A 'cookie' is a small text file that is delivered by our website server onto your computer whilst you visit our website. This can be used at a later time by the website to identify particular devices and thereby remember your website preferences and log in details. Most cookies will not collect information that identifies you and will instead collect more general information such as how users arrive at and use our websites, or a user's general location.

We only drop the "Strictly Necessary Cookies" which are essential for enabling user movement around our website. These cookies do not gather information about you that could be used for marketing purposes and do not remember when you have been on the internet. This category of cookies cannot be disabled. More detail on how businesses use cookies is available at 

This Cookie Policy has been updated on 7th December 2022, and any changes we make to our Cookie Statement in the future will be posted on this page.

Cookies Policy

Welcome to the Dorrington group privacy policy.

Dorrington PLC (and its group of companies) respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

This privacy policy is provided in a layered format so you can click through to the specific areas set out below. Please also use the Glossary to understand the meaning of some of the terms used in this privacy policy.

This privacy policy aims to give you information on how Dorrington PLC (and its group of companies) collects and processes your personal data, including through your use of this website (provided by Dorrington PLC on behalf of its group), or in respect of any property or proposed tenancy (or commercial tenancy) related matter.

This website is not intended for children, and we do not knowingly collect data relating to children.

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.


Dorrington PLC is part of the Dorrington Group of companies (with the ultimate parent company being Hanover Acceptances Ltd), which is made up of different legal entities. This privacy policy is issued on behalf of the Dorrington Group so when we mention "

" in this privacy policy, we are referring to the relevant company in the Dorrington Group responsible for processing your data. We will let you know which entity will be the controller for your data when you engage with us and the terms of this privacy policy will apply in respect of that Dorrington Group entity in respect of their processing of your data. Dorrington PLC is the controller and responsible for this website.

We have appointed a data protection manager who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy or who the applicable data controller for your personal data is, including any requests to exercise your legal rights, please contact the data protection manager using the details set out below.


If you have any questions about this privacy policy or our privacy practices, please contact our data protection manager in the following ways:

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (

). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Changes to the privacy policy and your duty to inform us of changes

We keep our privacy policy under regular review. This version was last updated on 28 November 2024.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.


This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:


 includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, gender, national insurance number, profession, and copies of passports.

 includes billing address, delivery address, email address and telephone numbers.

 includes copies of payslips, which may include bank account details.

 includes details about payments to and from you and other details of payments you have made with us.

 includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.

 includes any responses to tenant surveys that we may carry out.

 includes information about how you use our website and services.

 includes your preferences in receiving marketing from us and our third parties and your communication preferences.

 such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will 

 directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.


We may collect Special Categories of Personal Data about you (this may include details about your health). This is because we may need to provide you with information about our properties that cater for any form of disability or other special needs, including ensuring our fire strategies are suitable.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to enter into a tenancy agreement). In this case, we may not be able to provide you with our services, but we will notify you if this is the case at the time.

We use different methods to collect data from and about you, including through:


 You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

Request information about our properties;

Call or email us about any issues at your property;

Use one of our online platforms where we carry out direct lets;

Make enquiries to view on of our properties prior to a tenancy arrangement being entered into;

Arranging and completing a stay as a serviced guest at one of properties (not as a tenant);

Allow us to take references in respect of you from previous landlords (where applicable);

 As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see our 

Third parties or publicly available sources.

 We will receive personal data about you from various third parties and public sources as set out below:

Identity, Contact and Financial Data from our letting or managing agents, who manage our properties, or from previous landlords when providing references about you.

Identity and Contact Data, from publicly available sources such as the Land Registry based inside the UK.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform the contract we are about to enter into, or have entered into with you, for example, entering into a tenancy or serviced guest agreement or enforcing any of the terms within it.

Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

Where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data, as we rely on a different legal bases (as detailed in the table below).

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.


Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data, where more than one ground has been set out in the table below.

