Blurred image of people walking and sitting in a modern office with glass walls and large windows.

Privacy Statement

In this Privacy Statement, “CLS “we”, “us” and “our”, refer to CLS, a company registered in England and Wales with company registration number 2714781, whose registered address is at 16 Tinworth Street, London, SE11 5AL. CLS can also be contacted at enquiries@clsholdings.com

CLS is committed to safeguarding information from which any individual can be identified, such as names, contact details and ID data (“Personal Information”) provided to us by any third parties (“you”) including its clients, tenants, investors and all visitors to this Website (the “Website“). To the extent that any Personal Information is collected, it will be held in confidence in accordance with the Data Protection Legislation (as defined below). Please read the following Privacy Statement which explains how we use and protect your Personal Information.

We will only use Personal Information which is provided to us, or otherwise obtained by us, as set out in this Privacy Statement. We will ensure that your Personal Information is handled in accordance with the “Data Protection Legislation” (meaning any law applicable from time to time relating to the processing of Personal Information and/or privacy as the same may be re-enacted, applied, amended, superseded, repealed or consolidated, including without limitation, the General Data Protection Regulation (EU) 2016/679, and the Privacy and Electronic Communications (EC Directive) Regulations 2003, in each case including any legally binding regulations, directions and orders issued from time to time under or in connection with any such law).

By visiting and/or contacting us through the Website (or otherwise engaging with us, such as for investor relations purposes or to discuss a possible tenancy), you acknowledge that we may collect, use and transfer your Personal Information as set out in this Privacy Statement. CLS reserves the right to change this Privacy Statement from time to time and you should therefore check this page frequently to ensure that you are happy with any changes.

For the purposes of the Data Protection Legislation, CLS is deemed to be the “data controller” in respect of any Personal Information that you provide to us or we otherwise obtain about you.

This Privacy Statement covers:

  1. Personal Information we collect from you
  2. Personal Information we receive from other sources
  3. Sensitive Personal Information
  4. What we do with your Personal Information
  5. How we share your Personal Information
  6. International transfers
  7. Our security measures and information about when we delete data
  8. Your rights to access and update your Personal Information
  9. Third-party sites
  10. Complaints
  11. Cookies
  1. Personal Information we collect from you

When you engage with us (e.g. sending us emails, contacting us via telephone or visiting or making an enquiry through the Website), you may provide Personal Information about yourself including your name, contact details (e.g. your address, email address and telephone number) and ID data. Where you make use of our Website we may also collect anonymised details about your use of the Website for the purposes of aggregate statistics or reporting purposes, e.g. your IP address and choice of web browser (personally identifiable information is not automatically collected).  Some of this Personal Information is collected and processed so we can perform a contract with you, some for the purpose of legal compliance and some for the purposes of our legitimate business interests (namely to carry out and improve our business, analyse the use of our Website and services and support our staff, tenants and clients).

Where you apply for a job with us, we may collect from you and third parties (where relevant) additional Personal Information such as your CV and any references. Unless you agree that we can keep such information on file for future opportunities or we need to retain such information for compliance with our legal obligations, in the event that you are unsuccessful, we will only retain this Personal Information for as long as is reasonably necessary to process your application.

Where you provide Personal Information on behalf of another individual, you are responsible for notifying that individual that you have provided their Personal Information to us and directing them to this Privacy Statement so they can see how we will process their Personal Information.

  1. Personal information we receive from other sources

We may receive information from third parties who collect Personal Information from you and pass it on to us. For example: (i) the Website is published by Investis Limited (“Investis”) on behalf of CLS and when you visit the Website, Investis’ web server collects some basic information such as your browser type, IP address, internet service provider’s domain name, and which pages you accessed on the site and when; and (ii) your employer may provide your Personal Information to us in connection with a service they provide to us or in connection with services that we provide to our clients.

Where you apply for a job with us, we may receive information from past employers and others concerning your employment history.

