Privacy Policy

Policy

[Last Updated: 13 July 2026]

At Xylo, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit the Xylo website, enquire about the building or interact with us. Please read this policy carefully to understand how we process your information.

Who We Are

Xylo (“we,” “our,” “us”) operates [xylo.london]. We are committed to safeguarding the privacy of our website visitors and service users. If you have any questions or concerns about this Privacy Policy, you can contact us:

  • Email: info@xylo.london
  • Address: 155 Clerkenwell Road, EC1

What Data We Collect

Depending on how you interact with our website, we may collect the following information:

  • Name
  • Company name
  • Job title
  • Email address
  • Telephone number
  • Any information you provide when completing a contact form, registering for an event, requesting marketing material or corresponding with us.

Enquiry Information: If you enquire about leasing opportunities or other services, we may collect information relevant to your enquiry and any subsequent correspondence.

Technical Information: When you visit our website, we may automatically collect information including:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Pages visited
  • Time spent on pages
  • Referring website
  • Date and time of your visit.

How We Use Your Data

We use your personal information to:

  • Respond to your enquiries.
  • Provide information about Xylo, leasing opportunities and related services.
  • Arrange meetings, presentations or events.
  • Send requested brochures, guides or other marketing materials.
  • Improve our website, content and user experience.
  • Monitor website performance and security.
  • Comply with our legal and regulatory obligations.

Where you have opted in, we may also send you updates about Xylo, events or relevant news. You can unsubscribe from marketing communications at any time.


Legal Basis for Processing

Under UK data protection law, we process your personal information using one or more of the following legal bases:

Legitimate Interests: To respond to enquiries, manage relationships, improve our website and market Xylo appropriately.
Consent: Where you have chosen to receive marketing communications or where consent is otherwise required.
Contract: Where processing is necessary to take steps at your request before entering into an agreement or contract.
Legal Obligation: Where we are required to comply with applicable laws or regulatory requirements.


Who We Share Your Data With

We do not sell your personal information. We may share your information where appropriate with:

  • Our appointed leasing agents.
  • Professional advisers including legal, financial or property consultants.
  • Website hosting and technology providers.
  • IT support and analytics providers.
  • Event management providers.
  • Regulatory authorities or law enforcement where required by law.

All third parties are required to process your information securely and only for authorised purposes.


How Long We Keep Your Data

 

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected. As a general guide:

  • General enquiries are normally retained for up to 24 months.
  • Marketing records are retained until you unsubscribe or request deletion.
  • Information may be retained for longer where required to meet legal, regulatory or contractual obligations.

When information is no longer required, it is securely deleted or anonymised.


Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

  • Request access to your personal information.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information where appropriate.
  • Request restriction of processing.
  • Object to processing based on our legitimate interests.
  • Request a copy of your personal data in a structured, commonly used format (data portability).
  • Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact: info@xylo.london


Complaints

If you are unhappy with how we have handled your personal information, please contact us so that we can try to resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner’s Office, the UK’s independent authority for data protection.


Cookies

We use cookies to operate and improve our website. These may include:

  • Essential cookies – required for the operation of the website.
  • Analytics cookies – used to understand how visitors use the website and improve performance.
  • Marketing cookies – where applicable, used to measure the effectiveness of our marketing activities.

Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can update your cookie preferences at any time via our Cookie Settings or your browser settings.

 


Security

We take appropriate technical and organisational measures to protect your personal information against accidental loss, unauthorised access, disclosure, alteration or destruction.

These measures include secure hosting environments, encryption where appropriate, restricted access to personal information and regular monitoring of our systems.

While we take reasonable steps to safeguard your information, no internet transmission or electronic storage method can be guaranteed to be completely secure.


Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to read their privacy policies before providing any personal information.


Children’s Privacy

The Xylo website is intended for business users and is not directed at children under the age of 18. We do not knowingly collect personal information from children.


Automated Decision-making

We do not use your personal information to make decisions based solely on automated processing or profiling that produce legal or similarly significant effects.


Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last Updated” date.

Credit