Website privacy
Privacy
notice
How Lordship handles personal data shared through this website—and the rights available to you.
- Scope
- Website enquiries
- Last updated
1. Controller and contact details
For the purposes set out in this privacy notice, the controller of personal data processed through this website is LORDSHIP a.s., with its registered address at V Jámě 699/1, 110 00 Praha 1, Czech Republic (the “Controller”). General privacy and website-related enquiries may be sent to info-czechia@lordship.com.
The LORDSHIP group also operates from Rajská 4, 811 08 Bratislava, Slovakia, and through its Nairobi team, Lordship Africa, Bishops Court, 4th Ngong Avenue, off Bishops Road, P.O. Box 47655 – 00100, Nairobi, Kenya. Where an enquiry relates to African operations, the relevant information may also be handled with the support of the Nairobi team and correspondence may additionally be directed to info-africa@lordship.com.
2. Categories of personal data
Depending on the manner in which you use this website, the Controller may process the following categories of personal data:
- identification and contact details, including your name, email address, company name, region selection, enquiry topic, and message content;
- correspondence data you choose to send to us through the contact form, direct email, or other business communication;
- technical and usage information generated when you access the website, to the extent necessary for security, delivery, and basic operation of the site; and
- any additional information you voluntarily provide when discussing investment, development, leasing, media, residential, or other business matters with us.
3. Purposes of processing
The Controller processes personal data only to the extent necessary for specified and legitimate purposes, including:
- responding to enquiries submitted through this website and routing them to the relevant Lordship or Lordship Africa team;
- communicating about investment opportunities, project proposals, leasing matters, apartment purchases, media enquiries, and general correspondence;
- maintaining appropriate internal records of business communications;
- protecting our legal rights, preventing misuse, and maintaining the security and integrity of the website; and
- meeting applicable legal, regulatory, accounting, and compliance obligations.
4. Legal bases for processing
Depending on the circumstances of the particular communication or activity, personal data may be processed on one or more of the following legal bases under the GDPR:
- to take steps at your request before entering into a contract, or to handle a business approach initiated by you;
- for our legitimate interests in managing communications, evaluating opportunities, operating the website, and protecting our business and legal position, provided those interests are not overridden by your rights and freedoms;
- to comply with legal obligations that apply to us; and
- where required, on the basis of your consent.
5. Recipients and sharing of data
Personal data may be disclosed only where such disclosure is reasonably necessary, proportionate, and subject to appropriate confidentiality and security safeguards. This may include:
- relevant internal teams within LORDSHIP and, where your enquiry concerns African operations, with Lordship Africa personnel on a need-to-know basis;
- professional advisers, service providers, and technical suppliers who support website hosting, communications, maintenance, or security; and
- public authorities, regulators, courts, or other third parties where disclosure is required by law or necessary to establish, exercise, or defend legal claims.
The Controller does not sell personal data collected through this website.
The contact, careers and newsletter forms on this website are protected by Cloudflare Turnstile, a security service provided by Cloudflare, Inc., which helps prevent spam and automated abuse. When you open a page containing one of these forms, Cloudflare processes technical information about your browser and device, including your IP address, to check that the request comes from a person. We rely on our legitimate interest in keeping the website and its forms secure. More information is available in Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.
Optional analytics
With your consent, Google Analytics 4 measures page visits and basic website usage. It receives browser and device information, page addresses without query strings or fragments, and pseudonymous cookie identifiers. Analytics is optional and does not run before your consent or after you reject it.
Google Analytics uses the first-party cookies _ga and _ga_* to distinguish visitors and maintain session information. This website sets their lifetime to up to 180 days without extending it on each visit. Advertising features and Google signals are disabled.
Analytics information is processed by Google and may be processed outside the European Economic Area under Google’s applicable data-processing and transfer arrangements. We use Analytics on the basis of your consent. We do not send names, email addresses, phone numbers, application messages or CVs to Analytics.
Our configured GA4 retention for user-level and event-level data is 2 months. Aggregated reports may be retained longer by Google. Withdrawing consent stops future measurement; it does not automatically delete information already collected.
You can accept or reject Analytics separately from your language preference. Use Manage cookies to change your choice at any time. Rejecting Analytics removes its first-party cookies and stops further measurement on this website.
Google privacy policy · Google data-processing terms
6. Retention of personal data
Personal data is retained only for as long as necessary for the purpose for which it was collected, including any period required to respond to an enquiry, manage ongoing business discussions, comply with legal or regulatory obligations, or establish, exercise, or defend legal claims.
The precise retention period may therefore vary according to the nature of the communication, any subsequent relationship, and the applicable legal or compliance framework.
7. Your rights
Subject to the conditions and limitations set out in applicable law, you may have the right to:
- request access to your personal data;
- request rectification of inaccurate or incomplete personal data;
- request erasure of personal data where there is no valid reason for continued processing;
- request restriction of processing in certain circumstances;
- object to processing based on legitimate interests;
- request portability of personal data where processing is based on consent or contract and carried out by automated means; and
- withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact the Controller at info-czechia@lordship.com. If your enquiry concerns Lordship Africa operations, you may also write to info-africa@lordship.com, although requests relating to GDPR rights may still be assessed by the Controller where applicable.
You also have the right to lodge a complaint with the competent supervisory authority, including the authority in the EU or EEA country of your habitual residence, place of work, or the place of the alleged infringement.
8. Cookies and related technologies
This privacy notice should be read together with our Cookies page, which provides additional information on the use of cookies and similar technologies on this website.
9. Security and updates
The Controller applies proportionate organisational and technical measures designed to protect personal data against unauthorised access, disclosure, alteration, misuse, or loss. Nevertheless, no method of internet transmission or electronic storage can be guaranteed as completely secure, and website users should therefore avoid including unnecessary sensitive personal data in free-text communications.
This privacy notice may be updated from time to time to reflect changes in operational practice, legal requirements, or website functionality. The version published on this page is the current version applicable to this website.
Last updated: 13 October 2026.