Privacy Policy

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience.

These cookies may track things such as how long you spend on the site or pages you visit which helps us to understand how we can improve the site for you.

No personal data is collected or used through the collection of Cookies on this site. For more information about how we use cookies on this site, please contact us at  Rosi.Dow@knightfrank.com.

Knight Frank Global Data Protection Policy

Purpose

This policy sets out Knight Frank’s approach to the management of data protection and privacy. It applies to all processing of personal data across Knight Frank.

What is personal data?

For the purposes of this policy, personal data means any information relating to an identified or identifiable individual. An individual may be identifiable directly or indirectly through identifiers such as a name, identification number, location data, an online identifier, or factors relating to their physical, physiological, genetic, mental,
economic, cultural or social identity.

Processing personal data refers to any operation carried out on that information, whether automated or manual.

This includes activities such as collecting, recording, organising, storing, adapting, retrieving, consulting, using, disclosing, aligning or combining, restricting, erasing or destroying personal data.

Why it Matters

The Group Executive Board, (The Board) and Management of Knight Frank LLP are committed to protecting the personal data and respecting the privacy of individuals.

We will apply the data protection principles contained in the UK GDPR as our standard approach globally. Where local law or regulation conflicts with these principles then local law will override the specific aspect of the UK GDPR which is in conflict.

Knight Frank is a data controller for processing activities where it determines the purposes and means of the data processing. This includes most processing of employee data and client data when acting on Knight Frank commercial interests. When acting as a data controller, we will comply with the data protection principles contained in the UK GDPR.

Scope

This policy applies to all employees of Knight Frank. It applies also to consultants, contractors and agency workers in relation to their work for, or on behalf of, Knight Frank.

Knight Frank refers to the member firms of the Knight Frank global network, each of which is a separate legal entity. The Knight Frank global network comprises Knight Frank LLP, its subsidiaries (direct or otherwise), its affiliates and any other entity or practice carrying on business under or including the name Knight Frank or in association with Knight Frank LLP internationally in over 50 territories.

Failure to comply with this policy may result in disciplinary action being taken against anyone involved, or the termination of contracts with contractors and other third parties working for Knight Frank.

The Knight Frank global network can use the Knight Frank name and resources of the network. Member firms agree to abide by certain common policies and to maintain the standards of Knight Frank.

General Principles

Knight Frank will process personal data in compliance with the following six data protection principles.

1. Lawfulness, fairness and transparency

We will only process personal data where it is lawful.

We will identify all data processing activities across the business and record these in a Record of Processing Activities (RoPA). Each processing activity will be assessed against the lawful bases set out in section 5.

Our Privacy Notices set out information about our data processing, such as the types of information we collect, our purposes for processing, who we share personal data with and the retention periods.

2. Purpose limitation

We will only collect personal data where we have a specified, explicit and legitimate purpose.

We will not process personal data for any purpose which is incompatible with the original purpose. When processing personal data for a new purpose, we will conduct a compatibility assessment.

3. Data minimisation

We will only process personal data that is adequate, relevant and limited to what is necessary to achieve our purpose.

4. Accuracy

We will take reasonable steps to ensure that the information we hold is accurate and up to date.

5. Storage limitation

We will not keep personal data for longer than is necessary to achieve our purposes. Our Retention Policy and Schedule set out the assigned retention periods relating to types of data and how we
will delete or dispose of the personal data that we hold.

6. Integrity and confidentiality

We will implement appropriate technical and organisational security measures to ensure the security of the personal data we process.

The technical measures we employ will be set out in our Information Security Policy.

The organisational measures we employ include:

  • Allocating responsibility for data protection compliance to relevant individuals
  • Providing appropriate and relevant data protection training to anyone who handles personal data on an annual basis.
  • Developing policies and procedures on relevant areas of compliance to give everyone clear direction about what steps to take in certain situations, for example data breaches and Data Subjects Rights requests.

