Privacy Policy

1. Data we collect

We collect the following categories of personal data:

• Account data (landlords): name, email address, phone number, company name, password hash
• Listing data: property address, postcode, photos, description, pricing, and contact details you choose to publish
• Enquiry data: name, email, phone, and message submitted via enquiry forms
• Payment data: handled entirely by Stripe; we store only a Stripe customer ID and subscription status
• Usage data: anonymised search and property view analytics; IP addresses are hashed before storage
• Contact form submissions: name, email, and message content

2. How we use your data

We process your personal data for the following purposes:

• Providing and operating the Platform (contract performance)
• Processing subscription payments (contract performance)
• Sending transactional emails including verification, password reset, and enquiry notifications (contract performance)
• Displaying listings to contractors searching for accommodation (contract performance)
• Improving the Platform through anonymised analytics (legitimate interest)
• Responding to contact form enquiries (legitimate interest)
• Complying with legal obligations

3. Data sharing

We share personal data with:

• Stripe Inc. — payment processing. Stripe is PCI DSS Level 1 certified. Stripe may process data in the US under standard contractual clauses.
• Resend Inc. — transactional email delivery
• Neon Inc. — database hosting (EU region)
• Cloudflare Inc. — file storage (R2) and CDN
• Vercel Inc. — platform hosting

We do not sell personal data to third parties. We do not share data with advertisers.

4. Contractor data

When a contractor submits an enquiry, their name, email, phone number, and message are forwarded to the relevant landlord. By submitting an enquiry you consent to your contact details being shared with the landlord for the purpose of arranging accommodation.

5. Cookies

We use essential session cookies necessary to operate the Platform. We may also use analytics cookies. Please see our Cookie Policy for full details.

6. Data retention

We retain account data for as long as your account is active and for up to 2 years thereafter. Enquiry data is retained for up to 3 years. Payment records are retained for 7 years in accordance with HMRC requirements.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data (where no legal obligation to retain exists)
• Object to processing based on legitimate interest
• Data portability
• Lodge a complaint with the ICO at ico.org.uk

To exercise any of these rights, email hello@digzz.co.uk.

8. Security

We use industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and access controls. No system is completely secure; we encourage you to use a strong unique password and enable two-factor authentication on your email account.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The current version is always available at digzz.co.uk/privacy.