Privacy Policy

Introduction

Property Stats ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property market intelligence platform.

By accessing or using Property Stats, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the platform.

Property Stats is the data controller responsible for your personal data. For any data protection queries, you can contact us at [email protected].

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Contract: Processing necessary to provide you with our services and fulfil our contractual obligations to you
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security
• Legal obligation: Processing necessary to comply with our legal obligations, such as tax and accounting requirements
• Consent: Where you have given consent for specific processing activities, such as marketing communications

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Password (stored in encrypted form)
• Profile information you choose to provide

Usage Data

We automatically collect information about your interaction with our platform, including:

• Pages and reports viewed
• Search queries and filters applied
• Features used and time spent on the platform
• Device and browser information
• IP address and general location data

Property Search Preferences

To provide personalised market insights, we may collect:

• Geographic areas of interest
• Property type preferences
• Saved searches and alert configurations

Billing Information

When you subscribe to our paid services, billing is handled by Stripe. We collect:

• Billing contact name and email address
• Subscription status and billing history
• Invoice records for your organisation

Your payment card details are collected and stored directly by Stripe. We do not have access to your full card number.

How We Use Your Information

We use the information we collect to:

• Provide and maintain our platform
• Generate personalised market analytics and reports
• Send you relevant notifications and market alerts
• Improve our services and develop new features
• Respond to your enquiries and support requests
• Ensure the security and integrity of our platform
• Comply with legal obligations and enforce our terms

Data Storage and Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security audits and monitoring
• Access controls limiting data access to authorised personnel

Your data is stored on secure servers located in Germany (European Union). While we strive to protect your information, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our platform:

• Hosting providers: For secure data storage and platform infrastructure
• Analytics services: To understand platform usage and improve our services
• Email services: To send transactional and notification emails
• Payment processor (Stripe): To handle subscription payments securely. Your payment card details are collected and processed directly by Stripe and are never stored on our servers. Stripe's privacy policy governs their use of your payment information.

These third parties are contractually obligated to protect your information and may only use it for the purposes we specify.

International Data Transfers

Your personal data is primarily stored and processed in Germany (European Union). However, some of our third-party service providers may process data outside the UK and EU:

• Stripe (payment processing): May transfer data to the United States. Stripe complies with data protection requirements through Standard Contractual Clauses and other approved transfer mechanisms.

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including adequacy decisions, Standard Contractual Clauses, or other approved transfer mechanisms.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

• Essential cookies: Required for platform functionality, authentication, and security
• Preference cookies: Remember your settings and preferences
• Analytics cookies: Help us understand how you use our platform

You can control cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal requirements
• Data portability: Request your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Object: Object to processing of your personal data where we rely on legitimate interests as the legal basis
• Restrict: Request restriction of processing in certain circumstances, such as when you contest the accuracy of your data

To exercise these rights, please contact us using the details provided below.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk).

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may retain certain information after account closure for:

• Legal compliance and record-keeping requirements
• Dispute resolution and fraud prevention
• Enforcement of our agreements and protection of our rights

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete such information.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our platform
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification for significant changes

Your continued use of the platform after any changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Via our contact form
• By email at [email protected]