Privacy Policy
Last updated: 30 July 2026
This Privacy Policy explains how Easternrose Limited, trading as Corby Business Centre, collects, uses, stores and shares personal information when you visit our website, contact us, visit our premises or use one of our services.
1. Who we are
Easternrose Limited, trading as Corby Business Centre, is the controller of the personal information described in this policy.
Company: Easternrose Limited
Company number: 04010388
Registered address: Corby Business Centre, Eismann Way, Corby, Northamptonshire NN17 5ZB
Privacy enquiries: info@easternrose.co.uk
General enquiries: info@corbybusinesscentre.co.uk
Telephone: 01536 648005
2. What this policy covers
This policy applies to personal information collected through:
- the Corby Business Centre website;
- website enquiry and application forms;
- email, telephone and postal correspondence;
- office, meeting room, coworking and storage enquiries;
- Virtual Tenancy applications and services;
- customer, tenant and supplier relationships;
- visits to Corby Business Centre; and
- website analytics, security logs and cookies.
3. Personal information we collect
Website and general enquiries
When you contact us, we may collect:
- your name;
- email address;
- telephone number;
- postal or business address;
- company name;
- the contents of your enquiry; and
- your preferred method of contact.
Customers, tenants and suppliers
When you use or supply services, we may also collect:
- company and billing details;
- contracts, correspondence and service records;
- invoice and payment information;
- BACS payment references;
- authorised contact details;
- access, maintenance and support records; and
- information needed to administer the service.
Virtual Tenancy applicants and customers
Virtual Tenancy applications require additional information so that we can provide the service and meet our legal anti-money laundering obligations. This may include:
- your full name and home address;
- telephone number and email address;
- company name and registration number;
- the nature and ownership of the business;
- your preferred package and start date;
- passport, driving licence or birth certificate copies;
- proof-of-address documents;
- certificates of incorporation and company officer information;
- information about directors and individuals holding 25% or more of shares or voting rights;
- risk-assessment and identity-verification records; and
- application and service correspondence.
You can read the service-specific data-protection terms in our Virtual Tenancy Terms & Conditions .
Website usage and technical information
When you use the website, we may collect:
- your IP address;
- browser and device information;
- pages viewed and actions taken;
- referring websites and general location information;
- cookie choices;
- form submission and spam-prevention information; and
- website security and server-log information.
Comments
If comments are enabled and you leave a comment, we may collect the information entered in the comment form, your IP address and browser user-agent information for moderation and spam detection.
Visitors to our premises
If you visit Corby Business Centre, we may collect visitor information, contact details, access records and CCTV images for site security, safety, access management and the prevention or investigation of crime.
4. How we use your information and our lawful bases
| Purpose | Information used | Lawful basis |
|---|---|---|
| Responding to enquiries | Contact details, company information and enquiry content | Taking steps at your request before entering a contract and our legitimate interests in responding to business enquiries |
| Providing and administering services | Customer details, contracts, service records, correspondence and billing information | Performance of a contract and compliance with legal obligations |
| Processing Virtual Tenancy applications | Applicant, business, ownership and identity-verification information | Taking steps before entering a contract, performance of a contract and compliance with legal obligations |
| AML and fraud prevention | Identity documents, beneficial-ownership information, risk records and correspondence | Compliance with legal obligations and our legitimate interests in preventing fraud and unlawful use of our services |
| Payments and accounting | Invoices, transactions, payment references and account records | Performance of a contract and compliance with tax and accounting obligations |
| Website operation and security | IP addresses, device information, server logs and security records | Our legitimate interests in operating, securing and improving the website |
| Website analytics | Cookie identifiers and website usage information | Your consent where non-essential cookies or similar technologies are used |
| Marketing communications | Contact details and marketing preferences | Consent, or our legitimate interests where direct marketing is otherwise permitted by law |
| Site access, safety and CCTV | Visitor details, access records and CCTV footage | Our legitimate interests in maintaining a safe and secure site and preventing or investigating crime |
| Legal claims and regulatory requests | Relevant customer, application, payment and correspondence records | Compliance with legal obligations and our legitimate interests in establishing, exercising or defending legal claims |
Where we rely on legitimate interests, we consider whether our use of the information is necessary, proportionate and balanced against your rights and interests.
Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.
5. Where we obtain personal information
We usually receive personal information directly from you. We may also receive it from:
- another director, shareholder or authorised representative;
- your employer, accountant, solicitor or professional adviser;
- Companies House and other public registers;
- identity-verification, fraud-prevention or credit-reference services;
- referral partners or existing customers;
- website analytics and security services; and
- public authorities where permitted or required by law.
