Privacy Policy

Check-a-Property Ltd is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at privacy@checkaproperty.co.uk.

We collect personal information that you provide directly, including your name, email address, phone number, property addresses, and any messages or enquiries you submit. We also collect usage data such as IP address, browser type, device information, and pages visited through cookies and analytics tools.

Your data is used to arrange and deliver property services, process bookings and payments, communicate job status and report delivery, send service-related notifications, and respond to your enquiries. We may also use aggregated, anonymised data to improve our platform.

Under UK GDPR, we must have a lawful basis for each type of data processing. The table below sets out each processing activity and its corresponding legal basis:

• Service delivery— Contract performance (Article 6(1)(b))
• Payment processing— Contract performance (Article 6(1)(b))
• Account management— Contract performance (Article 6(1)(b))
• Service notifications— Legitimate interests (Article 6(1)(f))
• Marketing emails— Consent (Article 6(1)(a)) — you can withdraw at any time
• Fraud prevention— Legitimate interests (Article 6(1)(f))
• Legal compliance— Legal obligation (Article 6(1)(c))
• Analytics— Consent (Article 6(1)(a)) via cookie preferences

Your data is stored on secure servers managed by Supabase (hosted on AWS infrastructure). We implement industry-standard security measures including encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only.

We use the following third-party services that may process your data:

• Stripe— Payment processing. Subject to Stripe's privacy policy.
• Resend— Email delivery for transactional emails (booking confirmations, reports).
• Supabase— Authentication and database services.

We use cookies and localStorage for authentication, cart functionality, and optional analytics. For full details, see our Cookie Policy. You can manage your cookie preferences at any time via the Cookie Settings link in our footer.

Your data is primarily processed within the UK and EEA. Where data is transferred to countries outside the UK (e.g., through our payment processor Stripe), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions by the UK government.

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Reports, certificates and invoices may be retained for legal, accounting or dispute purposes. Account data is retained until you request deletion.

We do not use your personal data for automated decision-making or profiling that produces legal effects.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access(Article 15) — request a copy of the personal data we hold about you
• Right to rectification(Article 16) — request correction of inaccurate or incomplete data
• Right to erasure(Article 17) — request deletion of your personal data
• Right to restrict processing(Article 18) — request that we limit how we use your data
• Right to data portability(Article 20) — receive your data in a structured, machine-readable format
• Right to object(Article 21) — object to processing based on legitimate interests
• Right to withdraw consent— where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint— you may complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at privacy@checkaproperty.co.uk. We will respond to your request within one month.

Our services are not directed at individuals under 18. We do not knowingly collect data from children.

We are committed to compliance with UK GDPR and the Data Protection Act 2018. We process personal data only where we have a lawful basis and apply appropriate technical and organisational safeguards. We will notify affected users and the Information Commissioner's Office (ICO) where legally required. You may also contact the ICO directly at ico.org.uk.