Privacy

Privacy Notice

Last reviewed: 1 September 2026

This notice explains how personal information is used on Guernsey Office Market Watch. The site is operated by Point of Sale Limited trading as POS Interiors ("POS Interiors", "we", "us" or "our").

This notice covers Office Market Watch only. It does not replace privacy information for the main POS Interiors website, client projects, supplier relationships, employment matters or other POS Interiors services.

Who is responsible

The data controller is Point of Sale Limited ("POS Interiors"), registered in Guernsey under registration number 12154. Our registered office address is Unit 9 Anfre Estate, Route de la Garenne, St. Peter Port, Guernsey, GY1 2RL.

Privacy queries, correction requests, listing feedback and data-protection requests can be sent through the contact route on this site, by email to [email protected], by telephone on 01481 740222, or through the main POS Interiors contact details published at posinteriors.com. POS Interiors maintains any registration with the Office of the Data Protection Authority that is required for its activities.

What we collect from you

If you submit an enquiry, ask POS to review a shortlist or comparison, request a test-fit, email a shortlist or comparison to yourself, or suggest a listing update, we may collect your name, company, email address, optional phone number, enquiry type, office brief, approximate size requirement, team size, preferred location, preferred timing, buildings of interest, selected options, message, update or correction details and technical submission time.

If you request portal access, we collect your name, company, work email address, planning stage and submission time. POS Interiors reviews the request manually and may contact you to confirm your requirements or identity. If access is approved, we use your work email address to authorise, administer and, where necessary, withdraw access to the protected portal. Requesting access does not guarantee approval.

If you email a shortlist or comparison to yourself, the selected options and your email address are used to send that email. POS Interiors receives a lead notification containing the same email address and selected options and may make a reasonable follow-up about that selection and closely related office-search, workplace or fit-out support. This is explained beside the email action before you submit it.

If you are invited to use the commercial-agent partner area, we also process your work email address, account and organisation membership, login and security records, listing change proposals, supporting notes, review decisions and an audit history of submitted and approved changes. Partner users should provide business listing evidence only and must not include occupier or other personal information in a change proposal.

Technical information

We receive normal technical information needed to run and protect the website, such as page requests, IP address, device and browser information, server logs, security events, consent records and error information. Short-lived rate-limit records use keyed hashes rather than storing raw email or IP values in the quota table. If Google Analytics is enabled and accepted, analytics information is handled as described below.

The protected portal uses Cloudflare Access. When an approved user signs in, Cloudflare may process the work email address used for authentication, login time, IP address, approximate country, device and browser information, security identifiers, and whether an access attempt was allowed or denied. Cloudflare also sets essential authentication and security cookies for the duration of the relevant session, as explained in the Cookie Notice.

The portal stores public listing identifiers in local browser storage and may place shortlist or comparison identifiers in a shareable protected-portal link. These identifiers are selection state rather than personal contact details and are not sent to POS Interiors unless you submit an enquiry or use a clearly labelled email action.

Market listing data

The office availability schedule is compiled from public commercial-agent sources, landlord sources and POS operational review. Market listing data may include building names, addresses, areas, rent or price information, timing, positioning, source links, agent names, professional contact names, source images and publicly visible listing information.

Agent and professional contact details are used for source attribution, source links and correction routing. Listing information is kept separate from personal enquiry data where practical. Third-party source materials remain the property of the relevant rightsholder.

How we use personal information

To review portal access requests and communicate approval, rejection or any information needed to decide the request.
To authorise, authenticate, administer and withdraw approved access to the protected portal.
To respond to enquiries, shortlist review requests, test-fit requests and workplace advice requests.
To send shortlist and comparison emails requested by users.
To understand how occupiers compare options and decide whether POS support may be useful.
To receive and manage listing update, correction and removal requests.
To authenticate invited partner users, restrict them to their organisation's listings and keep an auditable approval record.
To show source attribution, source links and professional agent details where relevant.
To maintain business records, diagnose service issues, prevent spam and protect the site from misuse.
To understand site engagement through consent-controlled analytics, if analytics is enabled.
To provide participating commercial agents with privacy-safe, aggregate engagement summaries where agreed.
To meet legal, accounting and compliance responsibilities.

POS Interiors does not sell enquiry data. We do not use enquiry messages, selection emails, email addresses or form content for behavioural advertising. We do not pass contact details to listing agents merely because someone uses a shortlist or comparison email feature, and that action does not add the person to a general marketing list.

Agent engagement reports do not contain visitor names, email addresses, phone numbers, enquiry content, shortlist selections, account identifiers or user- or session-level records. Shortlist activity is not included in agent reporting.

Lawful basis

ActivityLawful basis

Portal access requests, manual approval decisions and approved-user administrationTaking steps requested by you; legitimate interests in providing controlled access, protecting market information and maintaining an auditable access process

Responding to enquiries, shortlist review requests, test-fit requests and workplace advice requestsTaking steps requested by you before entering into a business relationship or contract; legitimate interests in responding to business enquiries

Sending a shortlist or comparison email, notifying POS Interiors and making a selection-specific follow-upYour affirmative request when you use the clearly labelled email action; taking steps requested by you; legitimate interests in providing the service and responding to an expressed office-search interest

Receiving and managing listing update, correction and removal requestsLegitimate interests in maintaining accurate market information and respecting source-agent, landlord and rightsholder requests

Partner accounts, organisation access controls, change proposals, approval records and audit historyPerformance of the participating-agent arrangement; legitimate interests in secure access, listing accuracy, accountability and dispute prevention

