Privacy Policy

Last updated: December 2025

This privacy policy explains how we collect, use, share and protect personal data when you use home.co.uk (the "Website") and any related services, dashboards, feeds, APIs and enquiry tools (together, the "Services").

This policy is relevant to:

• Consumers and visitors using the Website to search for property information and submit enquiries; and
• Business users (agents/advertisers) who create an account or submit property listings (including via feeds/APIs), and their staff.

1. Who we are (data controller information)

home.co.uk is operated by HomeCo Internet Property Ltd (registered in England & Wales, Company No: 03982774) — a wholly-owned subsidiary of HM Haus Group Ltd (Company No: 13873779).

For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018:

• HomeCo Internet Property Ltd is a data controller for personal data processed through home.co.uk; and
• HM Haus Group Ltd may also act as a data controller where it provides shared infrastructure, analytics, security and support services as part of a centralised data management system.

Where we refer to "we", "us" or "our" in this policy, we mean HomeCo Internet Property Ltd and, where relevant, HM Haus Group Ltd.

2. The personal data we collect

We may collect and process the following categories of personal data, depending on how you use the Services.

2.1 If you are a consumer or visitor

• Contact details: name, email address, telephone number (for example when submitting an enquiry or contacting us).
• Enquiry details: the content of messages you submit, the property you enquire about, and any information you choose to provide.
• Preferences and usage: property searches, saved searches, alerts, and interactions with the Website.
• Technical data: IP address, device identifiers, browser type, operating system, referral URLs, pages viewed, and approximate location derived from IP address.
• Cookies and similar technologies: identifiers and behavioural data collected via cookies (see section 10).

2.2 If you are an agent/advertiser (business user)

• Account and profile details: name, work email address, work telephone number, job title/role, branch/agency details and account preferences.
• Login and security data: authentication data, access logs, IP address, device data, and security events.
• Listing administration data: activity logs (for example when you add, amend or remove listings), feed/API credentials or tokens, and support interactions.
• Communications: emails, messages, and call notes if you contact us for support or account management.

2.3 Information from third parties

We may receive personal data from:

• agents/advertisers (for example, where an enquiry outcome is shared back to us for service improvement);
• service providers (for example analytics, hosting, security and communication providers); and
• publicly available sources where relevant for fraud prevention, compliance or verification.

3. How we use personal data

We use personal data for the following purposes:

3.1 Providing and operating the Services

• to provide property search and discovery functionality;
• to create and manage user accounts (including agent/advertiser accounts);
• to publish and display property listings and associated information;
• to deliver alerts or notifications you request (such as saved searches or updates, where available);
• to route and deliver enquiries ("Leads") to agents/advertisers.

3.2 Support, service improvement and analytics

• to respond to enquiries and provide customer support;
• to monitor performance, troubleshoot issues and improve the Website and Services;
• to analyse usage patterns and develop new features.

3.3 Security, fraud prevention and integrity

• to protect users and the Services from misuse, fraud, spam and unauthorised access;
• to enforce our terms and policies.

3.4 Legal and compliance

• to comply with legal obligations, respond to lawful requests, and exercise or defend legal claims.

3.5 Marketing and communications

• to send service messages (for example account, security or operational communications); and
• to send marketing communications where permitted by law (and where required, with your consent). You can opt out of marketing at any time.

4. Legal bases for processing

We process personal data under the following legal bases (depending on the context):

• Contract: where processing is necessary to provide Services to you (for example, managing an agent/advertiser account, delivering Leads, or providing requested functionality).
• Legitimate interests: where processing is necessary for our legitimate interests (for example, improving Services, ensuring platform security, preventing fraud, and operating the Portal), and your rights do not override those interests.
• Consent: where you have provided consent (for example, certain marketing communications and non-essential cookies, where required).
• Legal obligation: where we must process personal data to comply with a legal obligation.

5. Leads, listings and controller roles (important)

5.1 When a consumer submits an enquiry to an agent/advertiser

If you submit an enquiry through the Website, we will share the personal data you provide (such as name, email address, telephone number and message contents) with the relevant agent/advertiser so they can respond.

In most cases:

• we process your enquiry data to operate the Services and deliver the Lead; and
• the agent/advertiser processes your enquiry data to respond to you and provide their services.

This means we and the agent/advertiser will generally act as independent controllers of your personal data for our respective purposes. Agents/advertisers should provide their own privacy information explaining how they use your data once they receive it.

5.2 If you are an agent/advertiser receiving Leads

You are responsible for ensuring you have appropriate notices, policies and lawful bases for your processing of Lead data, including compliance with UK GDPR and (where relevant) PECR for marketing.

6. How we share personal data

We may share personal data with:

• Agents/advertisers: when you submit an enquiry about a listing.
• Group companies: other companies within HM Haus Group where necessary to deliver Services, operate shared infrastructure, provide support, analytics, security and improve products.
• Service providers: suppliers who help us run the Website and Services (for example hosting, content delivery networks, analytics, security, communications, customer support tools). They may process personal data on our behalf under appropriate contractual protections.
• Professional advisers: including lawyers, bankers, auditors and insurers.
• Authorities and regulators: where required by law, court order or to protect rights and safety.
• Business transfers: if we sell, transfer or reorganise part of our business, personal data may be shared as part of that transaction, subject to appropriate safeguards.

We do not sell personal data to third parties.

7. International transfers

Personal data is primarily processed within the United Kingdom. Where we transfer personal data outside the UK (and where applicable outside the European Economic Area), we will ensure appropriate safeguards are in place, such as an adequacy decision or approved contractual protections, in accordance with UK GDPR requirements.

8. Data security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. This includes access controls, monitoring, encryption in transit where appropriate, and security practices aimed at protecting platform integrity.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting or reporting obligations.

Retention periods vary depending on the type of data and how it is used. For example:

• account and support records may be retained while an account remains active and for a reasonable period afterwards; and
• enquiry records may be retained to help operate the Services, handle disputes, improve quality, and meet legal requirements.

Where we no longer need personal data, we will delete it or anonymise it.

10. Cookies and similar technologies

We use cookies and similar technologies to:

• enable core site functionality;
• remember preferences;
• analyse usage and improve performance; and
• support marketing activities where permitted.

You can control cookies through your browser settings and, where available, our cookie controls. For more information, please see our Cookie Policy.

11. Your rights

Under data protection law, you have rights including:

• Access: request a copy of your personal data;
• Rectification: request correction of inaccurate or incomplete data;
• Erasure: request deletion of your personal data in certain circumstances;
• Restriction: request that we limit processing in certain circumstances;
• Portability: receive certain data in a structured, commonly used format;
• Objection: object to processing based on legitimate interests;
• Withdraw consent: withdraw consent at any time where we rely on consent.

To exercise your rights, contact us using the details in section 14.

12. Third-party links

The Website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. Please review their privacy policies before providing personal data.

13. Children's privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16.