Skip to main content

Privacy Policy

Fen Court — fen-court.com

Last updated: 21 April 2026

1. Introduction and Who We Are

1.1 Generali Real Estate S.p.A. (UK Establishment, registration number FC039129) (“we”, “us”, “our”), with UK establishment office at 35 Grosvenor Street, London, W1K 4QX or such other address as updated in the Privacy Policy from time to time operates the website at fen-court.com (the “Website”) relating to Fen Court, 120 Fenchurch Street, London EC3M 5BA. 

1.2 We are the data controller for personal data collected through the Website. This means we determine the purposes and means of processing your personal data. We operate the website on behalf of Saxon Land B.V, the landlord of Fen Court.

1.3 This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the Website or interact with us in connection with Fen Court. It also explains your rights under UK data protection law and how to exercise them.

1.4 Please read this policy carefully. If you have any questions, contact us at:

  • Email: privacy.gresgr@generali.com
  • Post: Generali Real Estate S.p.A., 35 Grosvenor Street, London, W1K 4QX
  • Data Protection Officer: dpo.gresgr@generali.com

1.5 This policy is compliant with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Data (Use and Access) Act 2025 (where provisions are in force) and any other data protection laws which apply in the United Kingdom from time to time (together, “Data Protection Law”).

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Data you give us directly

CategoryExamples
Identity dataName, title
Contact dataEmail address, telephone number, postal address
Communications dataEnquiries, feedback, correspondence sent to us
Event dataEvent registrations, visit bookings to The Garden at 120, preferences
Marketing preferencesWhether you have consented to receive marketing from us

2.2 Data collected automatically when you use the Website

CategoryExamples
Technical dataIP address, browser type and version, operating system, device type
Usage dataPages visited, time spent on pages, links clicked, referral source
Location dataGeneral geographic location derived from IP address
Cookie and tracking dataSee our Cookie Policy for full details

2.3 Data from third parties

We may receive personal data about you from:

  • Analytics providers (Google Analytics 4);
  • Marketing platforms (if Meta/Facebook pixel is implemented in future); and
  • Social media platforms where you engage with our content.

We do not collect any special category data (such as health information, biometric data, racial or ethnic origin, religious beliefs, etc.) through the Website, unless you expressly provide it in free-text communications or as required for a specific accessibility request.

3. How We Collect Personal Data

We collect personal data through:

  • Direct interactions: when you complete an enquiry form, register for an event, sign up to a newsletter, or contact us;
  • Automated technologies: cookies and similar tracking technologies as you navigate the Website (see our Cookie Policy);
  • Third parties: as described in section 2.3 above.

4. How We Use Your Personal Data and Our Lawful Basis

Under UK GDPR, we must have a lawful basis for processing your personal data. The table below sets out each purpose for which we process data, the categories of data used, and the lawful basis we rely on.

PurposeCategories of dataLawful basis (UK GDPR Art. 6)
To respond to your enquiries and provide information about Fen CourtIdentity (e.g. name), contact (e.g. email and phone number), communicationsLegitimate interests in running the business  
To process event registrations or visit bookings to The Garden at 120Identity (e.g. name), contact (email and phone number), event dataPerformance of a contract 
To send you marketing communications (newsletter, events, updates)Identity (e.g. name), contact (e.g. email and phone number), marketing preferencesConsent 
To manage the Website and improve user experienceTechnical, usage, cookie dataLegitimate interests in running the business 
To comply with legal and regulatory obligationsIdentity (e.g. name), contact (e.g. email and phone number), any relevant dataLegal obligation 
To administer visitor or building access where applicableIdentity (e.g. name), contact (e.g. email and phone number)Legitimate interests in running the business or consent, as applicable
To analyse Website performance using Google AnalyticsTechnical, usage, cookie dataConsent (for analytics cookies)
To protect the security of the Website and prevent fraudTechnical, usage dataLegitimate interests in running the business 
To keep you safe when you use our services as provided in free text communications.Health and accessibility data(a) Necessary to comply with a legal obligation (b) With your consent

Where we rely on consent (e.g. for marketing or non-essential cookies), you may withdraw that consent at any time without detriment. See section 10 for how to exercise this.

5. Marketing Communications

5.1 We will only send you direct marketing emails or other communications where you have given us your consent to do so.

5.2 You can opt out of receiving marketing communications at any time by:

5.3 We will not sell, rent, or share your personal data with third parties for their own direct marketing purposes without your explicit consent.