Lawful basis for processing including basis of legitimate interest

To engage with you and process your enquiries, request for information or where you are seeking to enter into an arrangement with us

(a) Performance of a contract with you (in order to process your enquiry or provide you with relevant information)

(b) Necessary for our legitimate interests (to engage with you on your enquiries and create contact records for you)

To engage you as a tenant or lessee, or guest

Privacy Policy

Dorrington PLC is part of the Dorrington Group of companies (with the ultimate parent company being Hanover Acceptances Ltd), which is made up of different legal entities. This Privacy Notice is issued on behalf of the relevant Dorrington Group company whom you are entering into an occupier agreement or lease arrangement with, so when we mention "Dorrington", "we", "us" or "our" in this Privacy Notice, we are referring to the relevant company in the Dorrington Group responsible for processing your data. We will let you know which entity will be the controller for your data when you engage with us and the terms of this Privacy Notice will apply in respect of that Dorrington Group entity in respect of their processing of your data.

If you have a data protection matter and would like to contact us, please email 

. If you have another matter regarding your property that you would like to discuss, please contact the managing agent of your property in the first instance, you can find this information within your occupier agreement.

This Privacy Notice tells you what information we collect, hold, process, and share about you as an existing or former occupier, or if you are applying for an occupier relationship with us. This Privacy Notice also explains why we collect your personal data and under what legal basis. Where we refer to your ‘personal data’, ’data’ or ‘information’, this means information about yourself that does, or could, identify you – this does not include any anonymised data. You should read this Privacy Notice when you give us information, so you are aware of how and why we are using this.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Please note that our website privacy policy contains full information on our activities in respect of personal data. To find it, please visit 

Why you are receiving this Privacy Notice:

Under data protection legislation, being the UK General Data Protection Regulations and the Data Protection Act 2018, we are required to provide you the information contained within this Privacy Notice. As well as the above, it also details the rights you have in respect of the personal data we hold about you.

For details of your rights under data protection laws, including the right to receive a copy of the personal data we hold about you, and the right to make a complaint at any time to the Information Commissioner's Office, the UK regulator for data protection issues (

), please see our website privacy policy, found here 

https://www.dorrington.co.uk/privacy-policy

As a occupier (prospective or otherwise), we may collect the following types of information about you, which we have grouped together:

 includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, gender and CCTV imagery.

 includes your address, email address and telephone numbers.

 includes bank account details, financial references, verification, and credit status.

 includes information about your health or any disability. We may collect Special Category Data about you because we may need to provide you with information about our properties that cater for any form of disability or other special needs, including ensuring our fire strategies are suitable.

 includes any responses to occupier surveys that we may carry out.

We may also collect and receive data about you from third parties. This may be information given to us by other occupiers, residents or neighbours or could be obtained from a publicly available source such as a search engine or social media platforms. It can also include information from a guarantor where there is a guarantor for your occupier relationship or from a joint occupier or other residents.

Public bodies such as local authorities or the police, or other law enforcement agencies may also give us information about you. This can include the Department for Work and Pensions or the local authority where you are receiving Universal Credit or housing benefit. Information may be given to us relevant to Council Tax by the local authority. Utility companies or service providers may also give us personal information about you. Where the property is let or managed on our behalf by an agent, the agent will supply us with information about you. We obtain information about you when we carry out credit checks or take up references.

In cases where you live at property where a child resides, we may collect information about that child from an adult, such as a parent or legal guardian on their behalf. Data protection legislation requires us to give such information additional protection where we collect or use it.

We may share personal data with various third parties, where we consider it necessary. Where we do share personal data, we will comply with data protection legislation. We may share information may be shared with the following third parties:

Joint occupiers (only if you have a joint occupation)

Providers of our IT systems and hosted facilities (including cloud providers) and those operating our occupier portal

For details on any international transfers of personal data, please see our website privacy policy.

Where we have an obligation to process data:

We have an obligation to carry out gas safety checks under gas safety legislation. We may need to handle data for this purpose, e.g. to give a contracted gas safety engineer access to the property (through our managing agents). We may also be required to pass over details of your occupancy to the relevant water company to enable them to collect water charges as it is in their legitimate interests to receive this information.

