Privacy Policy

Last updated: April 2026

This Privacy Policy explains how UK Property Screener ("we", "the Service") collects, uses and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who We Are

The data controller for this Service is the operator of this website. For any privacy-related queries, please contact: [email protected].

This is a private, invite-only tool and is not operated as a commercial service.

2. What Personal Data We Collect

Account data: your email address, display name, and a hashed (encrypted) version of your password, collected when you register.
Usage data: property listing URLs you add to the Service and the scraped property data associated with those listings (addresses, prices, and other publicly available property information).
Technical data: your IP address, used temporarily in memory for security rate-limiting purposes. IP addresses are not written to disk or retained after your session ends.
Session data: a session identifier stored in a browser cookie to keep you logged in.

We do not collect payment information, location data, or any special category data.

3. How and Why We Use Your Data

Purpose	Data used	Legal basis
Provide the property research service	Email, display name, usage data	Contract performance (Art. 6(1)(b))
Authenticate your account	Email, password hash, session cookie	Contract performance (Art. 6(1)(b))
Prevent abuse and protect security	IP address (in-memory only)	Legitimate interests (Art. 6(1)(f))

We do not use your data for marketing, profiling, or any automated decision-making.

4. Cookies

This Service uses a single, strictly necessary session cookie (session) to keep you logged in. This cookie is:

Required for the Service to function — no consent is needed under PECR
Marked HttpOnly (not accessible via JavaScript)
Marked Secure (only transmitted over HTTPS)
Set to SameSite=Lax (not sent on cross-site requests)
Deleted when you sign out or close your browser

We do not use analytics, advertising, or any third-party cookies.

5. Data Sharing and Third Parties

We do not sell, rent, or share your personal data with any third parties.

Property data displayed in the Service is fetched from publicly available listings on Rightmove, Zoopla, and OnTheMarket. We are not affiliated with these platforms. The scraped data is stored on a private server solely for your personal use.

Your data is stored on a server hosted by Oracle Cloud Infrastructure (OCI), located in the UK. Oracle processes data on our behalf under their standard data processing terms.

6. Data Retention

Your account data (email, display name, password hash) and all associated property data are retained until you delete your account. You can delete your account at any time from the Account Settings page, which will permanently erase all your data from our servers.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of access — you can request a copy of the data we hold about you
Right to rectification — you can update your display name via Account Settings; to correct your email address or other data, contact me
Right to erasure — you can delete your account and all data at any time via Account Settings
Right to data portability — you can export all your data as an XLSX file from Account Settings
Right to restriction — you can request we restrict processing of your data
Right to object — you can object to processing based on legitimate interests

To exercise any of these rights, or to raise a concern, contact me at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113.

If you are located in the European Economic Area (EEA), you may also contact your local data protection authority.

8. Security

We take reasonable technical and organisational measures to protect your data, including password hashing (bcrypt), encrypted connections (HTTPS/TLS), and access controls. However, no method of transmission over the internet is completely secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For any questions about this Privacy Policy or how we handle your data, contact: [email protected]