6. When you must provide information
Some information is required so that we can respond to an enquiry, enter into a contract, provide a service or comply with the law.
In particular, we cannot activate a Virtual Tenancy until the required identity and ownership checks have been completed. If required information is not provided, we may be unable to process an application or provide the requested service.
9. International transfers
Some website, analytics, email or technology suppliers may process personal information outside the United Kingdom.
Where a restricted international transfer takes place, we use an appropriate legal mechanism, such as:
- UK adequacy regulations;
- the UK International Data Transfer Agreement;
- the UK Addendum to approved contractual clauses; or
- another lawful safeguard or exception.
You can contact us for further information about the safeguards used for a particular transfer.
10. How long we keep personal information
We keep personal information only for as long as it is reasonably required for the purpose for which it was collected, including legal, regulatory, accounting and dispute-resolution requirements.
| Type of information | Usual retention approach |
|---|---|
| General enquiries | Normally up to 24 months after the last meaningful contact, unless the enquiry becomes a customer relationship or must be retained for a legal reason |
| Customer and contract records | For the duration of the relationship and normally up to 6 years afterwards where required for accounting, tax or legal purposes |
| Invoices and financial records | Normally 6 years from the end of the relevant financial year, or longer where required by law |
| Virtual Tenancy AML records | At least 5 years from the end of the business relationship or completion of the relevant transaction, as required by AML legislation |
| Unsuccessful applications | Only for as long as required to complete the application decision, prevent fraud, respond to complaints and meet any applicable legal or AML record-keeping obligations |
| Website security logs | For the shortest period reasonably needed to maintain security, investigate incidents and protect the website |
| Analytics information | According to the retention period configured within the analytics service and only while it remains necessary for website measurement |
| Comments | For as long as the comment remains published or is needed for moderation, record keeping or dispute handling |
| CCTV footage | For the shortest period necessary for security purposes, unless footage is required for an incident, investigation or legal claim |
Information may be kept for longer where required by law, a regulator, an active investigation or an actual or anticipated legal claim. When information is no longer required, it is deleted, anonymised or securely destroyed.
11. How we protect your information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
These measures may include:
- restricted access to personal information;
- password and account-access controls;
- secure hosting and encrypted website connections;
- software updates, backups and security monitoring;
- staff confidentiality and data-protection procedures;
- secure transmission and handling of identity documents; and
- secure deletion or destruction when records are no longer required.
No internet or email transmission is completely risk-free. You should avoid sending sensitive documents through unapproved channels.
12. Your data-protection rights
Depending on the circumstances and the lawful basis being used, you may have the right to:
- ask for access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information in certain circumstances;
- ask us to restrict how information is used;
- object to certain uses of your information;
- receive information you provided in a portable format;
- withdraw consent where processing is based on consent; and
- complain about how your information has been collected or used.
Some rights may be limited where we are required to retain or use information to comply with AML, tax, accounting, regulatory or other legal obligations.
To exercise a right, contact info@easternrose.co.uk. We may need to confirm your identity before completing a request.
13. Marketing communications
We may contact you about related services where you have consented or where direct marketing is otherwise permitted by law.
You can unsubscribe at any time by using the unsubscribe option in an email or by contacting us. We may retain a minimal suppression record so that we can respect your preference not to receive further marketing.
14. Automated decision-making
We do not currently make decisions that produce legal or similarly significant effects solely by automated means.
Identity-verification or fraud-prevention tools may assist our checks, but applications and service decisions remain subject to human review.
15. Children’s information
Our website and business services are intended for adults and businesses. We do not knowingly collect personal information from children through our business application processes.
16. External links and embedded content
The website may contain links to or embedded content from third-party websites, including maps, videos, social networks and review platforms.
Those providers may collect information and set their own cookies when you interact with their content. Their use of personal information is governed by their own privacy policies, not this policy.
17. How to complain
Please contact us first if you have concerns about how we use your personal information:
Email:
info@easternrose.co.uk
Telephone:
01536 648005
Address: Corby Business Centre, Eismann Way, Corby,
Northamptonshire NN17 5ZB
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website:
ico.org.uk/make-a-complaint
18. Changes to this policy
We may update this Privacy Policy when our services, suppliers or legal obligations change. The latest version will be published on this page with the updated date shown at the top.
