Privacy Policy

Last updated: 1 June 2026. This policy describes how PropervestAI ("we", "us", "our") handles personal data collected via our website and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Identity

PropervestAI acts as the data controller for all personal data processed through this website. Our principal place of business is 12 Canary Wharf, London, E14 5AB, United Kingdom. For any data protection enquiries, please write to us at [email protected] or call +44 20 7463 8291.

2. Categories of Personal Data Collected

We may collect and process the following types of personal data depending on how you interact with us:

• Contact and identity information: your name, professional title, organisation name, email address, and telephone number
• Technical data: IP address, browser type and version, device type, referring URLs, and pages visited on our site
• Behavioural data: how you navigate and interact with our website, captured via analytics tools with your consent
• Enquiry content: the information you voluntarily provide when submitting our contact form or corresponding with us by email

3. Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR Article 6 to process your personal data: Legitimate interests (operating and improving our website, responding to business enquiries, and developing our service offering); Contract (where processing is necessary to perform or prepare to perform a consulting agreement with you or your organisation); Consent (for non-essential cookies and direct marketing where you have explicitly opted in); and Legal obligation (where UK law requires us to retain or process certain data).

4. Purposes of Processing

Your personal data is used to respond to your enquiries in a timely and relevant manner; to provide, manage, and improve our consulting services; to analyse how our website is used in order to improve navigation and content relevance; to send you information about our services where you have consented to receive such communications; and to meet our legal and regulatory obligations as a UK-registered business.

5. Data Sharing and Third Parties

We do not sell or rent your personal data. We may share it with: our cloud hosting and IT infrastructure providers (operating under binding data processing agreements); professional advisors such as legal counsel and accountants, where required; analytics platform providers where you have consented to analytics cookies; and public authorities or regulators when required by law. All third parties are subject to appropriate contractual safeguards.

6. International Data Transfers

We store and process personal data within the UK wherever practicable. Where any third-party provider transfers data outside the UK, we require them to comply with applicable UK transfer safeguards, including reliance on UK adequacy regulations or UK-approved standard contractual clauses. We will notify you of any significant changes to our international processing arrangements.

7. Retention Periods

We retain personal data only for as long as necessary for the purposes described above. Contact form submissions are retained for up to 36 months from the date of last interaction. Website analytics data is retained for up to 26 months in anonymised or aggregated form. Consulting engagement records are retained for the period required by applicable commercial and tax law, typically 6 years.

8. Your Data Protection Rights

Under the UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate records; request erasure where there is no lawful basis for continued processing; restrict processing in certain circumstances; receive your data in a portable format; and object to processing based on legitimate interests. To exercise any right, contact us at [email protected]. We will respond within one calendar month. You may also raise a complaint with the UK's Information Commissioner's Office at ico.org.uk.