Our Data

All data used, collected, developed or created by Knight Frank, its consultants, contractors and agency workers in relation to their work for, or on behalf of, Knight Frank, including, but not limited to, documents, templates, databases and client or counterparty information (“Data”), is the property of Knight Frank LLP.

Data must not be transferred outside of Knight Frank’s IT Environment except:

  • where it is necessary to meet our contractual commitments to clients,
  • for the purposes of marketing our services
  • to facilitate the delivery of services to Knight Frank by approved third party suppliers and partners who have entered into a contract with Knight Frank, or
  • where mandated by regulators or other legal authorities.

Under no circumstances should Data be transferred for any purpose other than as set out above. Prohibited use of Data includes, but is not limited to, transferring Data to an employee’s (or their friends’ or families’) personal storage or email service, third party computer, or those of a competitor of Knight Frank. The exception to this prohibition is where employees are handling their own personal data that has been generated in the course of their employment—such as pay slips, pension information, health insurance documents, or other employment-related records. Employees may download or store such personal data outside of the Knight Frank environment solely through authorised channels and using the approved method provided by the business. Employees must not extract, forward, or store this information by circumventing approved systems, and must ensure that any external storage complies with the security guidance issued by Knight Frank. Breach of this policy may result in disciplinary action up to and including dismissal.

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience.

These cookies may track things such as how long you spend on the site or pages you visit which helps us to understand how we can improve the site for you.

No personal data is collected or used through the collection of Cookies on this site. For more information about how we use cookies on this site, please contact us at  Rosi.Dow@knightfrank.com.

Knight Frank Global Data Protection Policy

Purpose

This policy sets out Knight Frank’s approach to the management of data protection and privacy. It applies to all processing of personal data across Knight Frank.

What is personal data?

For the purposes of this policy, personal data means any information relating to an identified or identifiable individual. An individual may be identifiable directly or indirectly through identifiers such as a name, identification number, location data, an online identifier, or factors relating to their physical, physiological, genetic, mental,
economic, cultural or social identity.

Processing personal data refers to any operation carried out on that information, whether automated or manual.

This includes activities such as collecting, recording, organising, storing, adapting, retrieving, consulting, using, disclosing, aligning or combining, restricting, erasing or destroying personal data.

Why it Matters

The Group Executive Board, (The Board) and Management of Knight Frank LLP are committed to protecting the personal data and respecting the privacy of individuals.

We will apply the data protection principles contained in the UK GDPR as our standard approach globally. Where local law or regulation conflicts with these principles then local law will override the specific aspect of the UK GDPR which is in conflict.

Knight Frank is a data controller for processing activities where it determines the purposes and means of the data processing. This includes most processing of employee data and client data when acting on Knight Frank commercial interests. When acting as a data controller, we will comply with the data protection principles contained in the UK GDPR.

Scope

This policy applies to all employees of Knight Frank. It applies also to consultants, contractors and agency workers in relation to their work for, or on behalf of, Knight Frank.

Knight Frank refers to the member firms of the Knight Frank global network, each of which is a separate legal entity. The Knight Frank global network comprises Knight Frank LLP, its subsidiaries (direct or otherwise), its affiliates and any other entity or practice carrying on business under or including the name Knight Frank or in association with Knight Frank LLP internationally in over 50 territories.

Failure to comply with this policy may result in disciplinary action being taken against anyone involved, or the termination of contracts with contractors and other third parties working for Knight Frank.

The Knight Frank global network can use the Knight Frank name and resources of the network. Member firms agree to abide by certain common policies and to maintain the standards of Knight Frank.

General Principles

Knight Frank will process personal data in compliance with the following six data protection principles.

1. Lawfulness, fairness and transparency

We will only process personal data where it is lawful.

We will identify all data processing activities across the business and record these in a Record of Processing Activities (RoPA). Each processing activity will be assessed against the lawful bases set out in section 5.