Legally we must also hold and process information relating to any occupier relationship deposit which you pay to us, including sharing your information with a deposit scheme by which any deposit is protected. Similarly, there are various regulatory requirements which may mean that we need to give information about you to public or local authorities or other regulatory authorities.

We also may notify local authorities of your occupancy in respect of any council tax obligations.

Where we need to perform the contract (occupier agreement) we are about to enter into or have entered into with you.

Please see our website privacy policy for an in-depth description of each legal basis.Generally, we do not rely on consent as a legal basis for processing your personal data.

The various purposes for which it may be necessary for us to process various categories of your information include (with our legal basis in brackets): -

Deciding on your suitability as an occupier or resident (legitimate interests for deciding on suitability)

Managing your occupation (performance of a contract – the occupier agreement)

To secure rental payments/performance of occupier obligations, e.g. deposits and guarantors (performance of a contract – the occupier agreement)

Arranging repairs and maintaining the condition of the property and keeping it in a safe condition (performance of a contract – the occupier agreement and complying with our legal obligations)

Monitoring and enforcement of occupier responsibilities (performance of a contract – the occupier agreement)

Processing any complaints (legitimate interests to solve any issues that arise)

Provide public or local authorities with information (performance of a legal obligation)

To process CCTV images for security and to detect breaches of occupier terms (legitimate interests)

To send marketing literature to you (legitimate interests, for providing you with information relating to our properties and/or services, which may be of interest to you)

We will only use your personal data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason, and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. Please contact us if you wish to change any marketing preferences that you have provided to us.

We may use your Identity, Contact and Marketing and Communications Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).

You will receive marketing communications from us if you have requested information from us or purchased services from us and you have not opted out of receiving that marketing.

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of any occupier services, or any other uses as detailed in this Privacy Notice.

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include:

Request correction of your personal data.

Object to processing of your personal data.

Request restriction of processing your personal data.

For more information on the above, please see our website privacy policy.

This Privacy Notice was last updated on 28 November 2024.

Commercial Occupiers Privacy Notice

Dorrington PLC is part of the Dorrington Group of companies (with the ultimate parent company being Hanover Acceptances Ltd), which is made up of different legal entities. This Privacy Notice is issued on behalf of the relevant Dorrington Group company whom you are entering into a tenancy agreement or lease arrangement with, so when we mention "Dorrington", "we", "us" or "our" in this Privacy Notice, we are referring to the relevant company in the Dorrington Group responsible for processing your data. We will let you know which entity will be the controller for your data when you engage with us and the terms of this Privacy Notice will apply in respect of that Dorrington Group entity in respect of their processing of your data.

. If you have another matter regarding your property that you would like to discuss, please contact the managing agent of your property in the first instance, you can find this information within your tenancy agreement.

This Privacy Notice tells you what information we collect, hold, process, and share about you as an existing or former tenant or lessee, or if you are applying for a tenancy with us. This Privacy Notice also explains why we collect your personal data and under what legal basis. Where we refer to your ‘personal data’, ’data’ or ‘information’, this means information about yourself that does, or could, identify you – this does not include any anonymised data. You should read this Privacy Notice when you give us information, so you are aware of how and why we are using this.

As a tenant (prospective or otherwise), we may collect the following types of information about you, which we have grouped together:

We may also collect and receive data about you from third parties. This may be information given to us by other tenants, residents or neighbours or could be obtained from a publicly available source such as a search engine or social media platforms. It can also include information from a guarantor where there is a guarantor for your tenancy or from a joint tenant or other residents.

Joint tenants (only if you have a joint tenancy)

Providers of our IT systems and hosted facilities (including cloud providers) and those operating our tenant portal

Legally we must also hold and process information relating to any tenancy deposit which you pay to us, including sharing your information with a deposit scheme by which any deposit is protected. Similarly, there are various regulatory requirements which may mean that we need to give information about you to public or local authorities or other regulatory authorities.

