Privacy & Data Handling Policy

1. Information We Collect When You Submit an Enquiry

When you submit an enquiry through our property detail pages, advisor pages, or the Contact page, our server validates and collects the following fields:

• Full Name & Email Address (required to respond to your enquiry)
• Phone Number (optional, validated if provided)
• Enquiry Type, Optional Property Reference & Message (required to understand your brief and assign an advisor)
• Consent Timestamp & Rate-Limit Metadata (recorded for abuse prevention and compliance auditing)

2. Purpose of Processing & Transactional Outbox

Enquiries are stored in the HAVENRIDGE database (`enquiries` table) and paired with a transactional notification record (`email_outbox` table) so an assigned advisor or administrator can review and follow up on your request. We do not sell, rent, or syndicate your personal contact details to third-party lead brokers.

3. Retention Window (180 Days)

Personal enquiry records (`name`, `email`, `phone`, and `message`) are retained for a default period of 180 days from submission (`retention_until`), unless an active advisory engagement requires longer retention or you request earlier deletion.

4. Cookies & Session Security

Public visitors browsing HAVENRIDGE are not tracked by third-party advertising cookies. Authenticated internal CMS staff at /admin receive a strictly necessary HttpOnly, SameSite=Lax signed session cookie (havenridge_session) and CSRF token cookie (havenridge_csrf) for access control.

To request a copy of an enquiry you submitted or ask for immediate deletion of your personal data prior to the 180-day retention expiry, please submit a request via our validated Contact form referencing your enquiry email address or reference code.