MH196 2026 Ltd, a company registered in England and Wales (company number 16447992), is the data controller for the personal data described here. Contact us about anything on this page at privacy@propertypredator.com.
| Data | Where it comes from |
|---|---|
| Email address | You, at sign-up |
| Password (stored only as a secure one-way hash — we cannot read it) | You, at sign-up |
| Plan, subscription status and a Stripe customer reference | Created when you subscribe |
| Marketing and partner-contact preferences | Your choices at sign-up or in your account |
| Your email address, if you ask us to email you a calculator or valuation result, and whether you ticked the box to join the Deal of the Week email | You, on that page — no account needed |
| Your email address and first name, if you register for a webinar | You, on the webinar page |
| Your phone number, if you ask us to call you or to text or WhatsApp you, with a record of the exact wording you agreed to | You, at sign-up, in your contact preferences, or on a result form |
| Usage of paid features (which analyses you ran, and when) | Generated as you use the product, to meter allowances |
| Which steps of the site you reached (for example: opened pricing, got a max offer, saved a deal), the page, and where you came from (such as "instagram" or "direct"). Linked to your account only when you are signed in. Nothing is stored on your device for this and no visitor ID is kept | Generated as you use the site |
| Saved searches, saved deals, pipeline notes and shortlists | You, as you use the product |
| Floorplans and documents you upload | You |
| Support and feedback messages, including any screenshot you attach | You |
| Basic technical information such as approximate network and browser type | Automatically, to detect shared logins and abuse |
| If you join the affiliate programme: your payout details — either your PayPal email, or the account holder's name, sort code and account number (UK), or the account holder's name, IBAN and BIC (outside the UK) — with the payee declaration you give alongside them (your legal name, or your company's registered name and number, your country, whether you are paid as an individual or a company, and your confirmation that the account is your own); and your membership record (the version of the Affiliate Programme Terms you accepted and when, and, if your membership ends, when and why) | You, in your affiliate dashboard — payout details only if you choose to give them. We record your membership when you join or we enrol you, and when and why it ends |
We hold these only if you are a member of the affiliate programme. We use them to run the programme under the Affiliate Programme Terms: to record that you accepted them, to check who we are paying and to send you the commission you have earned. We do not share them with anyone except where a bank or payment provider needs them to make that payment, and we keep them only while you are in the programme — ask us to remove them at any time and we will, though we will need a way to settle anything still owed to you first.
Most of what the product displays — ownership records, sold prices, planning history, certificates — comes from public registers such as HM Land Registry, Companies House, EPC registers and local authority planning portals. Some of that is personal data about other people. We present it as published, for the legitimate purpose of property research and due diligence. If information about you appears in one of those registers, the register holder is the place to correct it at source; contact us as well and we will help where we can.
| Purpose | Lawful basis |
|---|---|
| Creating and running your account; providing the features you ask for | Performance of a contract |
| Taking payment and preventing payment fraud | Contract, and legal obligation |
| Metering paid usage against your plan | Contract |
| Service emails — password resets, receipts, alerts you switched on | Contract |
| Emailing you, once, a calculator or valuation result you asked for | Legitimate interests (sending what you asked for) |
| Sending the webinar you registered for: the join link, reminders and the replay | Legitimate interests (sending what you asked for) |
| Keeping the service secure, and identifying shared or abusive accounts | Legitimate interests (protecting the service and paying customers) |
| Counting how many visitors reach each step of the site, so we can see where people get stuck and fix it | Legitimate interests (improving the service). Ad pixels are separate and only run if you accept them |
| Improving the product and fixing faults | Legitimate interests |
| Marketing emails about PropertyPredator | Consent, or the soft opt-in for existing customers — withdraw at any time |
| Calls from our AI assistant or our team, and texts or WhatsApp messages, about your result, webinars and offers | Consent, given separately for calls and for texts — withdraw at any time in your contact preferences, by replying STOP, or by telling us on a call |
| Sharing relevant partner offers | Consent, given separately at sign-up |
You can withdraw consent at any time without affecting anything done before you withdrew it. Every marketing email carries an unsubscribe link.
