Legal Document

Privacy Policy

Last updated: 1 January 2025 · UK GDPR Compliant

Data Controller: Western Properties Ltd · ICO Registration Pending · Company No. 05885029

1. Who We Are

Western Properties Ltd ("we", "us", "our") is a Private Limited Company registered in England and Wales (Company No. 05885029). Our registered office is at Hafan, 5 Kings Road, Radyr, Cardiff, South Glamorgan, CF15 8EB. We are the data controller responsible for your personal data collected through our platform at westernpropertiesltd.co.uk.

2. Data We Collect

We collect the following categories of personal data: Identity Data (name, username); Contact Data (email address, telephone number, postal address); Account Data (account type, preferences, saved properties); Transaction Data (payment information, application records, fee payments — note: card details are processed directly by Stripe and never stored by us); Technical Data (IP address, browser type, device information, cookies); Usage Data (pages visited, search queries, interactions with listings); Communications Data (messages sent through our platform).

3. How We Use Your Data

We use your personal data for the following purposes: (a) to create and manage your account; (b) to facilitate property applications, bids and enquiries; (c) to process payments via Stripe; (d) to send service communications and notifications; (e) to improve our platform and services; (f) to comply with legal obligations; (g) to prevent fraud and ensure platform security; (h) to respond to support enquiries. We will never sell your personal data to third parties.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR: (a) Performance of Contract — to provide our platform services; (b) Legitimate Interests — to improve our services, prevent fraud and ensure security; (c) Legal Obligation — to comply with UK law; (d) Consent — where you have provided explicit consent, such as for marketing communications.

5. Data Sharing

We share personal data only with: (a) Stripe, Inc. — for secure payment processing (Stripe Privacy Policy applies); (b) Property owners/landlords — when you make an application or enquiry; (c) Law enforcement or regulatory authorities — where required by law; (d) Professional advisors — for legal, financial or insurance purposes. All third parties are required to handle your data securely and in compliance with UK GDPR.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements. Account data is retained for the duration of your account plus 6 years. Transaction records are retained for 7 years for tax and legal purposes. You may request deletion of your account at any time, subject to legal retention requirements.

7. Your Rights

Under UK GDPR, you have the right to: Access your personal data; Rectify inaccurate data; Erasure ("right to be forgotten"); Restrict processing; Data portability; Object to processing; Withdraw consent at any time (where processing is based on consent). To exercise any of these rights, please contact us at info@westernpropertiesltd.co.uk. We will respond within 30 days.

8. Cookies

Our platform uses essential cookies necessary for operation (session management, CSRF protection) and optional analytics cookies. Essential cookies cannot be disabled as they are required for platform functionality. You may control optional cookies through your browser settings. We do not use advertising or tracking cookies.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including: SSL/TLS encryption for all data transmission; bcrypt password hashing; CSRF protection; SQL injection prevention; access controls and authentication requirements. Despite these measures, no internet transmission is entirely secure and we cannot guarantee absolute security.

10. International Transfers

We process data primarily within the UK and European Economic Area. Where data is transferred outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR, such as Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email. The current version will always be available at westernpropertiesltd.co.uk/privacy.

12. How to Contact Us

Data Protection enquiries: info@westernpropertiesltd.co.uk · Support: support@westernpropertiesltd.co.uk · Post: Western Properties Ltd, Hafan, 5 Kings Road, Radyr, Cardiff, CF15 8EB. If you have concerns about how we handle your data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Western Properties Ltd · Company No. 05885029 · Data Controller
Hafan, 5 Kings Road, Radyr, Cardiff, CF15 8EB, United Kingdom
info@westernpropertiesltd.co.uk