City Root Management Ltd
Privacy policy
Last updated 23 September 2026.
Who we are
The controller for personal information sent through this website is City Root Management Ltd, company number 17071787. The director is Lucinda Jane Elizabeth Freeman. The registered office is 42, Diddington Close, Bletchley, Milton Keynes, MK2 3EB, United Kingdom.
Email: [email protected].
What this website can collect
If you use the property enquiry or contact form, the information you choose to provide may include:
- Name
- Email address
- Telephone number, if you provide one
- Current country or location, if you volunteer it
- Property postcode
- Property type and property use
- Occupancy pattern
- The kinds of support you want to discuss
- Property-system category, such as whether an alarm or smart heating exists — not the credentials for it
- Maintenance information and a short description of an existing issue
- Visit preference and preferred timeframe
- Notes you write
- Your cookie choice
The site does not ask you to create an account. It does not collect payment-card details. Server or host logs, held by the organisation that serves the website, may include a technical record such as an IP address and the page requested. That hosting record is separate from the enquiry form.
What you should not send
Do not submit any of the following through this website or by email unless City Root has expressly arranged a secure method for a live instruction:
- Alarm codes
- Door codes
- Passwords
- CCTV credentials
- Smart-home credentials
- Key-safe combinations
- Bank or card information
The forms are not designed to collect those secrets, and this policy does not describe them as data we hold.
How information is used
Enquiry details are used to reply, to understand whether City Root can assist with the property, and to prepare a discussion of scope. They are not sold. They are not used to build a published client list. They are not used for automated decision-making that produces a legal effect.
Legal basis
Replying to an enquiry and preparing to discuss a service is done in order to take steps at your request before a contract (UK GDPR Article 6(1)(b)). Keeping a short record of that correspondence, and protecting the website from misuse, is done on the basis of legitimate interests (Article 6(1)(f)): responding properly and keeping an accurate note of what was asked. Analytics, if it is ever switched on, is used only after consent (Article 6(1)(a)).
Cookies and analytics
The cookie choice is stored in your browser’s local storage under the key cityroot-consent. That storage is essential so the site can remember whether you accepted or rejected analytics. Analytics scripts are not loaded before consent. If no analytics identifier is configured, no analytics service is loaded even if you accept. You can change or withdraw the choice at any time from or the cookie policy.
Processors
If you send the form by email, the message is received by City Root at [email protected]. If a form provider is later connected — for example Formspree, a CRM, or another email handler — that provider will process the enquiry on City Root’s instructions, and this policy will be updated to name them. Hosting of the static website may be provided by the organisation that serves cityroot.co.uk. Where a processor is outside the UK, an appropriate transfer safeguard will be used.
Retention
Enquiry correspondence is kept for as long as needed to respond and to keep a record of the discussion. The intended period is up to 24 months from the last meaningful contact, unless a service relationship continues, a different period is set in a service agreement, or the information is needed to establish, exercise or defend a legal claim. Cookie preferences stay in your browser until you clear them or change them.
Your rights
Depending on the circumstances, you may have the right to:
- Ask for a copy of the personal information we hold about you
- Ask for correction of information that is inaccurate
- Ask for erasure
- Ask us to restrict processing
- Object to processing based on legitimate interests
- Ask for portability of information you provided, where the request is based on contract or consent and processing is automated
- Withdraw consent, where consent is the basis, without affecting processing that took place before withdrawal
You can complain to the Information Commissioner’s Office at ico.org.uk. We would like the chance to put something right first, so please write to us before you do.
Contact
Privacy requests: [email protected], or by post to the registered office above. Please do not include property-security secrets in a privacy request.
This policy describes the website. A later management agreement may set additional terms for information collected once a service has started.