Privacy Policy

1. Who We Are

PropertyReportUK ("we", "us", "our") provides AI-powered property intelligence reports for residential properties in England and Wales. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We collect the following categories of personal data:

• Account information: email address and authentication details when you create an account.
• Payment information: processed securely by Stripe. We never store your full card number, CVV, or bank details on our servers.
• Property search data: addresses and postcodes you search for, used to generate reports.
• Usage data: pages visited, features used, and device/browser information collected via standard web analytics.
• Email address for previews: if you provide your email to receive a free preview.

3. How We Use Your Data

• To generate and deliver property reports you have purchased.
• To process payments via our payment provider (Stripe).
• To send transactional emails (order confirmations, report delivery).
• To improve our service quality and fix bugs.
• To comply with legal obligations.

4. Legal Basis for Processing

• Contract: processing your data to deliver services you have purchased.
• Legitimate interests: improving our service, preventing fraud, and ensuring security.
• Consent: where you have opted in to marketing communications or provided your email for a free preview.

5. Third-Party Services

We share data with the following third-party processors, all of which are GDPR-compliant:

• Stripe — payment processing.
• Supabase — authentication and database hosting (EU-hosted).
• Resend — transactional email delivery.
• Vercel — website hosting and content delivery.
• Anthropic — AI-powered report narrative generation (no personal data is sent; only property data).

6. Data Retention

We retain your account data for as long as your account is active. Property reports are stored for 12 months from purchase. Payment records are retained for 7 years as required by UK tax law. You may request deletion of your account and associated data at any time.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

To exercise any of these rights, contact us at privacy@propertyreportuk.com.

8. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics cookies, if used, are anonymised and do not identify individual users.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, secure authentication, and regular security audits. Access to personal data is restricted to authorised personnel only.

10. Contact & Complaints

For privacy-related queries, contact us at privacy@propertyreportuk.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).