6. Who We Share Your Personal Data With

We may share your personal data with:

RecipientPurposeLocation
Simple Truth LtdWebsite development and administrationUK
CookieYesCookie Consent ManagementUK
MailChimpMarketing consent management and email communicationsUK
Google LLCWebsite analytics (Google Analytics 4)USA (adequacy decision in place)
Legal and professional advisersCompliance and dispute resolutionUK
Regulators and public authorities (e.g. ICO, police)Where required by lawUK

6.1 We require all third-party processors to respect the security of your personal data and to treat it in accordance with the law. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

6.2 We do not sell, rent, or otherwise trade your personal data to third parties.

7. International Transfers

7.1 Some of our third-party providers (for example, Google Analytics) are based outside the UK. Where we transfer your personal data outside the UK, we ensure that one of the following safeguards is in place:

  • the recipient country has been deemed to provide an adequate level of data protection which is not materially lower than the UK by the UK Government (USA for certain organisations under the UK Extension to the EU-US Data Privacy Framework); or
  • we use International Data Transfer Agreements (IDTAs) or UK Addendums to Standard Contractual Clauses.

7.2 Please contact us at privacy.gresgr@generali.com for further details of the specific transfer mechanisms used for each provider.

8. Data Retention

8.1 We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

8.2 Generally, your personal data is retained for no longer than 5 years, unless it is retained for a longer period as required under applicable laws or to establish, exercise or defend legal claims.

8.3 In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice.

9. Data Security

9.1 We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. These measures include:

  • secure encrypted connections (HTTPS/TLS) on the Website;
  • access controls limiting who within our organisation can access personal data;
  • regular security assessments of systems and processes;
  • vetting of third-party processors for their security standards.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours and, where required, notify you without undue delay.

10. Your Rights Under UK GDPR

10.1 Under UK data protection law, you have the following rights:

RightWhat it means
Right to be informedTo know how and why your data is processed (this Policy)
Right of accessTo receive a copy of the personal data we hold about you (a “Subject Access Request”)
Right to rectificationTo have inaccurate or incomplete data corrected
Right to erasureTo request deletion of your data where there is no compelling reason for us to continue processing it
Right to restrict processingTo ask us to suspend processing in certain circumstances
Right to data portabilityTo receive your data in a structured, machine-readable format and transfer it to another controller
Right to objectTo object to processing based on legitimate interests or for direct marketing purposes
Rights re automated decision-makingNot to be subject to purely automated decisions that significantly affect you, unless safeguards are in place

10.2 How to exercise your rights: Please contact us at privacy.gresgr@generali.com or write to us at 35 Grosvenor Street, London, W1K 4QX. We will respond to your request within one month (or up to three months for complex or numerous requests, with notification to you of any extension).

10.3 Complaints: If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

  • Website: www.ico.org.uk
  • Helpline: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the opportunity to address your concerns before you contact the ICO. 

If you have a complaint about the Website or our Services, please contact us by email at privacy.gresgr@generali.com or by post at Generali Real Estate S.p.A., 35 Grosvenor Street, London, W1K 4QX, marking your correspondence ‘Website Complaint’. We will acknowledge your complaint within 20 working days and aim to provide a substantive response within 20 working days. Where your complaint relates to our use of your personal data, please refer to our Privacy Policy for information on how to raise a data protection concern or contact the ICO.

11. Children

11.1 Our Website is not directed at children under the age of 18 and we do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information as soon as possible.

11.2 If you believe we have collected data from a child without appropriate consent, please contact us immediately at privacy.gresgr@generali.com.

12. Cookies

12.1 We use cookies and similar tracking technologies on the Website. For full details of the cookies we use, why we use them, and how you can control them, please see our Cookie Policy.

13. Links to Other Websites

13.1 The Website may include links to third-party websites (such as OpenTable for restaurant bookings). Clicking those links may allow third parties to collect or share data about you. We do not control those websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

14. Changes to This Policy

14.1 We may update this Privacy Policy from time to time to reflect changes in law, our data practices, or our business. The “Last updated” date at the top of this document will reflect any changes.

14.2 Where changes are material, we will take reasonable steps to bring them to your attention, which may include a notice on the Website’s homepage.

© 2026 Generali Real Estate S.p.A. All rights reserved.