This statement sets out how Hermes Real Estate Investment Management Limited protects the privacy and security of your personal data (“personal information”).

This notice gives individuals information on how their personal information (i.e. information which directly or indirectly identifies you) is processed.

Who is Hermes Real Estate Investment Management Limited?

Hermes Real Estate Investment Management Limited (“HREIML”) is one of the largest real estate managers in the UK, with £7.9 billion1 of assets under management (GAV) in both UK and international portfolios.

Hestia is a residential operations platform owned by HREIML. HREIML will conduct its business in accordance with the highest ethical standards, respecting the firm’s customers, suppliers, and other business counterparties, dealing responsibly with the firm’s assets, and complying with applicable legal and regulatory requirements.

HREIML is unregulated and does not engage in regulated activity. Hermes Investment Management Limited carries out regulated activity on behalf of HREIML.  


Collecting your personal information

HREIML does not intend to use this website for the purpose of collecting or processing personal data.  In the event that HREIML receives your personal information directly or indirectly, HREIML is acting as data controller.

How we will use your personal information

HREIML will use your personal information for:

  • Managing business relationships with you
  • Archiving documents (electronic and paper based)
  • Detecting and preventing fraud and/or money laundering
  • Statistical analysis and assessment
  • Communicating with you, and
  • Otherwise as is necessary to comply with applicable laws, regulations and/or codes of practice.

The provision of personal information by you may be necessary in order for us and other third parties (to which personal information is disclosed) to provide you with the requested services, for the performance of any contractual relationship with you and for the other purposes as set out in this notice where in our legitimate interests.


How we disclose your personal information

We may disclose certain personal information:

  • To Federated Hermes which consists of Hermes Fund Managers Limited and its subsidiaries including its joint venture Hermes GPE LLP (and its subsidiaries)
  • To courts, governmental and non-governmental regulators, tax authorities and ombudsmen
  • To law enforcement agencies or as otherwise required under law or regulation;
  • To any third party that acquires, or is interested in acquiring, all or part of our assets or shares, or that succeeds us in carrying on all or a part of its business, whether by merger, acquisition, reorganisation or otherwise
  • To fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, and
  • To our agents, advisers or outsource providers in order to provide agreed products or services.

International transfer of information

We may transfer your personal information to recipients (including affiliates of Federated Hermes) located in countries outside of the United Kingdom and the European Economic Area (“EEA”) including in USA, Singapore, Channel Islands, Cayman Islands, Mauritius, India, Philippines, Canada and Australia.  In those instances, we will take all necessary steps to protect your personal information in accordance with applicable data privacy laws.

Your rights:

Under applicable data privacy laws, you may have a right to:

  • Request access to and rectification or erasure of your personal information
  • Obtain restriction of processing or to object to processing of your personal information, and
  • Data portability (i.e. to request the transfer of personal information from one data controller to another in certain circumstances).

If you wish to exercise any of these rights, you should contact the Information Protection Coordinator as described below.  You also have the right to lodge a complaint about the processing of your personal information with your local data protection authority.



When visiting our websites, we collect information about you using cookies in order to process your visit, remember your preferences, increase security and analytics on how a visitor uses the website.   Further details can be viewed at


Security and data retention

HREIML strives to maintain the reliability, accuracy and completeness of all personal information it holds to protect privacy and security at all times. The security measures in place on our websites and computer systems aim to prevent the loss or misuse of the information we hold including 3rd parties.

We update and test our security and technology on an ongoing basis.  Access to personal information is restricted to those employees responsible for providing benefits or services to you.  Employees at HREIML are regularly trained on the importance of confidentiality and keeping your information is kept private and secure.

Subject at all times to applicable laws, we will retain your personal information for a period up to 7 years from the end of the relationship.


Changes to this privacy notice

We may revise and/or supplement our privacy notice from time to time to reflect (including but not limited to), any changes in our business, law, regulation, markets and/or the introduction of any new technology.

Enquiries requests or concerns

All enquiries, requests or concerns regarding this notice or relating to the processing of your personal information, should be sent to the Information Protection Coordinator at Federated Hermes at 150 Cheapside, London EC2V 6ET or via e-mail to [email protected].