Our staff may also give us emergency contact information as part of our emergency scenario planning and may give us details of their dependents and of other people in relation to their employee benefits arrangements.

Where this is the case the third party is responsible for informing you that they have shared your Personal Information with us, directing you to this Privacy Statement and obtaining any relevant consents from you to ensure you are happy with the ways in which your Personal Information will be used.

  1. Sensitive Personal Information

“Sensitive Personal Information” is Personal Information concerning an individual’s (i) racial or ethnic origin, (ii) political opinions, (iii) religious beliefs or other beliefs of a similar nature, (iv) membership of a trade union, (v) physical or mental health or condition, (vi) sexual life or orientation, and/or the (vii) commission or alleged commission of any offence or any proceedings for any offence.

You may provide us with Sensitive Personal Information from time to time (for example in connection with your tenancy.) In such cases, the provision of this information is entirely voluntary and in carrying out the clear affirmative action of choosing to give us that data, you consent to using it for the purpose it was given. Please note that we may be unable to carry out some activities necessary to process your application, instructions or other requests without the provision of such information. For example, we may be unable to process certain forms or requests. We will use any Sensitive Personal Information in accordance with the consent you have given and, where necessary, we may also process such information in the establishment, exercise or defence of legal claims. Where we do receive Sensitive Personal Information, we will only keep such information for as long as strictly necessary in order to comply with our obligations under the law.

  1. What we do with your Personal Information

We will only use your Personal Information in order to (a) carry out our obligations arising from any contracts (including lease agreements); (b) maintain the quality of the Website and analyse the use of the Website in order to guide improvements; (c) provide you with information, products or services that you request from us and correspond with you; (d) provide support to you in respect of our services; (e) where relevant, process your application for employment; (f) comply with our own legal and regulatory obligations; and (g) for our internal business processes.

We may also use your Personal Information to provide you with information about goods and services which may be of interest to you and/or inform you about important changes or developments to our services by post, telephone and email where you have explicitly consented at the time we collected your Personal Information or where we otherwise have a right to do so.

If you do not want us to use your Personal Information in this way, please let us know by contacting us at enquiries@clsholdings.com. You may also opt out of marketing emails by following the instructions outlined in the email.

  1. How we share your Personal Information

We may disclose your Personal Information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the United Kingdom Companies Act 2006.

Where it is necessary for the performance of our contract with you or for our internal business processes, we may share your Personal Information with certain third parties, such as our suppliers, contractors, affiliates, professional advisers, regulatory bodies, auditors, technology providers, and/or third party partners and any duly authorised agents or related, associated or affiliated companies of the foregoing. For example, if you register for the alert service, your name and email address will be held by Investis and they may transfer it to their sub-processors where necessary for administration of the alert service. By signing up for the alert service, you acknowledge that the transfer of your Personal Information to Investis is necessary for the provision of this service.

If a third party acquires all (or substantially all) of CLS’ business and/or assets, CLS may disclose your Personal Information to that third party in connection with the acquisition. CLS may also disclose your Personal Information where required to do so by applicable law, by a governmental body or by a law enforcement agency, or to enforce an agreement or protect the rights, property or safety of CLS, CLS’ group companies and our contractors, directors, employees or other personnel. This includes exchanging information with other companies and organisations for the purposes of fraud protection and prevention.

We will also share your contact details with third party partners in the event that you have consented to receive marketing from such third parties. If you change your mind about being contacted by these parties in the future, please use the unsubscribe links provided in their emails or let us know by contacting us at enquiries@clsholdings.com.

Except as described above, CLS will not disclose, sell or rent your Personal Information to any third party unless you have consented to this or CLS otherwise has a legal basis for doing so. If you do consent but later change your mind, you may contact CLS at any time to ask for any such activity to stop.

  1. International transfers

Any Personal Information provided to CLS will be transferred to and stored on CLS’ servers in the European Economic Area (“EEA“). We take steps to protect your Personal Information from unauthorised access and against unlawful processing, accidental loss, destruction and damage.

