Privacy Policy

Last updated: 1 June 2026. This policy explains how PropervestAI ("we", "us", "our") collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

PropervestAI is the data controller for personal data collected through this website. Our registered address is 47 Bishopsgate, London, EC2N 3AL, United Kingdom. You may contact our data protection team at [email protected] or by telephone on +44 7342 581 937.

2. What Personal Data We Collect

We collect the following categories of personal data when you interact with our website or services:

• Identity data: name, job title, company name
• Contact data: email address, telephone number, postal address
• Technical data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on the site
• Usage data: information about how you interact with our website, including clicks and scroll behaviour
• Communications data: the content of enquiries you submit through our contact form

3. How We Collect Your Data

We collect personal data through the following means: directly from you when you complete our contact form or send us an email; automatically when you visit our website through cookies and similar tracking technologies; and from third-party analytics providers such as Google Analytics when you browse our site with cookies accepted.

4. Legal Bases for Processing

We rely on the following legal bases to process your personal data: (a) Legitimate interests — for operating our website, improving our services, and corresponding with business enquiries; (b) Contract performance — for processing data necessary to deliver consulting services to you; (c) Consent — for placing non-essential cookies and sending marketing communications where you have opted in; (d) Legal obligation — where we are required to process data to comply with applicable law.

5. How We Use Your Personal Data

We use your personal data to respond to enquiries submitted through our contact form; to deliver our consulting and AI services to you or your organisation; to improve and optimise the content and functionality of our website; to send you updates and thought leadership materials where you have consented to receive such communications; and to comply with legal and regulatory obligations applicable to our business.

We will never sell your personal data to third parties, nor use it for automated decision-making that produces legal or similarly significant effects without your explicit consent.

6. Who We Share Your Data With

We may share your personal data with: IT and hosting providers who support our website infrastructure under strict data processing agreements; professional advisors including solicitors and accountants where legally necessary; analytics providers such as Google Analytics (data is anonymised at the point of collection); and regulatory authorities or law enforcement where required by law. All third-party processors are contractually bound to handle your data securely and only for the specified purposes.

7. International Transfers

Your personal data is stored and processed within the United Kingdom. Where we engage service providers based outside the UK, we ensure adequate safeguards are in place — including UK adequacy regulations or standard contractual clauses — before any transfer takes place. We will inform you of any material change to our international transfer arrangements.

8. Data Retention

We retain contact form submissions and correspondence for a maximum of three years from the date of last contact, unless a longer period is required for legal or contractual reasons. Technical and usage data collected via analytics is retained in anonymised or aggregated form for up to 26 months. When data is no longer required, it is securely deleted or anonymised.

9. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data in certain circumstances
• Right to restriction — request that we limit how we use your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.