Privacy

Introduction Legal & General Property Limited in its capacity as investment advisor to Cetza Trustees V3 Limited and Cetza Trustees V4 Limited in their capacity as joint trustees of the Salford Property Unit Trust and investment advisor to Cetza Trustees V3 Limited and Cetza Trustees V4 Limited in their capacities as joint trustees of BTR Core Fund Jersey Property Unit Trust (“Legal & General”, “we” or “us”) is committed to protecting your privacy and keeping your personal information secure. This privacy policy (“Policy”) outlines the basis on which we collect, store and use your personal information. Any personal information you supply to us via our websites (and by any other means) will be treated in accordance with any applicable data protection laws (including the General Data Protection Regulation (EU) 2016/679 (known as the “GDPR”)) and other legislation intended to protect your personal information and privacy, in each case as may be amended, replaced or in force from time to time. If we hold information about you, we’ll only use this for the purposes you’ve agreed to as set out in this Policy. This Policy was last updated on 21 August 2019. We may update this Policy, so please check this page from time to time to make sure that you’re happy with any changes. What information we collect about you and how and why we collect it 1. When you visit our websites You may choose to give us certain information about you when you visit our websites, including your:

• name and contact information including email address;
• demographic information such as postcode, preferences and interests;
• details of your visits to our website and the resources that you access, including, but not limited to, traffic data, location data, internet log information, cookies, weblogs and other communication data.

We may collect this information from you in order to:

• administer the online application process;
• identify general customer trends;
• track your internet browsing (in accordance with our Cookie Policy);
• improve our service to you; and
• communicate with you.

2. When reserving and staying at an apartment When reserving and staying at one of our apartments, we may collect the following information from you on our application forms, declarations or notices:

• name and contact information including, phone number and email address;
• demographic information such as postcode, preferences and interests;
• details of your stay in our apartments and the amenities that you access;
• CCTV footage; and
• (only if you are injured at one of our managed apartment buildings) data concerning health.

We may collect this information from you in order to:

• provide you with access to one of our apartments;
• provide you with access to one of our services that you have requested (e.g. our amenities);
• comply with our legal health and safety obligations

3. When emailing us If you communicate with us by email, we may collect certain information from you, including your:

• name and contact information (as set out in your email to us);
• opinions and feedback on your experience of our services; and
• any other personally identifiable information you choose to share in your email to us.

We will collect this information in order to:

• understand your needs and provide you with a better service;
• reply to your email and effectively address your concerns;
• analysis and to assist us with improving our processes, products and services;
• keep accurate business records; and
• (where we have legitimate authority to do so) send you promotional emails about new products, special offers or other information we think might be of interest, using the email address you provided.

4. When applying for a job You may choose to give us certain information about you when you apply for a job with us, including your:

• title, forename and last name;
• contact phone number;
• email address;
• ethnicity and race; and
• current and previous employment information.

We may collect this information about you to:

• assess your eligibility to work in the UK;
• assess whether you meet the job specification criteria; and
• contact you to arrange interviews or assessments or to communicate our decision in relation to your application.

How we may share your information We may give general statistics about our customers, sales, and related site information to other companies however these statistics will not include any information that personally identifies you, except as we have stated below. In particular, we may share your personal information with third-parties such as other entities within our group of companies or third party service providers. 1. Group companies We may share your information with other entities within our group of companies including for example Legal & General Investment Management Limited (no 2091894), LGIM Real Assets (Operator) Limited (no 5522016) and Legal & General Group PLC (no 1417162). 2. Third-party service providers We may, where necessary, share your personal information with third-party service providers, suppliers, partners, associated organisations and agents, for example, providing personal information to repair and maintenance contractors. 3. Third-party advertisers We may share your personal information with other entities for digital advertising purposes (such as Facebook or Google) to assist us in finding other people with similar interests to our current customers and to bring you relevant adverts on our websites. 4. Where required to do so In exceptionally rare circumstances, we may be required to disclose your information under a court order or if requested by the police or other regulatory or governmental authority. How we protect your information We ensure that all information that you provide us is stored using technical measures that are appropriate considering the nature, scope, context and purpose for which we are using it. Transfers outside of the EEA We may transfer the information that we collect about you outside of the European Economic Area (“EEA”) from time to time. This is due to the global nature of the internet. For instance, we may store certain information about you on servers which are located in the USA. In order to safeguard your information, we ensure that the entity that we are transferring your information to either:

• entered into the EU Model Clauses with us;
• entered into Binding Corporate Rules with us; or
• is listed on the EU-US Privacy Shield.

Retention Your information will only be retained by us for as long as is necessary to fulfill the purpose for which we collected it. Sometimes this will require us holding on to your information after the end of our contract with you (for example, to fulfill our legal obligations or accounting requirements). In determining the appropriate length of time to hold your personal information, we consider a variety of factors such as the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We securely erase your information once it is no longer needed. Your rights concerning your information Under certain circumstances you have the right, by law, to:

• Request access to your personal information (commonly referred to as a “data subject access request”), which allows you to receive a copy of the personal information we hold about you and to check that we lawfully process it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third-party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party.
• Withdraw your consent for us to use your personal information at any time.

If you’d like to enforce any of the rights mentioned above, please contact the Data Controller at urbanbubble ([email protected]). Most of the time, you can exercise any of the rights above free of charge. However, if your request is either unfounded or excessive, we may: (a) refuse to respond; or (b) charge you a reasonable administrative fee to comply with your request. Although we hope that you would never feel that you had to, you do have the right to lodge a complaint with the supervisory authority, The Information Commissioner’s Office – www.ico.org.uk.