MH196 2026 Ltd, a company registered in England and Wales (company number 16447992), is the data controller for the personal data described here. Contact us about anything on this page at privacy@propertypredator.com.
| Data | Where it comes from |
|---|---|
| Email address | You, at sign-up |
| Password (stored only as a secure one-way hash — we cannot read it) | You, at sign-up |
| Plan, subscription status and a Stripe customer reference | Created when you subscribe |
| Marketing and partner-contact preferences | Your choices at sign-up or in your account |
| Usage of paid features (which analyses you ran, and when) | Generated as you use the product, to meter allowances |
| Saved searches, saved deals, pipeline notes and shortlists | You, as you use the product |
| Floorplans and documents you upload | You |
| Support and feedback messages, including any screenshot you attach | You |
| Basic technical information such as approximate network and browser type | Automatically, to detect shared logins and abuse |
| If you join the affiliate programme: your payout details — either your PayPal email, or the account holder's name, sort code and account number (UK), or the account holder's name, IBAN and BIC (outside the UK) | You, in your affiliate dashboard — only if you choose to give them |
You only give us these if you join the affiliate programme and want to be paid. We use them for one thing: sending you the commission you have earned. We do not share them with anyone except where a bank or payment provider needs them to make that payment, and we keep them only while you are in the programme — ask us to remove them at any time and we will, though we will need a way to settle anything still owed to you first.
Most of what the product displays — ownership records, sold prices, planning history, certificates — comes from public registers such as HM Land Registry, Companies House, EPC registers and local authority planning portals. Some of that is personal data about other people. We present it as published, for the legitimate purpose of property research and due diligence. If information about you appears in one of those registers, the register holder is the place to correct it at source; contact us as well and we will help where we can.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account; providing the features you ask for | Performance of a contract |
| Taking payment and preventing payment fraud | Contract, and legal obligation |
| Metering paid usage against your plan | Contract |
| Service emails — password resets, receipts, alerts you switched on | Contract |
| Keeping the service secure, and identifying shared or abusive accounts | Legitimate interests (protecting the service and paying customers) |
| Improving the product and fixing faults | Legitimate interests |
| Marketing emails about PropertyPredator | Consent, or the soft opt-in for existing customers — withdraw at any time |
| Sharing relevant partner offers | Consent, given separately at sign-up |
You can withdraw consent at any time without affecting anything done before you withdrew it. Every marketing email carries an unsubscribe link.
We use a small number of processors to run the service. They act on our instructions and are not permitted to use your data for their own purposes.
| Processor | What they do | Where |
|---|---|---|
| Stripe | Takes payments and holds card details. Stripe is a controller in its own right for payment data. | US / EU |
| Anthropic | AI analysis — reads floorplans and documents you upload, and writes the narrative parts of reports | US |
| Postmark | Sends service and marketing email | US |
| Render | Application hosting | US |
| Neon | Database hosting | UK (London) |
| Notion | Where enquiries and leads are recorded, if you submit one | US |
We also disclose data where the law requires it, and we may transfer it as part of a sale or reorganisation of the business — in which case this policy continues to apply until you are told otherwise.
We do not sell your personal data, and we do not share it with advertisers.
When you upload a floorplan or document for analysis, the file is sent to Anthropic to be read. Do not upload material containing personal data unless you need to and are entitled to. If you would rather not have a document processed this way, do not upload it — the address-based analysis works without any upload.
Several processors above are in the United States. Where personal data leaves the UK we rely on the UK's International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, together with the provider's own safeguards.
Ask us to delete your account and we remove it and its associated records, other than anything we must keep by law.
Under UK GDPR you can ask us to:
Email privacy@propertypredator.com and we will respond within one month. There is no charge for a reasonable request.
These rights are not just for people with an account. If you own a property, or are a director of a company that does, information about you may appear in what we show — because it appears in a public register. You have the same rights, and you do not need an account to use them. Email privacy@propertypredator.com and tell us the property or the name concerned.
Two things worth knowing. First, you can object to us showing your information, and to receiving letters sent through our tools; we will act on that. Second, because the information comes from a public register, correcting it at the source fixes it everywhere rather than just with us — so for ownership records we will also point you to HM Land Registry, and for directorships to Companies House.
If you are at risk from someone locating your address — for example if you have experienced domestic abuse or are being harassed — tell us and we will suppress your information promptly. You do not have to explain your circumstances to us in detail, and we will not ask you to prove anything. Email privacy@propertypredator.com.
We will also help you take it further, because a suppression with us does not remove the entry from the underlying public register. HM Land Registry can restrict access to your address on the register itself, which is the permanent fix, and we will point you to that process.
Passwords are stored only as one-way hashes. Traffic is encrypted in transit. Sessions use short-lived access tokens with rotating refresh tokens, and completing a password reset signs every other device out. Administrative access is restricted and separately authenticated.
No system is perfectly secure. If a breach affects your rights we will tell you and the ICO as the law requires.
The service is for business and investment use and is not intended for anyone under 18. We do not knowingly collect data about children.
Please raise anything with us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
We will update this policy as the product and the law change, and the date at the top will always show the current version. We will tell you about significant changes by email or in the app.