual data protection fee; the tier 1 fee is £52, reduced by £5 by direct debit. Check your position using the ICO’s self-assessment tool, register if required, and replace ZA000000 with your real number. If you establish that you are exempt, delete the ICO line entirely rather than leaving a false one.
2. What this website collects
Nothing. We have built it deliberately that way.
- No cookies. The site sets no cookies of any kind, so there is no cookie banner to dismiss.
- No analytics or tracking. There is no Google Analytics, no advertising pixel, no tag manager, no heatmap and no session recording.
- No third-party content. Fonts, images and the introductory video are all served from this site itself. No external service is contacted when you load a page, so nothing about your visit is shared with anyone.
- No browser storage. Nothing is written to local storage or session storage.
- The enquiry form does not submit anywhere. It gathers what you type and hands it to your own email programme as a draft message addressed to us. Nothing is transmitted or stored until you choose to press send in your own email client.
Our hosting provider may keep standard server logs, which can include IP addresses, for security and to keep the site running. These are held by the host under their own terms and are not used by us to identify or profile visitors.
3. What we collect when you get in touch
When you contact us, or become a client, we hold what is needed to advise you properly and nothing beyond it.
- Contact details — your name, email address and telephone number.
- Your requirements — budget, preferred areas, timing, number of bedrooms, schools under consideration, and the other criteria captured in our scorecard conversation.
- Household information — where it is relevant to the search, such as the ages of children, commuting needs or accessibility requirements.
- Correspondence — emails, messages, viewing notes and meeting notes relating to your search.
- Transaction information — where an engagement proceeds, the details needed for a lease or purchase, and our own invoicing records.
We do not seek special category data. Where you volunteer something sensitive because it matters to the search — a health or mobility need, for example — we hold it only for as long as it is relevant to that search.
4. Why we hold it, and on what basis
Under UK GDPR we must have a lawful basis for processing your personal data. Ours are these.
- To answer your enquiry — legitimate interests, and steps taken at your request before entering into a contract.
- To provide the service — performance of our contract with you, covering the search, negotiation, furnishing and project management work you have instructed.
- To meet legal and accounting obligations — legal obligation, including retention of financial records.
- To keep in touch about our services — consent, which you may withdraw at any time by replying to any message and asking us to stop.
5. Who we share it with
We never sell your data, and we never pass it to advertisers. A property search does require us to speak to others on your behalf, and we do so only as far as the work needs.
- Estate agents and landlords — to register your requirements and arrange viewings. Where you prefer to remain unnamed at the early stage, tell us and we will approach agents on a no-names basis.
- Solicitors, surveyors, architects and planning consultants — where you instruct them through us as part of a purchase or a project.
- Suppliers and trades — for furnishing deliveries, installation and works, limited to the delivery address and access arrangements.
- Our accountant, and HMRC — for invoicing and tax compliance.
- Where the law requires it — including anti-money-laundering checks on a purchase.
Where a corporate employer has commissioned our services for a relocating employee, we will confirm with you at the outset what may be reported back to them. It is normally limited to progress and cost.
6. How long we keep it, and how it is kept
We keep personal data no longer than we need it. In practice that means the following.
- Enquiries that do not become engagements — no longer than twelve months from our last contact with you, after which they are deleted.
- Client records — for the duration of the engagement, and then for six years after the end of the tax year in which it ended. That period reflects two things: HMRC requires self-employed business records to be kept for at least five years after the 31 January submission deadline for the relevant tax year, and six years is the period within which a claim arising from a contract may ordinarily be brought.
- Anti-money-laundering records on a purchase — five years from the date the transaction completes or the business relationship ends, as the Money Laundering Regulations 2017 require, and in no case longer than ten years.
- Consent to keep in touch — until you withdraw it, at which point your details are removed from our contact list.
- Security and location — records are held on password-protected devices and reputable business accounts, accessible only to Claudia Nahrath, and stored in the United Kingdom or the European Economic Area. Where a supplier stores data elsewhere, we satisfy ourselves that appropriate safeguards are in place.
Where a longer period is required of us by law, or a shorter one is possible without prejudicing a live matter, we apply that instead.
7. Your rights
Under UK data protection law you have the following rights, and exercising them is free of charge. Write to claudia@goldfinch-consulting.co.uk and we will respond within one month.
- Access — to be told what we hold about you and to receive a copy of it.
- Rectification — to have anything inaccurate or incomplete corrected.
- Erasure — to have your data deleted, where we have no continuing legal reason to keep it.
- Restriction and objection — to limit how we use your data, or to object to processing based on legitimate interests.
- Portability, and withdrawal of consent — to receive your data in a portable format, and to withdraw consent at any time without affecting anything done before you withdrew it.
If you are unhappy with how we have handled your data you may complain to the Information Commissioner’s Office at ico.org.uk, or by telephone on 0303 123 1113. We would appreciate the chance to put things right first.
8. Changes to this policy
If we change how we handle personal data — for example by adding a contact form that submits to a server, or by introducing analytics — we will update this page and change the date at the top before the change takes effect.
Any questions about your data?
Ask directly. We would rather answer plainly than hide behind a policy document.