Privacy Policy

Last updated: 1 June 2026. This policy explains how PropervestAI ("we", "us", "our") collects, uses, and protects your personal data in connection with this website and our consulting services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

PropervestAI is the data controller responsible for your personal data. Our registered principal office is located at 23 Old Street, London, EC1V 9HL, United Kingdom. For any questions about this policy or your personal data, please contact us at [email protected] or by telephone on +44 20 4931 7582.

2. What Data We Collect

We collect and process the following types of personal data:

• Identity data: your name, job title, and organisation when you provide these via our contact form or email
• Contact data: email address, telephone number where provided, and any postal address included in correspondence
• Technical data: IP address, browser type, device type, operating system, and browsing session information collected automatically when you visit our website
• Behavioural and usage data: pages visited, navigation path, time on site, and interaction data, collected with your consent via analytics tools
• Enquiry data: the content of messages you submit through our contact form or send by email, including any details of your business situation you choose to share

3. Legal Bases for Processing

We rely on the following lawful bases under UK GDPR Article 6 to process your personal data: Legitimate interests — for responding to business enquiries, operating and improving our website, and developing our consulting offer; Contract performance — for data necessary to deliver or prepare to deliver consulting services under an engagement agreement; Consent — for non-essential analytics cookies and marketing communications where you have opted in; Legal obligation — where UK law requires us to retain or process data, including for HMRC-compliant record-keeping.

4. How We Use Your Personal Data

Your data is used for the following purposes: responding to and following up on enquiries submitted via our contact form or email; delivering, managing, and improving our digital transformation consulting services; analysing how visitors use our website in order to improve navigation, content quality, and relevance (with consent); communicating with you about our services, insights, and events where you have consented to receive such communications; and fulfilling our legal obligations as a UK-registered business. We do not use your data for automated profiling that produces legal or similarly significant effects.

5. Sharing Your Personal Data

We do not sell, rent, or trade your personal data. We may share it with: cloud hosting and IT service providers who store and process data on our behalf under strict contractual safeguards; professional advisors including legal counsel, accountants, and insurers where required; analytics service providers where you have consented to analytics cookies; and relevant authorities where required by UK law or a valid court order. Every third-party processor is bound by a data processing agreement and may only process your data for the specified purpose.

6. International Data Transfers

We aim to keep your personal data within the United Kingdom at all times. Where a third-party service provider transfers data outside the UK as part of delivering their service to us, we require them to comply with applicable UK transfer safeguards — including reliance on an adequacy decision or UK standard contractual clauses. We will inform you of any material changes to international transfer arrangements that affect your personal data.

7. How Long We Keep Your Data

Contact form submissions and email correspondence are retained for up to 36 months from the date of last contact. Consulting engagement records are retained for six years following the end of the engagement, as required by HMRC for business record-keeping purposes. Analytics data is held in anonymised or aggregated form for a maximum of 26 months. At the end of any retention period, data is securely and permanently deleted or anonymised.

8. Your Rights Under UK GDPR

You have the right to: request access to the personal data we hold about you; request correction of inaccurate data; request erasure of your data in certain circumstances; restrict how we process your data; receive your data in a portable format; and object to processing based on legitimate interests. To exercise any right, contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk if you are not satisfied with how we have handled your data.