In processing your Personal Information, it will sometimes be necessary for us to transfer your Personal Information to a destination outside of the EEA in connection with the above purposes. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers or group companies. Such staff may be engaged in, among other things, the fulfilment of contracts, the processing of details or the provision of support services.

We will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Statement and the Data Protection Legislation when it is processed in, or otherwise accessed from, a location outside the EEA. This means that we will only transfer your Personal Information to third parties outside the EEA if that third party (a) is situated in a country that has been confirmed by the European Commission to provide adequate protection to Personal Information, (b) has agreed (by way of written contract incorporating the “model clauses” as approved by the European Commission or by some other form of data transfer mechanism approved by the European Commission) to provide all protections to your Personal Information as required by the Data Protection Legislation, (c) we have your explicit consent to do so or (d) we otherwise have a legal basis for such transfer. Where any transfer takes place under a written contract, you have the right to request a copy of the safeguards included in that contract and may do so by contacting us at enquiries@clsholdings.com. For the avoidance of doubt, in the event that the UK is no longer a part of the EEA, references in this paragraph to the EEA shall mean the EEA and the UK.

By submitting your Personal Information to us, you acknowledge this transfer, storing or processing of your Personal Information.

  1. Our security measures and information about when we delete data

We will only keep your Personal Information for as long as we reasonably require and, in any event, only for as long as the Data Protection Legislation allows.

Whilst CLS takes appropriate technical and organisational measures to safeguard the Personal Information that you provide, no transmission over the internet can ever be guaranteed secure. Consequently, please note that the security of any Personal Information that you transfer over the internet to CLS cannot be guaranteed and any transmission is therefore at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Some of our premises use:

  • CCTV for the purpose of crime prevention, and where this is used, we will display appropriate notices.
  • Access control measures for the purposes of health and safety management, and where this is recorded it will only be used for emergency purposes e.g building evacuation.
  1. Your rights to access and update your Personal Information

You have the following rights:

  • the right to be provided with copies of Personal Information that CLS holds about you, together with information about how it is processed, free of charge;
  • the right to ask CLS to have inaccurate Personal Information rectified or completed if it is incomplete;
  • the right to ask CLS to erase or stop processing your Personal Information where there is no longer a legal ground for us to hold it;
  • the right to restrict the processing of your Personal Information in certain circumstances;
  • the right to move, copy or transfer your Personal Information in certain circumstances;
  • the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you; and
  • the right to opt out of any marketing communications that CLS (or any third party to whom they have disclosed your Personal Information with your consent) may send you.

If you wish to exercise any of the above rights, please write to CLS at 16 Tinworth Street, London, SE11 5AL or enquiries@clsholdings.com.

  1. Third-party sites

The Website may contain links to other websites operated by third parties. Please note that this Privacy Statement applies only to the Personal Information that CLS collects through the Website and CLS is not responsible for Personal Information that third parties may collect, store and use through their website. You should always read the privacy policy of each website you visit carefully.

  1. Complaints

Should you have any queries or complaints in relation to how we use your Personal Information, please contact us at 16 Tinworth Street, London, SE11 5AL or enquiries@clsholdings.com. Should you wish to take any complaints or queries further, you have the right to contact the Information Commissioner’s Office regarding such issues.

  1. Cookies

A cookie is a small file that, if you consent to it, is sent to your browser from our web server and is stored on your computer. Cookies help us to analyse web traffic and identify which pages of our Website are being used. Our Website also uses cookies to respond to you as an individual so that it can tailor its operations to your needs by gathering and remembering information about your preferences. We only use this information for statistical analysis purposes and then the data is removed from our systems. A cookie in no way gives us access to your computer or any information about you, other than information about how you use the Website and the data you choose to share with us (including data you automatically share with us by way of your browser settings).

In particular, we use the following cookies:

Strictly necessary cookies. These are cookies that are required for the operation of our Website.

