Privacy & Cookie Policy

Kanaloa House is a trading name of TMG UK Services Limited, company number 13737761, whose registered office is at 4–7 Great Pulteney Street, London, United Kingdom, W1F 9NA (“we”, “us” and “our”). We are based in the UK and are the controller responsible for your personal data.

This policy also covers the CCTV and other security systems used when you visit our premises.

If you have concerns about how we have handled your personal data, please contact us first at enquiries@kanaloahouse.com. You also have the right to complain to the Information Commissioner’s Office.

Personal data is information from which an individual can be identified. Depending on your relationship with us, we may collect:

• Identity and contact data, including your name, occupation, address, telephone number, email address and information you provide when contacting us.
• Employment data, including employment history, education and information supplied with a CV or job application.
• Financial and transaction data, including payment details and information about services purchased from or supplied to us.
• Marketing and communications data, including your preferences for receiving communications from us.
• Technical and usage data, including IP address, browser and device information, operating system, time zone and how you interact with this website.
• Security data captured by CCTV and other security systems at our premises.

We may also use aggregated statistical or demographic data that does not directly or indirectly identify you.

We collect personal data through your direct interactions with us—for example, when you correspond by email, phone, post or otherwise—and through automated technologies such as essential cookies, server logs and similar technologies used when you visit this website.

We may also receive information from service providers, professional advisers, agents and other organisations where this is lawful and relevant to our relationship with you.

We only use personal data when the law allows us to. We may process it where necessary to perform a contract or take steps at your request before entering one; to comply with legal or regulatory obligations; for our legitimate interests where your rights do not override those interests; or with your consent where consent is required.

We may share personal data with companies in the TMG UK Services Limited group; agents, advisers, banks, brokers, insurers, auditors and accountants; IT, hosting, cybersecurity and administrative service providers; marketing and communications partners where you have opted in; regulators, law enforcement and professional advisers; and parties involved in a potential or actual sale, merger or restructuring.

We require third parties to respect the security of personal data and to process it only for specified purposes and in accordance with the law.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, tax, accounting and reporting requirements. In general, we do not keep personal data for longer than six years unless a longer period is required or permitted by law.

We use appropriate security measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure, and restrict access to those with a genuine business need. No internet transmission is completely secure, so we cannot guarantee the security of data sent to us online.

Where personal data is transferred outside the UK or European Economic Area, we use appropriate safeguards required by applicable data-protection law, such as adequacy regulations or approved contractual protections.

This website links to third-party websites, including the resident portal and letting agents’ services. Those websites have their own privacy policies. We are not responsible for their content or privacy practices and recommend reviewing their policies before providing personal data.

Cookies are small text files placed on your device by a website. This website uses technologies that are strictly necessary for security, access and reliable operation, including one cookie (kh_consent) that records your cookie choice for twelve months. It also uses Adobe Fonts and Google Fonts, which may receive limited technical information when the typefaces are delivered to your browser.

With your consent, we use Google Analytics to understand how the website is used, such as which sections and links are visited and how far the page is read. Google Analytics sets cookies (_ga, and _ga_ followed by an identifier, retained for up to two years) that distinguish visitors using a random identifier; the data is processed by Google LLC and may be transferred outside the UK under appropriate safeguards. We do not use advertising cookies. Nothing is measured until you accept, and you can withdraw consent at any time using the “Cookie settings” link at the foot of the page, which also removes the analytics cookies. You can also control or delete cookies through your browser settings, although blocking essential cookies may affect how a website functions.

Depending on the circumstances, you may have the right to:

• request a copy of the personal data we hold about you;
• ask us to correct incomplete or inaccurate information;
• ask us to erase personal data;
• object to or restrict our processing;
• ask us to transfer your data to you or another party;
• withdraw consent where consent is the basis for processing; and
• make a complaint to the ICO.

We may update this policy to reflect legal, regulatory or operational changes. Any revised policy will take effect when published on this website.

Last updated 23 September 2026