Masutes Group Ltd (“Masutes Group”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what information we collect, why we collect it, how we use it and the choices you have. Last updated: July 2025.
• Legal entity: Masutes Group Ltd
• Registered office: 93 George Street, Edinburgh, Scotland, EH2 3ES
• Company number: SC562278
Questions? Email info@masutesgroup.com or write to the Data Protection Officer at the address above.
Identification data – name, job title, company
Contact data – email address, telephone number, postal address
Eligibility data – High-Net-Worth or Sophisticated Investor self-certification
Transactional data – booking dates, investment amounts, property details
Technical data – IP address, browser type, device information, pages visited
Marketing preferences – newsletter opt-in status, cookie consent
We do not intentionally collect special-category data unless you supply it for a specific service (for example, accessibility requirements for accommodation).
• Directly from you via web forms, phone calls and emails
• Automatically through cookies, Google Analytics, reCAPTCHA and server logs
• From third-party sources such as credit-reference agencies or Companies House during due-diligence checks
Responding to enquiries – legitimate interests
Processing bookings or investments – contract performance
Complying with AML/KYC and FCA rules – legal obligation
Sending marketing you have consented to – consent
Protecting our website from fraud/spam – legitimate interests
Analytics and service improvement – legitimate interests
You can withdraw consent at any time; this will not affect processing already carried out.
We use cookies to:
• enable essential site functions
• gather anonymous analytics (Google Analytics)
• protect forms against spam (Google reCAPTCHA)
• remember preferences
You can manage or block cookies in your browser settings. See our separate Cookie Notice for details.
We share data only when necessary:
• Payment processors (e.g. Stripe) to complete transactions
• Cloud-hosting and CRM providers to operate our services
• Professional advisers for legal and regulatory requirements
• Regulatory bodies such as the ICO, FCA or HMRC when compelled by law
If data is processed outside the UK/EU, we rely on adequacy regulations, Standard Contractual Clauses or another lawful transfer mechanism.
Enquiry data – 24 months
Booking records – 6 years (UK tax rules)
Investment records and KYC documents – at least 5 years after the client relationship ends (Money Laundering Regulations 2017)
Marketing preferences – until you opt out
After these periods, data is securely deleted or anonymised.
Under UK GDPR you can:
• request access to your personal data
• ask us to correct inaccurate data
• request deletion in certain circumstances
• object to or restrict processing
• request data portability
• withdraw consent at any time
• lodge a complaint with the Information Commissioner’s Office (ico.org.uk)
To exercise any right, email info@masutesgroup.com. We aim to respond within one month.
We use HTTPS encryption, role-based access controls, two-factor authentication and regular penetration testing. No transmission method is 100 percent secure, but we follow industry best practice to minimise risk.
We may update this policy periodically. Material changes will be highlighted on this page and, where appropriate, notified by email.
If you’d like to start a conversation with us or our founder Pav Masutes about your goals, we’d be happy to chat. Simply complete the form below to get started.