Privacy Policy

Last updated: 1 June 2026. This policy sets out how PropervestAI ("we", "us", "our") collects, processes, and protects your personal data when you visit our website or engage our services, in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Controller Information

PropervestAI is the data controller for personal data collected through this website. Our principal business address is 89 Victoria Street, London, SW1H 0HW, United Kingdom. Data protection enquiries may be directed to [email protected] or by telephone on +44 7816 293 475.

2. Personal Data We Collect

We collect the following categories of personal data from you directly or automatically:

• Identity and professional data: your name, job title, and organisation name when provided via our contact form or email
• Contact data: your email address and, where provided, telephone number and postal address
• Technical and device data: IP address, browser type and version, operating system, device type, and session duration collected automatically when you visit our website
• Usage data: pages viewed, links clicked, scroll depth, and navigation paths through our site, collected with your consent via analytics tools
• Enquiry content: the specific information you provide in your message when completing our contact form or writing to us directly

3. Legal Bases for Processing

We process your personal data under the following legal bases: Legitimate interests — for operating and maintaining this website, for responding to business enquiries submitted through our contact form, and for improving our service offering based on how visitors use the site; Contract performance — where processing is necessary to fulfil or prepare to fulfil a consulting engagement; Consent — for analytics cookies and direct marketing communications, where you have explicitly opted in; Legal obligation — where we are required to process data to comply with UK law, including tax and accounting obligations.

4. How We Use Your Personal Data

We use your personal data to handle and respond to the enquiries you submit via our contact form; to deliver the consulting and automation services you have contracted us to perform; to analyse and improve our website content and user experience where you have consented to analytics; to send you service updates, thought leadership, or marketing content where you have consented to receive these; and to comply with our legal obligations as a UK-based business. We do not make automated decisions about individuals using your personal data in ways that produce legal or similarly significant effects.

5. Data Sharing

We do not sell your personal data. We may share it only with: cloud infrastructure and IT service providers who host and maintain our website and systems under binding data processing agreements; professional advisors — solicitors, accountants, and insurers — where legally or contractually necessary; analytics providers where you have consented to analytics cookies; and law enforcement, regulatory authorities, or courts where required by applicable UK law. All third-party processors are contractually bound to use your data only for the purposes specified and to maintain appropriate security standards.

6. Data Transfers Outside the UK

Personal data is stored and processed within the United Kingdom wherever possible. Where we engage third-party service providers who may transfer data outside the UK, we require them to comply with applicable UK data transfer requirements, including reliance on UK adequacy decisions or UK standard contractual clauses. We will notify you of any material changes to our international transfer arrangements that affect your personal data.

7. Retention

Contact form submissions and correspondence are retained for up to 36 months from the date of last communication. Consulting engagement records, including any personal data processed as part of a project, are retained for six years in accordance with HMRC requirements for business records. Website analytics data is held in anonymised form for up to 26 months. When retention periods expire, data is securely deleted or anonymised.

8. Your Rights

Under UK GDPR you have the right to access personal data we hold about you; to correct inaccurate data; to request erasure in certain circumstances; to restrict processing; to data portability; and to object to processing based on legitimate interests. To exercise any right, write to us at [email protected]. We respond within 30 days. You may also submit a complaint to the ICO at ico.org.uk if you are dissatisfied with our response.