Privacy Policy
Last reviewed and updated: March 2026
Helmsley Acceptances Limited and Helmsley Securities Limited are committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and share personal data when you interact with us, whether through our website, by email, by telephone, in writing, or in connection with our investment, lending, development and related business activities.
For the purposes of UK data protection legislation, including the Data Protection Act 2018 and the UK General Data Protection Regulation, the data controllers are:
Helmsley Acceptances Limited
Helmsley Securities Limited
Colenso House, Omega 1, Monks Cross Drive, Monks Cross, York YO32 9GZ
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at mail@helmsley.co.uk or by telephone on 01904 682800.
Who we are
Helmsley Acceptances Limited and Helmsley Securities Limited are part of the Helmsley Group. We work with investors, borrowers and other counterparties in relation to property investment, property lending, development finance and related property activities.
How we collect information
We may collect personal data in a number of ways, including:
- when you contact us by email, telephone, post or through our website
- when you complete a contact form or other form on our website
- when you enquire about investing, borrowing or other services
- when you provide information as part of an investment, lending or due diligence process
- when we receive information from professional advisers, introducers, brokers, solicitors, accountants or other third parties acting on your behalf or in connection with a transaction
- when we obtain information from identity verification providers, credit reference agencies, sanctions screening tools or publicly available sources where permitted by law
What information we may collect
The personal data we collect may include:
- name, address, email address and telephone number
- date of birth and identification information
- passport or driving licence details and proof of address
- company details, directorships and beneficial ownership information
- bank account and payment details
- source of funds and source of wealth information
- transaction information and investment history
- records of correspondence, meetings and communications
- information relating to website usage, IP address and browser activity
- any other information you provide to us or that we are required to obtain in connection with our services or legal obligations
How we use your information
We may use your personal information for a number of legitimate business and regulatory purposes, including:
Providing our services
To establish and administer relationships with investors, borrowers and other counterparties. This includes preparing documentation, processing transactions, administering investments and loans, and maintaining ongoing relationships with clients and investors.
Communicating with you
To respond to enquiries, provide information relating to investments or lending arrangements, circulate investor communications, meeting notes, reports and other updates relevant to our services.
Compliance with legal and regulatory obligations
As regulated businesses, Helmsley Acceptances Limited and Helmsley Securities Limited are required to comply with a range of legal and regulatory obligations. This includes carrying out identity verification and customer due diligence checks and processing personal data for the purposes of preventing money laundering, terrorist financing and proliferation financing in accordance with applicable legislation, including the Money Laundering Regulations 2017 and related financial crime legislation.
This may include collecting and verifying information relating to identity, beneficial ownership, source of funds and other relevant due diligence information.
Financial crime prevention and regulatory reporting
Where necessary in order to comply with our legal or regulatory obligations, personal data may be shared with professional advisers, identity verification providers, financial institutions, regulators, law enforcement agencies or other competent authorities.
Business administration and record keeping
To maintain appropriate records of our relationships with investors, borrowers and other contacts, and to manage our internal business administration, accounting and compliance processes.
Improving our services
To monitor and review how our services are used and to help improve the quality and effectiveness of the services we provide.
Recruitment
To process job applications and communicate with applicants in relation to recruitment opportunities.
Marketing communications
From time to time we may send communications relating to investment opportunities, updates or events which may be of interest. Where required by law, you will have the opportunity to opt out of receiving such communications.
Personal data will only be used for the purposes for which it was collected unless we reasonably consider that we need to use it for another compatible purpose.
Lawful basis for processing
We process personal data on one or more of the following lawful bases:
- where processing is necessary for the performance of a contract or to take steps before entering into a contract
- where processing is necessary to comply with a legal or regulatory obligation
- where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests
- where you have given consent, where consent is the appropriate basis
Who has access to your information
We will not sell or rent your information to third parties.
We may share personal data with trusted third parties where necessary for the operation of our business or to comply with legal and regulatory obligations. These may include:
- professional advisers, including solicitors, accountants and compliance advisers
- banks and financial institutions
- identity verification and electronic due diligence providers
- IT, document management and communication service providers
- agents, contractors and service providers acting on our behalf
- regulators, law enforcement agencies, government bodies and other competent authorities where required
Where we use third party service providers, we take steps to ensure that they process personal data securely and only in accordance with our instructions and applicable law.
We may also transfer personal data as part of a business restructuring, reorganisation or sale, provided that appropriate protections are in place.
How long we keep your information
We keep personal data only for as long as is necessary for the purposes for which it, including to satisfy legal, regulatory, accounting and reporting requirements.
Where personal data is collected for anti-money laundering and financial crime compliance purposes, we may retain it for the period required by applicable law and regulation following the end of the relevant business relationship or transaction.
Your rights
Under UK data protection law, you may have the right to:
- request access to the personal data we hold about you
- request correction of inaccurate or incomplete personal data
- request erasure of your personal data in certain circumstances
- request restriction of processing in certain circumstances
- object to processing where we rely on legitimate interests
- request transfer of your personal data to you or another organisation in certain circumstances
- withdraw consent at any time where we rely on consent
These rights are not absolute and may be limited where we are required to retain or process information to comply with legal or regulatory obligations.
To exercise any of these rights, please contact us using the details above.
Accessing and updating your information
The accuracy of your information is important to us. If you would like to review, correct or update the personal data we hold about you, please contact us by:
Completing this form: https://helmsley.co.uk/access-request/
Email: mail@helmsley.co.uk
Telephone: 01904 682800
Post: Colenso House, Omega 1, Monks Cross Drive, Monks Cross, York YO32 9GZ
Right to complain
If you are unhappy with how we have handled your personal data, please contact us first so that we can try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office at www.ico.org.uk.
Security
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Please note that transmission of information over the internet is not completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee the security of information transmitted to our website, and any transmission is at your own risk.
Cookies and website usage
Our website uses cookies and similar technologies to help us improve the website and understand how visitors use it.
Cookies are small files placed on your device when you visit a website. They help websites function properly and can also provide information about browsing behaviour and usage patterns.
We may use analytics tools and other website technologies to collect information such as IP address, browser type, pages visited and time spent on the website.
You can control cookies through your browser settings. Disabling cookies may affect the functionality of the website.
Please also see our separate Cookie Policy for further details.
Links to other websites
Our website may contain links to other websites operated by third parties. This Privacy Policy applies only to the Helmsley website and our own processing activities. We are not responsible for the privacy policies or practices of third party websites.
International transfers
Where personal data is transferred outside the UK, we will take steps to ensure that appropriate safeguards are in place and that the transfer is carried out in accordance with applicable data protection law.
Changes to this policy
We keep this Privacy Policy under regular review and may update it from time to time.
This Privacy Policy was last reviewed and updated in March 2026.