We use a small number of processors to run the service. They act on our instructions and are not permitted to use your data for their own purposes.
| Processor | What they do | Where |
|---|---|---|
| Stripe | Takes payments and holds card details. Stripe is a controller in its own right for payment data. | US / EU |
| Anthropic | AI analysis — reads floorplans and documents you upload, and writes the narrative parts of reports | US |
| Postmark | Sends service and marketing email | US |
| Brevo | Holds the Deal of the Week email list and sends it, if you join | EU |
| Our calling and messaging providers | Place calls from our AI assistant and send texts or WhatsApp messages, only if you asked for them. We'll name each provider here before the first call or message is sent | To be confirmed |
| Render | Application hosting | US |
| Neon | Database hosting | UK (London) |
| Notion | Where enquiries and leads are recorded, if you submit one | US |
We use Google Analytics and Microsoft Clarity to see which pages help people and where they get stuck. Neither is contacted unless you press Accept on the analytics banner, and a Global Privacy Control signal from your browser counts as a no. Each acts under its own privacy terms.
| Service | What it receives | Where |
|---|---|---|
| Google (Google Analytics) | A cookie ID, the page you're on with everything after the "?" removed except campaign tags, and which steps you took (for example: got a max offer, started checkout). Never your address, postcode, property price, name or email. Google's advertising storage, ad personalisation and Google signals are switched off. Google's privacy policy | US |
| Microsoft (Clarity) | Clicks, scrolling and mouse movement, with every piece of page text and everything you type hidden, so it can't see addresses, owner names or figures. Not loaded on shared-report or deal-pack links, or on any web address carrying a postcode, checkout reference or other detail beyond campaign tags. Microsoft's privacy statement | US |
The cookies page lists the cookies each one sets and lets you change your choice at any time.
We also disclose data where the law requires it, and we may transfer it as part of a sale or reorganisation of the business — in which case this policy continues to apply until you are told otherwise.
We do not sell your personal data, and we do not share it with advertisers.
When you upload a floorplan or document for analysis, the file is sent to Anthropic to be read. Do not upload material containing personal data unless you need to and are entitled to. If you would rather not have a document processed this way, do not upload it — the address-based analysis works without any upload.
Several processors above are in the United States. Where personal data leaves the UK we rely on the UK's International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum, together with the provider's own safeguards.
Ask us to delete your account and we remove it and its associated records, other than anything we must keep by law.
Under UK GDPR you can ask us to:
Email privacy@propertypredator.com and we will respond within one month. There is no charge for a reasonable request.
These rights are not just for people with an account. If you own a property, or are a director of a company that does, information about you may appear in what we show — because it appears in a public register. You have the same rights, and you do not need an account to use them. Email privacy@propertypredator.com and tell us the property or the name concerned.
Two things worth knowing. First, you can object to us showing your information, and to receiving letters sent through our tools; we will act on that. Second, because the information comes from a public register, correcting it at the source fixes it everywhere rather than just with us — so for ownership records we will also point you to HM Land Registry, and for directorships to Companies House.
If you are at risk from someone locating your address — for example if you have experienced domestic abuse or are being harassed — tell us and we will suppress your information promptly. You do not have to explain your circumstances to us in detail, and we will not ask you to prove anything. Email privacy@propertypredator.com.
We will also help you take it further, because a suppression with us does not remove the entry from the underlying public register. HM Land Registry can restrict access to your address on the register itself, which is the permanent fix, and we will point you to that process.
Passwords are stored only as one-way hashes. Traffic is encrypted in transit. Sessions use short-lived access tokens with rotating refresh tokens, and completing a password reset signs every other device out. Administrative access is restricted and separately authenticated.
No system is perfectly secure. If a breach affects your rights we will tell you and the ICO as the law requires.
The service is for business and investment use and is not intended for anyone under 18. We do not knowingly collect data about children.
Please raise anything with us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
We will update this policy as the product and the law change, and the date at the top will always show the current version. We will tell you about significant changes by email or in the app.
AI review cost records contain account-linked tool/channel, model, tokens, supplier request identifiers, costs and reservations. They exclude document text and API-key secrets and are covered by account deletion.