Privacy Policy

PropertyScan is operated by PropertyScan UK Ltd ("we", "us", "our"), a company registered in England and Wales. We are the data controller for the personal data collected through this platform.

We are registered with the Information Commissioner's Office (ICO) as required under UK data protection law.

We collect and process the following categories of personal data:

• Identity data: full name, date of birth, company name;
• Contact data: email address, phone number;
• Verification data: government-issued photo ID, proof of address, proof of funds, professional qualifications (AML certificate, PRS membership, PI insurance, ICO registration);
• Financial data: sourcing fee amounts, transaction records, Stripe account identifiers;
• Usage data: login activity, page views, deal interactions;
• Communications: messages sent through the platform.

We process your personal data for the following purposes:

• To verify your identity and comply with Anti-Money Laundering (AML) obligations under the Money Laundering Regulations 2017;
• To operate and maintain your account on the platform;
• To facilitate transactions between sourcers and investors;
• To process payments and payouts via Stripe;
• To send transactional emails (account verification, payment confirmations, deal notifications) via Resend;
• To comply with our legal obligations;
• To improve the platform and detect fraudulent activity.

We process your data on the following legal bases under UK GDPR:

• Contract: processing necessary to provide our services to you;
• Legal obligation: AML compliance, fraud prevention, and tax reporting;
• Legitimate interests: platform security, fraud detection, and improving our services.

We share your data with the following third parties only where necessary:

• Supabase — cloud database and authentication (data stored in the EU);
• Stripe — payment processing and sourcer payouts;
• Resend — transactional email delivery;
• Vercel — platform hosting.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

We retain your personal data for as long as your account is active and for a period of 5 years thereafter to comply with AML record-keeping requirements under the Money Laundering Regulations 2017.

Verification documents are retained for a minimum of 5 years from the end of the business relationship.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate personal data;
• Request erasure of your data (subject to our legal retention obligations);
• Object to or restrict processing of your data;
• Data portability — receive your data in a machine-readable format;
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us via our contact page. We will respond within 30 days.

PropertyScan uses strictly necessary cookies to manage your authentication session. We do not use tracking, advertising, or analytics cookies.

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and row-level security on our database. Access to personal data is restricted to authorised personnel only.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

For any privacy-related queries, please contact us via our contact page.