Our Privacy Notices set out information about our data processing, such as the types of information we collect, our purposes for processing, who we share personal data with and the retention periods.

2. Purpose limitation

We will only collect personal data where we have a specified, explicit and legitimate purpose.

We will not process personal data for any purpose which is incompatible with the original purpose. When processing personal data for a new purpose, we will conduct a compatibility assessment.

3. Data minimisation

We will only process personal data that is adequate, relevant and limited to what is necessary to achieve our purpose.

4. Accuracy

We will take reasonable steps to ensure that the information we hold is accurate and up to date.

5. Storage limitation

We will not keep personal data for longer than is necessary to achieve our purposes. Our Retention Policy and Schedule set out the assigned retention periods relating to types of data and how we
will delete or dispose of the personal data that we hold.

6. Integrity and confidentiality

We will implement appropriate technical and organisational security measures to ensure the security of the personal data we process.

The technical measures we employ will be set out in our Information Security Policy.

The organisational measures we employ include:

  • Allocating responsibility for data protection compliance to relevant individuals
  • Providing appropriate and relevant data protection training to anyone who handles personal data on an annual basis.
  • Developing policies and procedures on relevant areas of compliance to give everyone clear direction about what steps to take in certain situations, for example data breaches and Data Subjects Rights requests.

Our Data

All data used, collected, developed or created by Knight Frank, its consultants, contractors and agency workers in relation to their work for, or on behalf of, Knight Frank, including, but not limited to, documents, templates, databases and client or counterparty information (“Data”), is the property of Knight Frank LLP.

Data must not be transferred outside of Knight Frank’s IT Environment except:

  • where it is necessary to meet our contractual commitments to clients,
  • for the purposes of marketing our services
  • to facilitate the delivery of services to Knight Frank by approved third party suppliers and partners who have entered into a contract with Knight Frank, or
  • where mandated by regulators or other legal authorities.

Under no circumstances should Data be transferred for any purpose other than as set out above. Prohibited use of Data includes, but is not limited to, transferring Data to an employee’s (or their friends’ or families’) personal storage or email service, third party computer, or those of a competitor of Knight Frank. The exception to this prohibition is where employees are handling their own personal data that has been generated in the course of their employment—such as pay slips, pension information, health insurance documents, or other employment-related records. Employees may download or store such personal data outside of the Knight Frank environment solely through authorised channels and using the approved method provided by the business. Employees must not extract, forward, or store this information by circumventing approved systems, and must ensure that any external storage complies with the security guidance issued by Knight Frank. Breach of this policy may result in disciplinary action up to and including dismissal.

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience.

These cookies may track things such as how long you spend on the site or pages you visit which helps us to understand how we can improve the site for you.

No personal data is collected or used through the collection of Cookies on this site. For more information about how we use cookies on this site, please contact us at  Rosi.Dow@knightfrank.com.

Knight Frank Global Data Protection Policy

Purpose

This policy sets out Knight Frank’s approach to the management of data protection and privacy. It applies to all processing of personal data across Knight Frank.

What is personal data?

For the purposes of this policy, personal data means any information relating to an identified or identifiable individual. An individual may be identifiable directly or indirectly through identifiers such as a name, identification number, location data, an online identifier, or factors relating to their physical, physiological, genetic, mental,
economic, cultural or social identity.

Processing personal data refers to any operation carried out on that information, whether automated or manual.

This includes activities such as collecting, recording, organising, storing, adapting, retrieving, consulting, using, disclosing, aligning or combining, restricting, erasing or destroying personal data.

Why it Matters

The Group Executive Board, (The Board) and Management of Knight Frank LLP are committed to protecting the personal data and respecting the privacy of individuals.

We will apply the data protection principles contained in the UK GDPR as our standard approach globally. Where local law or regulation conflicts with these principles then local law will override the specific aspect of the UK GDPR which is in conflict.

