| Legal entity | MH196 2026 Ltd |
| Registered in | England and Wales |
| Company number | 16447992 |
| Trading as | PropertyPredator (propertypredator.com) |
| Data protection contact | privacy@propertypredator.com |
| Role | Data controller |
These are the documents that govern our relationship with you. All are live and current.
| Document | What it covers |
|---|---|
| Privacy Policy | What we collect, why, who we share it with, how long we keep it, and your rights |
| Terms of Service | The contract between us, including what the product is and — importantly — what it is not |
| Cookie Policy | What we set, and what we do not |
| Data Processing Agreement | For business customers who need one in place with us |
| Refunds & Cancellation | How to cancel and when money comes back |
These are internal records rather than public policies — the working documents that show our processing has been thought through and written down, not improvised. They are kept current, carry review dates, and are available to the Information Commissioner's Office on request. We will share them with enterprise customers conducting due diligence, under NDA.
| Record | Purpose | Status |
|---|---|---|
| Record of Processing Activities UK GDPR Article 30 |
Every processing activity we carry out, with its lawful basis, data categories, recipients, retention period and security measures | v1.0 · 2 Aug 2026 13 activities documented |
| Legitimate Interests Assessment — public-register data Article 6(1)(f) |
The written justification for holding information about property owners and directors sourced from public registers, and for the outreach tools — including the balancing test against those individuals' rights | v1.0 · 2 Aug 2026 |
| Legitimate Interests Assessment — affiliate payee checks Article 6(1)(f) |
The justification for verifying the identity and payment details of affiliate partners before we pay them commission | v1.0 · 2 Aug 2026 |
| Data Protection Officer assessment Article 37 |
A documented assessment of whether we are required to appoint a DPO, and the reasoning behind the conclusion | v1.0 · 2 Aug 2026 |
| Personal Data Breach Response Procedure Articles 33 & 34 |
How we contain, assess, record and report a breach — including the 72-hour notification duty to the ICO and when we tell affected people directly | v1.0 · 2 Aug 2026 |
A summary of the processing activities recorded in our Article 30 register. The full record carries the detail; this is the shape of it.
| Activity | Lawful basis |
|---|---|
| Customer accounts and authentication | Contract |
| Subscription billing and payments | Contract; legal obligation for tax records |
| Running the analyses you ask for, and storing your saved work | Contract |
| Reading floorplans and documents you choose to upload | Contract |
| Information about property owners and directors, from public registers | Legitimate interests — assessed in writing |
| Tools that let customers write to property owners by post | Legitimate interests — the customer is the sender |
| Affiliate programme, including payout details | Contract; legal obligation for payment records |
| Service email, and marketing email where opted in | Contract; consent for marketing |
| Support messages and enquiries | Legitimate interests |
| Security, anti-abuse and fair-use enforcement | Legitimate interests |
| Finance applications passed to a named partner | Consent |
| Advertising and analytics | Consent — currently inactive, no tracking pixels are loaded |
We do not process special category data or criminal offence data. We do not sell personal data, and we do not share it with advertisers.
If you own a property, or are a director of a company that does, information about you may appear in what we show, because it appears in a public register. You have the same rights as our customers and you do not need an account to use them.
We use a small number of providers to run the service. They act on our instructions and are not permitted to use your data for their own purposes. The full list, with roles and locations, is in our Privacy Policy.
Our database is hosted in the United Kingdom. Some providers — including our payment processor and our AI processing provider — are based in the United States. Where personal data leaves the UK we rely on the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum.
No system is perfectly secure. If a breach affects your rights we will tell you and the ICO as the law requires, following the documented procedure in section 3.
Two things we would rather say plainly than have you discover.
Our analysis is decision-support, not advice. Every figure is an estimate built on third-party data and assumptions you can change. It is not a valuation, a survey, a legal opinion or a planning determination. The Terms set this out in full.
Public register data can be wrong or out of date. We refresh from source and we flag where coverage is partial, but we do not control the registers. Where we can only match information to a postcode rather than a specific property, we say so rather than implying we know more than we do.
Data protection matters: privacy@propertypredator.com. Anything else: support@propertypredator.com. We respond to rights requests within one month, and there is no charge for a reasonable request.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113 — though we would rather you raised it with us first so we can fix it.