Skip to main content

Privacy policy and Cookies

Welcome

As a legal advice provider, using personal information is fundamental to what we do at Leasehold Advisory Service (LEASE) – from connecting calls to analysing key housing concerns. It is essential that our customers trust us with their personal information.

This privacy notice explains what personal information we collect about you and how we use it during our relationship with you. You can also find details of what rights you have (including the right to object to some of the data handling we carry out), as well as how to exercise those rights in the Your Rights section below.

Who we are

Leasehold Advisory Service (LEASE) provide free advice on residential leasehold and park homes law. We are a publicly funded independent body, and we only advise residential leaseholders and park home owners.

We collect personal information when you request advice from us or engage with any other services provided or used by us, such as surveys, website, and newsletter subscriptions. We regard the privacy of our users as very important. All personal information we receive is treated confidentially.

We work in the public interest to empower consumers by providing personalised, accessible advice that helps residents understand their rights and responsibilities – so they can make informed decisions.  Processing customer information—such as name and contact details, and property circumstances—is necessary to fulfil this official function. This aligns with article 6(1)(e) of the United Kingdom General Data Protection Regulation (GDPR), which allows processing where it is “necessary for the performance of a task carried out in the public interest or in the exercise of official authority.”

What does this privacy notice cover?

This notice applies to the services we provide you (such as free legal advice relating to residential leasehold, commonhold and park homes), your use of our service (whether phone or any format of written advice) and our website.

It also applies even if you’re not one of our customers, but you interact with us as part of us running our business, for example by:

  • using one of our services – requested for by someone else
  • acting with authorisation on behalf of one of our customers
  • taking part in a survey or trial
  • calling our helpdesk
  • Subscribing to our newsletter
  • generally enquiring about our services

If you need to give us personal information about someone else in relation to our services, this privacy notice will also apply to their information. If we need the permission of the other person to use that information, we will ask you to check that permission exists.

Your Rights

You can ask us to provide you with a copy of your personal data at any time. you have given us your personal information because you have requested our help with a legal matter, you are entitled to ask us for a copy of this information

In some circumstances (including where we rely on ‘legitimate interests’), you have the right to object to our processing of your data and can ask us to restrict our use of your data and to delete it.  You also have the right to ask us to correct your information if it is inaccurate.

We aim to provide our services in a way that protects information and respects your request. Because of this, when you delete or change (or ask us to delete or change) your information from our systems, . And we may need to keep some information to fulfil your request.

Where we can, we will confirm any changes. For example, we’ll check a change of address against the Postal Address File, or we might ask you to confirm it.

There are some exceptions to these rights, for example we might not be able to delete your data if we are required to keep it by law. We also might not be able to provide you with information if it would infringe someone else’s rights. We’ll always try to help you with your request and if we believe we are unable to fulfil your request we will always explain why.

Where you have provided us with your personal information to handle in order for us to provide a service, you can change your mind and ask us to stop using your data. This only applies to how we use your personal information in the future, not what we have done in the past.

Access to your information and correction

Under the General Data Protection Regulations, you have the right to request a copy of the information which we hold about you. If you would like a copy of some or all of the personal information we hold about you please email  dataprotection@lease-advice.org or write to us at Data Protection, LEASE, 2 Marsham Street, London, SW1P 4DF. We take the security of your personal information seriously and you may be asked to provide proof of address and/or your identity before we can act on your request.

For independent advice about data protection, privacy and data-sharing issues, you can contact the Information Commissioner at: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Phone: 0303 123 1113 or 01625 54 57 45 Fax: 01625 524510 Website: ico.org.uk

Information we collect about you and how we use it

The personal information we collect, store, and use will depend on the service you have asked us to provide to you. In most cases we have this information because we collect it directly from you, or because it has been derived from your use of our services.

Some of the personal information we collect, store and use is We will only collect, store and use this more sensitive information to support you and your use of our services.

Below you can find details of how and why we use your information and our permitted reason in law (known as ‘legal basis’) to use it.

LEASE is a publicly funded body that delivers housing advice, therefore processing client information—such as name, contact details, and property circumstances—is necessary to fulfil its official functions. This aligns with article 6(1)(e) of the GDPR, which allows processing where it is “necessary for the performance of a task carried out in the public interest or in the exercise of official authority.”