Analytical/performance cookies. These cookies collect information about how visitors use our Website, for instance which pages visitors go to most often, and if they get error messages from web pages. Information collected by these cookies is aggregated and therefore anonymous. It is only used to improve how the Website works.

You may see a message on our Website before we store a cookie on your computer which describes the types of cookies we use and what information they might collect. We may also use banners and pop-ups from time to time to give you options around cookies use.

You can also manage cookie use via your browser settings (this will allow you to refuse the setting of all or some cookies) and your browser provider may ask you to confirm your settings. Note, however, that if you block all cookies (including essential cookies) via your browser settings you may not be able to access all or parts of our Website.

You can find more information about the specific cookies we use and the purposes for which we use them in the table below. You can also find more information about cookies generally here: www.allaboutcookies.org.

IS Application

Name Purpose Expiry Category
__utma tracks each user’s number of visits, and the time of the first, the previous, and the current visit (presumably partly for double checking). 2 years Performance cookie
__utmb are used to track how long you stay on a site – when a visit starts and approximately ends 30 Minutes Performance cookie
__utmc are used to track how long you stay on a site – when a visit starts and approximately ends. This expires quickly End of browser session Performance cookie
__utmz tracks where a visitor came from (search engine, search keyword, link) 6 Month Performance cookie
MyInvestisCookie Stores encypted tokens passed through MyInvestis End of browser session Strictly necessary cookie
myinvestisdata store user data when login using myinvestis End of browser session Strictly necessary cookie
sc_fv Flash Version End of browser session Functionality cookie
#sitename#lang Stores Language for the Website End of browser session Functionality cookie
ASP.NET_SessionId SessionId what .NET Manages for maintaining session End of browser session Strictly necessary cookie
.ASPXAUTH Auth Id, which .NET assigns as a uniqueue ID to authenticate user on each request End of browser session Strictly necessary cookie
_ga Google analytics cookie. Used to distinguish users. 2 years Performance cookie
__utmt Google analytics cookie. Used to throttle request rate. 10 Minutes Performance cookie
NREUM This cookie collects the navigation start time with restricted environment End of browser session Performance cookie
NRAGENT This cookie collects end users’ page metrics data End of browser session Performance cookie

IR Tools

Name Purpose Expiry Category
.ASPXFORMSAUTH This attribute is used to specify the HTTP cookie to use for authentication. End of browser session Strictly necessary cookie
.ASPXROLES Cookies used to keep track of if the visitor has any permissions on the website. Only used for logged in users End of browser session Strictly necessary cookie
ASP.NET_SessionId SessionId what .NET Manages for maintaining session End of browser session Strictly necessary cookie

Infrastructure – IS, ID Infrastructure

Name Purpose Expiry Category
AWSELB AWS Classic Load Balancer Cookie:

Load Balancing Cookie: Used to map the session to the instance.

Removed after session with server closes Strictly necessary cookie
AWSALB AWS Classic Load Balancer Cookie:

Load Balancing Cookie: Used to map the session to the instance.

1 Hour Strictly necessary cookie

 

Security

Name Purpose Expiry Category
incap_ses_* Incapsula DDoS Protection and Web Application Firewall:

The cookie on which HTTP requests are related to a certain session (AKA visit).

Re-opening the browser and accessing same site is supposed to be considered different visits.

In order maintain existing sessions (i.e. Session Cookie)

Removed after browser closes Strictly necessary cookie
nlbi_* Incapsula DDoS Protection and Web Application Firewall:

Load balancing cookie. To ensure requests by a client are sent to the same origin server.

Removed after browser closes Strictly necessary cookie
visid_incap_* Incapsula DDoS Protection and Web Application Firewall:

The cookie on which sessions are related to a specific visitor (visitor representing a specific computer) In order to identify clients which have already visited Incapsula. The only cookie that is persistent, for the duration of 12 months.

Persistent for 12 months Targeting / Advertising cookie
__utmv Incapsula Classification cookie:

To see how the client reacts and handles a malformed cookie in order to identify what that client is.

lives up to 900 seconds Performance cookie