Privacy framework

When you send an enquiry

The contact form asks for your name, your email address and your message. A phone number, a property location and a property type are optional and only appear for the topic they belong to.

What you send is emailed to the Private Office at sophie@crestandhaven.com, and a confirmation is emailed to you. Replying to either email reaches a person, not a system.

On the server itself only a short status record is kept: a reference, the topic, the time, and whether each email was accepted for delivery. Your message, phone number and property location are not stored on the server at all. These status records are removed after thirty days.

When you request a private dossier

The request form asks for your full name, an email address and a LinkedIn profile or company website. All three are required, because a partner reviews every request by hand before any dossier is released.

Stored with the request: those three details, the dossier you asked about, a reference, the time, and the exact statement you confirmed together with its version. The statement is recorded as what you declared about yourself. It is not a check, and confirming it does not make you a verified or accredited party in our records.

The link you give is stored and shown to the reviewer as text. It is never opened, fetched or followed by this website, and nothing is looked up about you anywhere else. No profile, score or assessment is built.

Your request is recorded as pending review until a partner decides. If access is approved you receive a personal link with an expiry date; the link can be withdrawn at any time. The record of the request and of any access given is kept as the office’s record of who asked for what and what was released.

Where it is kept, and who can see it

Everything the server stores sits in a folder outside the public website, which the web server does not serve. Private dossier documents are held there too: there is no public address for them, and they are only ever sent out after an approval, over a personal link.

Emails leave through the mail provider of the crestandhaven.com mailbox. Emails from this website contain no tracking pixels and no tracking links.

What happens automatically

• Your IP address is used to limit how many requests can be sent in a short time. It is not stored as an address: only a keyed hash of it is kept, in a counter that expires by itself.
• This website sets no cookies for visitors. One cookie exists for the Private Office review screen and is only set when a member of staff signs in there.
• There is no analytics, no advertising, no tracking and no social media code. No fonts, scripts or images are loaded from other websites.
• Pages that answer one person’s private request are sent with instructions not to cache and not to index them.
• Your hosting provider keeps its own server logs. Those are the provider’s, not this website’s.

Your choices

Write to sophie@crestandhaven.com to ask what is held about you, to have it corrected, to have it removed, or to have access that was given to you withdrawn. A request to remove your details is carried out unless the office has to keep a record for a specific reason, which it will then tell you.

Still to be completed

The points below need a decision or a fact from Crest & Haven before this page is finished. They are named here rather than filled in with something that is not certain.

• The legal identity and registered address of the party responsible for this data, and a company registration number if there is one.
• The legal basis claimed for each purpose, and the retention period for dossier requests and for access that was granted.
• The supervisory authority a complaint can be made to, and whether a data protection officer has been appointed.
• Which other parties, if any, receive these details — for example an adviser, an agent or a co-broker on a placement.
• Whether any details leave the country the hosting and mailbox are in.

Last changed 18 September 2026. This page describes the website as it is built. It is not legal advice and has not been reviewed by a lawyer.