Lease may also process data under legitimate interests, particularly for:

  • Internal record-keeping
  • Service improvement and training
  • Performance monitoring
  • Analytics

We record telephone advice calls for training, quality and analysis purposes. Our calls are also processed by secure AI software to transcribe the contents and generate summaries which are reviewed by our advisers and stored alongside your enquiry details in our system.

We will never share your information with other organisations for marketing, market research (unless conducted on our behalf) or commercial purposes.

Protecting your information and how we keep it

. In the event that you contact us once and once only, then your details will be removed from our records in keeping with our Destruction Policy. In summary, this policy is that we will retain your data for seven years after your last contact. For example, if you contacted us for advice in 2019, then contacted again in 2021, and you never contact us again, then we will delete your data in 2028 (seven years after the last contact).

Cookies

This website uses the following cookies:

 

Cookie Name Description Retention Period Third Party
                cfduid The ‘      cfduid’ cookie is set by the CloudFlare service to identify trusted web traffic. It does not correspond to any user id in the web application, nor does the cookie store any personally identifiable 5 years No
                cfruid Used by the content network, Cloudflare, to identify trusted web traffic. Session No
                cf_bm Cloudflare’s bot products identify and mitigate automated traffic to protect this site from bad bots.

Cloudflare places the

                cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The                 cf_bm cookie is necessary for the proper functioning of these bot solutions.

30 minutes No
cf_chl_2 Used by Cloudflare for the execution of Javascript or Captcha challenges. These cookies are not used for tracking or beyond the scope of the challenge. session No
                cflb When enabling session affinity with Cloudflare Load Balancer, Cloudflare sets a

 cflb cookie with a unique value on the first response to the requesting client.

Cloudflare routes future requests to the same origin, optimizing network resource usage. In the event of a failover, Cloudflare sets a new                 cflb cookie to direct future requests to the failover pool.

30 minutes Yes
_cfuvid The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address. Session No
cf_clearance Whether a CAPTCHA or Javascript challenge has been solved. 1 years No
_omappvs Cookie is used to identify returning visitors 1 day No
_omappvp Cookie is used to identify returning visitors 1 day No
_ga ID used to identify users 1 years Unknown
_ga_* Used to identify and track an individual user session. 2 years No
_gid ID used to identify users for 24 hours 24 hours No
_gat Used to monitor number of Google Analytics server requests when using Google Tag Manager 58 seconds No
_dc_gtm_ Used to monitor number of Google Analytics server requests 1 minute No
AMP_TOKEN Contains a token code that is used to read out a Client ID from the AMP Client ID Service. By matching this ID with that of Google Analytics, users can be matched when switching between AMP content and non-AMP content. 1 year No
_gat_* Used to set and get tracking data 1 hour No
_gac_ Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together. 90 days No
                utma ID used to identify users and sessions 2 years No
                utmt Used to monitor number of Google Analytics server requests 10 minutes No
                utmb Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing

                utmb cookie. The cookie is updated every time data is sent to the Google Analytics server.

30 minutes No
                utmc Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session. session No
                utmz Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server 6 months No
                utmv Contains custom information set by the web developer through the _setCustomVar method in Google Analytics. This cookie is updated each time new data is sent to the Google Analytics server. 2 years Unknown
                utmx Used to determine whether a user is included in an A / B or Multivariate test. 18 months No
                utmxx Used to determine when the A / B or Multivariate test in which the user participates ends 18 months No
FPAU Assigns a specific ID to the visitor. This allows the website to determine the number of specific user- visits for analysis and statistics. session No
FPID Registers statistical data on users’ behaviour on the website. Used for internal analytics by the website operator. 1 years No
FPLC This FPLC cookie is the cross-domain linker cookie hashed from the FPID cookie. It’s not HttpOnly, which means it can be read with JavaScript. It has a relatively short lifetime, just 20 hours. 20 hours No
PHPSESSID Cookie generated by applications based on the PHP language. This is a general purpose identifier used to maintain user session variables. It is normally a random generated number, how it is used can be specific to the site, but a good example is maintaining a logged-in status for a user between pages. 60 minutes Yes

 

LEASE is governed by a board, appointed as individuals by the Secretary of State for the Ministry of Housing, Communities & Local Government.