Privacy Policy

DealScope is the data controller for the personal data described in this policy. DealScope is operated as a sole trader based in the United Kingdom, and is registered with the Information Commissioner’s Office (ICO).

For any privacy question, or to exercise any right below, email privacy@dealscope.org.uk. We aim to respond within 5 working days and are required to respond within one month.

Account data: your name, email address, role (investor or agent), password (stored only as a hash by our authentication provider), and your subscription tier and status.

Investor buying profile: your mobile number, preferred time to be called, industry, budget range, cash available, financing method, locations of interest, portfolio size and purchase timeframe. This is shown to an agent when you submit interest in a listing — that is its purpose.

Activity data: the listings you view, enquiries you submit, saved searches and deal alerts, mandates you post, properties you add to your portfolio tracker, financial models you save, and AI reports and area-research briefings you generate.

Completion evidence: if you confirm a completed purchase, the file you upload (typically a solicitor’s letter or email) and the deal value. These documents can contain financial information about you and are treated accordingly.

Agent data: for agents, your company details, contact details, coverage areas, listings, leads received, and any API keys you create.

Letter subscribers: if you subscribe to The DealScope Letter, your email address and whether you confirmed it. You can be a subscriber without holding an account.

Technical data: IP address, browser and device information, and error diagnostics, used to keep the service secure and working.

To provide the platform and your account — performance of our contract with you. This includes passing your buying profile and contact details to the listing agent when you submit interest, which is the core function of the marketplace and cannot be separated from it.

To take payment for a paid plan — performance of our contract, using our payment processor.

To send transactional messages (enquiry confirmations, completion-confirmation requests, deal alerts you asked for, mandate notifications) — performance of our contract, or our legitimate interest in operating the service.

To send The DealScope Letter — your consent, given by double opt-in and withdrawable from any issue.

To keep the marketplace accurate and free from abuse, and to compute DealScores and financial models from listing data — our legitimate interest in a trustworthy marketplace.

To meet accounting and tax obligations on completed referrals — a legal obligation.

Listing agents: when, and only when, you submit interest in a listing. Until you do, the agent cannot see you, and you cannot see them.

Our processors, who act only on our instructions: Supabase (database and authentication, UK/EU hosting), Vercel (hosting), Stripe (payments), Resend (transactional email), Anthropic (AI-generated report and research prose), Upstash (rate limiting), and Sentry and PostHog where enabled (error and product analytics).

We do not sell your personal data, and we do not accept payment to change any score, ranking or comparison.

Some of our processors are based outside the United Kingdom, principally in the United States — this includes Stripe, Resend, Anthropic and, where enabled, Sentry and PostHog. Where personal data is transferred outside the UK, it is protected by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the safeguards each provider offers.

Text you enter that is used to generate an AI report or area briefing is processed by Anthropic. We do not send your contact details, buying profile or completion evidence to any AI provider.

We set a small number of strictly necessary cookies to keep you signed in and to keep the site secure. These do not require consent and cannot be turned off while you are using an account.

Analytics cookies are only set if you accept them in the cookie banner. You can change your mind at any time by clearing the choice in the banner. We do not use advertising cookies without your consent.

Account and buying-profile data: for as long as your account is open, and removed when you close it.

Enquiries and leads: 6 years from the enquiry, because a lead can become a completed referral and we are required to keep records supporting our accounts.

Completion evidence and referral records: 6 years from the end of the relevant tax year, to meet HMRC record-keeping requirements.

Deal-outcome reports (the actual rent and voids you report a year after purchase): retained indefinitely in a form that does not identify you, because published accuracy figures are computed from them.

Letter subscribers: until you unsubscribe, plus a suppression record so we do not email you again.

Server and error logs: up to 90 days.

You have the right to be informed, to access a copy of your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, and to data portability. You can also withdraw consent where we rely on it, at any time, as easily as you gave it.

Two of these are built into the product: signed in, go to your profile (investors) or Account & data (agents) to download everything we hold on you as a JSON file, or to close your account.

Closing your account removes your personal details immediately and signs you out; the underlying login record is deleted within 30 days. We keep the bare record of any completed purchase, without your personal details attached, because we are legally required to retain it.

For anything else, email privacy@dealscope.org.uk.

Data is encrypted in transit. Access to the database is governed by row-level security so one account cannot read another’s data, and administrative access is limited to the operator of the platform. Uploaded evidence files are restricted to inert document and image formats.

No system is perfectly secure. If a breach affects your rights, we will tell you and the ICO as the law requires.

If you are unhappy with how we have handled your data, please tell us first at privacy@dealscope.org.uk — we would rather fix it. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.

If we change what we collect or why, we will update this page and change the date at the top. Material changes affecting you will be notified by email.