Publishing or displaying publicly visible professional agent names, source links and source attributionLegitimate interests in source attribution, market visibility and correction routing

Website security, server logs, Cloudflare or CDN protection, spam prevention and misuse preventionLegitimate interests in securing and operating the site

Maintaining business, accounting, legal or compliance recordsLegal obligations where applicable; legitimate interests in maintaining appropriate business records

Google Analytics or other non-essential analyticsConsent

Marketing

We may reply to an enquiry or follow up reasonably on a request you have made. Emailing a shortlist or comparison permits POS Interiors to contact you specifically about those selected offices and closely related office-search, workplace or fit-out support. It does not add you to a general marketing list. Any broader or ongoing direct marketing will only be undertaken where there is a lawful basis and you have been given any required choice. You can ask us not to contact you again or to stop direct marketing at any time.

An access request permits access-related correspondence and a reasonable response about the office requirement stated in the request. It does not add the requester to a general promotional mailing list.

Analytics

The site has a Google Analytics integration ready for use when a measurement ID is configured. It should only run after a visitor accepts analytics cookies. Google Analytics may collect page views, session statistics, approximate location, browser and device information, and interaction events.

With analytics consent, interaction events may include a property-detail open or selection of a source-agent listing link, together with public listing fields such as building, agent, public listing identifier, stable source-listing identifier where available, link type and destination domain. These events may count repeat interactions. A source-link event records an initiated click; it does not confirm that the destination loaded, that a viewing occurred or that an enquiry resulted.

Where agreed, POS Interiors may give a participating commercial agent an aggregate summary limited to engagement with that agent's listings. The summary is indicative because it excludes visitors who do not consent and may be reduced by browser controls or blockers. Analytics is not configured to collect confidential enquiry text, shortlist selections, lease information, staff details, financial information, legal advice or privileged material for agent reporting. We aim to minimise identifiability and retain analytics only for as long as needed for site improvement and reporting.

A participating-agent source link may carry privacy-safe campaign parameters identifying Office Market Watch and the relevant public source listing. It contains no visitor, account, enquiry or shortlist data. The agent site may also receive the Office Market Watch origin under our referral policy and will process the resulting visit under its own privacy notice. These link parameters do not depend on Google Analytics consent.

AI and market commentary

Office Market Watch may use OpenAI or similar tools to help turn structured market evidence into public market commentary. The commentary process is intended to use public market listing data, structured evidence and POS review, not enquiry messages, shortlist emails, staff records, lease documents, financial records, privileged material or confidential client information.

If an AI provider processes personal data, POS Interiors will assess the provider terms, put a data processing agreement in place where required, and configure no-training or equivalent controls where available. Users should not submit confidential or privileged material through the public site.

Service providers

We may use trusted providers to host the site, store market data, send enquiry notifications, support maps, measure consented analytics, protect the service and support automation. These may include Vercel, Supabase, Cloudflare, Google Analytics, map or tile providers, email providers, webhook or automation providers, and AI providers configured by POS Interiors.

Providers may change over time. POS Interiors should assess supplier terms and use appropriate processing, confidentiality, security and transfer arrangements where required.

International transfers

Some hosting, database, analytics, map, email, AI or operational providers may process data outside Guernsey. When this applies, POS Interiors should assess the transfer route and use appropriate safeguards, supplier terms or other lawful arrangements before enabling or continuing the relevant service.

Retention

We keep personal information only for as long as needed. Our normal approach is:

portal access requests and approval decisions: up to 24 months;
approved-user access records: while access remains active and for a reasonable security or audit period afterwards;
website enquiries and emailed shortlists or comparisons: up to 24 months;
local shortlist state: until you clear site data or replace the selection on that device;
comparison state: for the current portal session, and for as long as a copied protected-portal link is retained;
listing correction and removal correspondence: up to 36 months;
partner account, change-approval and audit records: while the arrangement is active and for a reasonable audit or legal period afterwards;
website security logs: up to 12 months where under POS control, unless needed for misuse or security investigations;
cookie consent records: for the life of the consent plus a reasonable audit period;
analytics data: in line with the Google Analytics retention setting;
project, proposal, contract and accounting records: for longer where required for business, legal or accounting reasons.

POS Interiors reviews enquiry records and removes information that is no longer needed.

What not to send

Please do not submit confidential lease documents, financial records, staff records, legal advice, privileged material or commercially sensitive information through the public form. A short outline is enough for POS to start the conversation.

Security

POS Interiors uses reasonable technical and organisational measures to protect information handled through the site. No public website or email route can be guaranteed completely secure, so please avoid sending sensitive material through the public form.

Children

Office Market Watch is a business-to-business Guernsey office market site. It is not aimed at children.

Automated decisions

Office Market Watch does not make solely automated decisions that have legal or similarly significant effects on individuals. Portal access decisions are reviewed by POS Interiors rather than made solely by an automated system. AI-assisted market commentary is general context and is not a binding decision about any user, property, agent or landlord.

Your rights

Guernsey data protection law gives individuals rights over their personal data, including rights to information, access, correction, objection, restriction, deletion, portability, withdrawal of consent where consent is used, and rights relating to automated decisions. These rights are not absolute and may depend on the circumstances.

We may need to verify your identity before responding to a rights request. We will normally respond within one month unless a longer period is allowed by law. If you are unhappy with how personal data is handled, you can contact the Office of the Data Protection Authority in Guernsey.