Knight Frank is a data controller for processing activities where it determines the purposes and means of the data processing. This includes most processing of employee data and client data when acting on Knight Frank commercial interests. When acting as a data controller, we will comply with the data protection principles contained in the UK GDPR.

Scope

This policy applies to all employees of Knight Frank. It applies also to consultants, contractors and agency workers in relation to their work for, or on behalf of, Knight Frank.

Knight Frank refers to the member firms of the Knight Frank global network, each of which is a separate legal entity. The Knight Frank global network comprises Knight Frank LLP, its subsidiaries (direct or otherwise), its affiliates and any other entity or practice carrying on business under or including the name Knight Frank or in association with Knight Frank LLP internationally in over 50 territories.

Failure to comply with this policy may result in disciplinary action being taken against anyone involved, or the termination of contracts with contractors and other third parties working for Knight Frank.

The Knight Frank global network can use the Knight Frank name and resources of the network. Member firms agree to abide by certain common policies and to maintain the standards of Knight Frank.

General Principles

Knight Frank will process personal data in compliance with the following six data protection principles.

1. Lawfulness, fairness and transparency

We will only process personal data where it is lawful.

We will identify all data processing activities across the business and record these in a Record of Processing Activities (RoPA). Each processing activity will be assessed against the lawful bases set out in section 5.

Our Privacy Notices set out information about our data processing, such as the types of information we collect, our purposes for processing, who we share personal data with and the retention periods.

2. Purpose limitation

We will only collect personal data where we have a specified, explicit and legitimate purpose.

We will not process personal data for any purpose which is incompatible with the original purpose. When processing personal data for a new purpose, we will conduct a compatibility assessment.

3. Data minimisation

We will only process personal data that is adequate, relevant and limited to what is necessary to achieve our purpose.

4. Accuracy

We will take reasonable steps to ensure that the information we hold is accurate and up to date.

5. Storage limitation

We will not keep personal data for longer than is necessary to achieve our purposes. Our Retention Policy and Schedule set out the assigned retention periods relating to types of data and how we
will delete or dispose of the personal data that we hold.

6. Integrity and confidentiality

We will implement appropriate technical and organisational security measures to ensure the security of the personal data we process.

The technical measures we employ will be set out in our Information Security Policy.

The organisational measures we employ include:

  • Allocating responsibility for data protection compliance to relevant individuals
  • Providing appropriate and relevant data protection training to anyone who handles personal data on an annual basis.
  • Developing policies and procedures on relevant areas of compliance to give everyone clear direction about what steps to take in certain situations, for example data breaches and Data Subjects Rights requests.

Our Data

All data used, collected, developed or created by Knight Frank, its consultants, contractors and agency workers in relation to their work for, or on behalf of, Knight Frank, including, but not limited to, documents, templates, databases and client or counterparty information (“Data”), is the property of Knight Frank LLP.

Data must not be transferred outside of Knight Frank’s IT Environment except:

  • where it is necessary to meet our contractual commitments to clients,
  • for the purposes of marketing our services
  • to facilitate the delivery of services to Knight Frank by approved third party suppliers and partners who have entered into a contract with Knight Frank, or
  • where mandated by regulators or other legal authorities.

Under no circumstances should Data be transferred for any purpose other than as set out above. Prohibited use of Data includes, but is not limited to, transferring Data to an employee’s (or their friends’ or families’) personal storage or email service, third party computer, or those of a competitor of Knight Frank. The exception to this prohibition is where employees are handling their own personal data that has been generated in the course of their employment—such as pay slips, pension information, health insurance documents, or other employment-related records. Employees may download or store such personal data outside of the Knight Frank environment solely through authorised channels and using the approved method provided by the business. Employees must not extract, forward, or store this information by circumventing approved systems, and must ensure that any external storage complies with the security guidance issued by Knight Frank. Breach of this policy may result in disciplinary action up to and including dismissal.