Where we need to perform the contract (tenancy agreement) we are about to enter into or have entered into with you.

Deciding on your suitability as a tenant or resident (legitimate interests for deciding on suitability)

Managing your tenancy (performance of a contract – the tenancy agreement)

To secure rental payments/performance of tenant obligations, e.g. deposits and guarantors (performance of a contract – the tenancy agreement)

Arranging repairs and maintaining the condition of the property and keeping it in a safe condition (performance of a contract – the tenancy agreement and complying with our legal obligations)

Monitoring and enforcement of tenant responsibilities (performance of a contract – the tenancy agreement)

To process CCTV images for security and to detect breaches of tenancy terms (legitimate interests)

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of any tenancy services, or any other uses as detailed in this Privacy Notice.

Residents Privacy Notice

1.1 — Modern slavery is a crime. It takes various forms, such as slavery, servitude, forced and compulsory labour and human trafficking, all of which have in common the deprivation of a person's liberty by another in order to exploit them for personal or commercial gain. We have a zero-tolerance approach to modern slavery and to implementing and enforcing effective systems and controls to ensure modern slavery is not taking place anywhere in our own business or in any of our supply chains.

1.2 — We are also committed to ensuring there is transparency in our own business and in our approach to tackling modern slavery throughout our supply chains, consistent with our disclosure obligations under the Modern Slavery Act 2015. We expect the same high standards from all of our contractors, suppliers and other business partners, and as part of our contracting processes, we include specific prohibitions against the use of forced, compulsory or trafficked labour, or anyone held in slavery or servitude, whether adults or children, and we expect that our suppliers will hold their own suppliers to the same high standards.

1.3 — This policy applies to all persons working for us or on our behalf in any capacity, including employees at all levels, directors, officers, agency workers, interns, agents, contractors, external consultants, third-party representatives and business partners.



2.1 — The Board of Directors has overall responsibility for ensuring this policy complies with our legal obligations, and that all those under our control comply with it.

2.2 — Michael Jenkins FD has primary and day-to-day responsibility for implementing this policy, monitoring its use and effectiveness, dealing with any queries about it, and auditing internal control systems and procedures to ensure they are effective in countering modern slavery.

2.3 — Line managers at all levels are responsible for ensuring those reporting to them understand and comply with this policy and are given adequate and regular training on it and the issue of modern slavery in supply chains.

2.4 — You are invited to comment on this policy and suggest ways in which it might be improved. Comments, suggestions and queries are encouraged and should be addressed to Michael Jenkins.



3.1 — You must ensure that you read, understand and comply with this policy.

3.2 — The prevention, detection, and reporting of modern slavery in any part of our business or supply chains is the responsibility of all those working for us or under our control. You are required to avoid any activity that might lead to, or suggest, a breach of this policy.

3.3 — You must notify your manager as soon as possible if you believe or suspect that a conflict with this policy has occurred, or may occur in the future.

3.4 — You are encouraged to raise concerns about any issue or suspicion of modern slavery in any parts of our business or supply chains of any supplier tier at the earliest possible stage.

3.5 — If you believe or suspect a breach of this policy has occurred or that it may occur you must notify your manager as soon as possible.

3.6 — If you are unsure about whether a particular act, the treatment of workers more generally, or their working conditions within any tier of our supply chains constitutes any of the various forms of modern slavery, raise it with your manager.



Communication and awareness of this Policy

4.1 — Our zero-tolerance approach to modern slavery must be communicated to all suppliers, contractors and business partners at the outset of our business relationship with them and reinforced as appropriate thereafter.

4.2 — All new suppliers must complete our Modern Day Slavery Act questionnaire before they are instructed to carry out work for the group.

4.3 — Any employee who breaches this policy will face disciplinary action, which could result in dismissal for misconduct or gross misconduct.

4.4 — We may terminate our relationship with other individuals and organisations working on our behalf if they breach this policy.