Last updated: 6 August 2026    |    Version: 2.0

This Privacy Policy applies to the Century 21 UK website and to the personal data that Maurice MacNeill Iona Limited processes as its operator. It does not cover the separate processing carried out by individual Century 21 offices (see “How Century 21 UK works” below) — each office has its own privacy policy.

1. Who we are

This Privacy Policy explains how Maurice MacNeill Iona Limited (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you visit or submit an enquiry through the Century 21 UK website, or otherwise contact us.

Maurice MacNeill Iona Limited is the data controller responsible for the personal data processed through the Century 21 UK website.

• Registered company name: Maurice MacNeill Iona Limited
• Company number: SC284167
• Registered address: 13 Whittingehame Drive, Glasgow, G12 0XT
• ICO registration number: Z9125137 (you can verify this on the ICO’s public register)
• Data Protection Officer: Sam Molyneux-Summers, compliance@century21uk.com

How Century 21 UK works

Century 21 UK is a franchise company. We are the master franchisor: we operate the Century 21 UK brand and website, but we do not ourselves provide estate agency, lettings or commercial property services.

Each Century 21 office is independently owned and operated by a separate legal entity (a “franchisee”). When you submit an enquiry through our website, we collect your details, process them, and pass them to the relevant local franchisee office so they can help you. From that point, the franchisee handles your property matter.

This means there are two separate roles:

• We (Maurice MacNeill Iona Limited) are the data controller for the website and for collecting and routing your enquiry to the right office.
• The franchisee is a separate, independent data controller for the services it provides to you. Each franchisee is registered separately with the ICO, and — because it carries out estate agency work — separately with HMRC for anti-money-laundering purposes. Each franchisee has its own Data Protection Officer, who is the owner of that franchise, and its own privacy policy governing what it does with your data.

If your enquiry has been passed to a local office, you can exercise your data rights with that office directly (as a separate controller), as well as with us in respect of the data we hold.

2. The information we collect

2.1 Information you give us

When you enquire through our website or contact us, we may collect:

• Your name and contact details (email, phone, postal address)
• The property or area you are interested in, and your requirements or preferences
• The content of your enquiry and any information you choose to include in it
• Records of our communications with you

We collect this so we can respond to you and pass your enquiry to the appropriate local office. We do not carry out identity verification or anti-money-laundering checks ourselves — those are carried out by the franchisee if and when you go on to use their services.

2.2 Special category data

We do not routinely collect special category data (such as health information) through the website. If you include such information in an enquiry, we pass it to the relevant franchisee along with the rest of your enquiry so they can assist you.

2.3 Information we collect automatically

When you visit our website we may collect your IP address, browser type, device and operating system information, and details of how you use the site (pages visited, dates and times). See Section 8 (Cookies).

2.4 Information we receive from others

We may receive information about you from third parties, including property portals (for example Rightmove, Zoopla) and our franchisee offices, where relevant to your enquiry.

3. How we use your information, and our lawful basis

Under UK data protection law we must have a valid “lawful basis” for using your personal data. The table below sets out how we (Maurice MacNeill Iona Limited) use your data through the website.

Where we rely on consent (for example for marketing), you can withdraw it at any time (see Section 7). Once your data is passed to a franchisee, that franchisee decides how it uses your data and on what lawful basis, and will tell you in its own privacy policy.

4. When we share your information

We do not sell your personal data. We share it only where necessary, with:

• The relevant Century 21 franchisee office — this is the main reason we collect your enquiry. Once passed on, the franchisee holds your data as a separate, independent data controller.
• Our service providers who help us operate the website and network — for example IT, hosting, CRM and marketing providers, who act on our instructions.
• Regulators and public bodies — for example the ICO or law-enforcement bodies, where we are legally required to disclose.
• A buyer of our business or assets in the event of a sale, merger or restructuring.

We require our service providers to protect your data and to use it only for the purposes we specify.

5. Where we store and process your data

We store and process your personal data within the UK. We do not transfer your personal data outside the UK. If this changes in the future, we will update this policy and make sure any transfer is protected by an appropriate safeguard recognised under UK data protection law.

6. How long we keep your information

We keep your personal data only for as long as necessary for the purposes we collected it:

• Website enquiry and lead data (the details you submit and that we pass to a franchisee): we keep this for 5 years. Because we handle complaints about franchisee offices, we retain these records so we can properly investigate and respond to any complaint that may arise. After this period we securely delete or anonymise the data.
• Marketing data: kept until you unsubscribe or ask us to stop, and reviewed periodically.
• Website / analytics data: kept no longer than necessary and reviewed regularly.

Once your details are passed to a franchisee office, that office holds and retains your data as a separate controller under its own policy. As estate agency businesses, franchisees are required to keep anti-money-laundering and transaction records for 5 years under the Money Laundering Regulations 2017.

7. Your rights

Under UK data protection law you have the right to:

• Be informed about how we use your data (this policy)
• Access the personal data we hold about you (a “subject access request”)
• Rectification — have inaccurate data corrected
• Erasure — have your data deleted in certain circumstances
• Restrict our processing of your data in certain circumstances
• Data portability — receive your data in a structured, commonly used, machine-readable format
• Object to processing based on our legitimate interests, and to direct marketing at any time
• Rights relating to automated decision-making — we do not make decisions about you based solely on automated processing without human involvement
• Withdraw consent at any time where we rely on your consent

To exercise any of these rights in respect of the data we hold, contact us using the details in Section 1. If your enquiry has been passed to a local franchisee office, you may also need to contact that office directly, as it is a separate controller for the data it holds. We will normally respond within one month, and may ask you to verify your identity first.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first using the details in Section 1 — we take complaints seriously, will acknowledge yours promptly and aim to resolve it fairly.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at any time:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would, however, appreciate the chance to address your concerns before you approach the ICO.

8. Cookies and similar technologies

Our website uses cookies and similar technologies. When you first visit our site, a cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time. The cookies we use fall into the following categories:

• Strictly necessary cookies — required for the site to function. These do not require your consent.
• Statistical / analytics cookies — used solely to understand how visitors use our own site. We do not use them to track you across other sites, and you can opt out at any time.
• Functional / appearance cookies — remember your preferences and how the site is displayed to you. You can opt out at any time.
• Marketing / advertising cookies — used to show you relevant advertising. We only set these with your consent, which you can give or withdraw at any time.

You can also manage cookies through your browser settings. Blocking some cookies may affect how the site works.

9. How we protect your information

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. No method of transmission or storage is completely secure, but we work to keep our systems and processes up to date.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will post the updated version on our website and update the “Last updated” date above. Where changes are significant, we will take reasonable steps to bring them to your attention.

11. Contact us

For any question, request or complaint about the personal data we process through the Century 21 UK website, please contact our Data Protection Officer:

Sam Molyneux-Summers, Data Protection Officer

Maurice MacNeill Iona Limited

13 Whittingehame Drive, Glasgow, G12 0XT

compliance@century21uk.com

If your matter is being handled by a local Century 21 office, that office is a separate data controller with its own Data Protection Officer — please refer to that office’s own privacy policy and contact details for data it holds.