Legal
Privacy Policy
This policy explains how Propbar collects, uses and protects personal information across our website, browser extension and related services, and the rights you have over it.
On this page
- 01 Who We Are
- 02 Information We Collect
- 03 How We Use Your Information
- 04 Data Sharing and Third Parties
- 05 International Data Transfers
- 06 Data Retention
- 07 Your Rights
- 08 Data Security
- 09 Cookies and Tracking
- 10 Children's Privacy
- 11 Marketing Communications
- 12 Automated Decision-Making
- 13 Changes to This Policy
- 14 Contact Us
01Who We Are#
- Controller
- Vepler Ltd (company number 13193131)
- Address
- 171-75 Shelton Street, Covent Garden, London WC2H 9JQ
- Contact
- [email protected]
Propbar provides property research and analysis services through our website (propbar.co.uk), browser extension, mobile applications and related services. This Privacy Policy applies to all of them (collectively, the "Service").
02Information We Collect#
2.1 Information You Provide
Account Information:
- Email address
- Name (optional)
- Password (encrypted)
- Profile preferences
- Payment information (processed by Stripe)
User-Generated Content:
- Property searches and saved searches
- Saved properties and lists
- Map drawings and saved areas
- Feedback and support requests
- Questions you put to our AI research assistant, and the conversations that follow
2.2 Information We Collect Automatically
Usage Data:
- Properties viewed and time spent
- Search queries and filters used
- Features accessed and interactions
- Browser extension activity on property portals
- Referring website and exit pages
Technical Data:
- IP address and approximate location
- Browser type and version
- Device type and operating system
- Screen resolution and viewport size
- Language preferences
- Time zone settings
Analytics Data:
- Page views and navigation paths
- Click events and user interactions
- Session recordings and heatmaps (PostHog)
- Performance metrics (Web Vitals)
- Error logs and debugging information (PostHog)
2.3 Browser Extension Data
When you use our browser extension on property portals:
- URLs of property pages you visit
- Property identifiers for matching our data
- Time and date of property views
- Interaction with extension features
Important: The extension only activates on property portal domains. We do not track your browsing on other websites.
03How We Use Your Information#
3.1 Legal Basis for Processing
We process your personal data under the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing our services | Contract performance |
| Processing payments | Contract performance |
| Procurement and supply of official copies of HM Land Registry records (see section 3.3) | Contract performance (the ordering user); legitimate interests (personal data of the registered proprietor contained in the record) |
| Account security | Legitimate interest |
| Service improvements | Legitimate interest |
| Analytics and insights | Consent (see Cookies Policy) |
| Marketing communications | Consent |
| Legal compliance | Legal obligation |
Providing our services
- Legal basis
- Contract performance
Processing payments
- Legal basis
- Contract performance
Procurement and supply of official copies of HM Land Registry records (see section 3.3)
- Legal basis
- Contract performance (the ordering user); legitimate interests (personal data of the registered proprietor contained in the record)
Account security
- Legal basis
- Legitimate interest
Service improvements
- Legal basis
- Legitimate interest
Analytics and insights
- Legal basis
- Consent (see Cookies Policy)
Marketing communications
- Legal basis
- Consent
Legal compliance
- Legal basis
- Legal obligation
3.2 Specific Uses
We use your information to:
- Provide property valuations and market analysis
- Display relevant property information via our extension
- Process subscriptions and payments
- Send service updates and notifications
- Respond to support requests
- Detect and prevent fraud or abuse
- Improve our algorithms and data accuracy
- Comply with legal obligations
3.3 HM Land Registry Title Documents
Where a user orders an official copy of a record held by HM Land Registry in respect of a property (including an official copy of the register of title, a title plan, or a document referred to in the register), we procure that record from HM Land Registry and supply it to the ordering user. Such records are maintained on a public register: pursuant to the Land Registration Act 2002 and the Land Registration Rules 2003, any person may obtain official copies of the register of title without the consent of the registered proprietor, and no right of opt-out from that statutory regime exists. Such records may nevertheless comprise personal data, including the name and address for service of the registered proprietor, the price paid or value stated, and particulars of registered charges and other encumbrances.
Our lawful bases for this processing under Article 6(1) UK GDPR are:
- Performance of a contract (Article 6(1)(b)), in respect of the ordering user's personal data, insofar as the processing is necessary to receive, fulfil, and record the order and to deliver the record to that user.
- Legitimate interests (Article 6(1)(f)), in respect of personal data relating to the registered proprietor and other third parties named in the record, insofar as the processing is necessary for the purposes of fulfilling requests for official copies of public register entries, facilitating property due diligence and conveyancing enquiries, and the verification of registered ownership, including the prevention and detection of fraud. We have carried out a balancing assessment in respect of these interests. Registered proprietor information contained in such records is not displayed, published, or indexed on any publicly accessible page of the Service, and is not used for the purposes of direct marketing, profiling, or the enrichment of any other dataset held by us.
Records so obtained are retained and made available to the ordering user (and, where applicable, to that user's organisation) for the duration set out in the Data Retention section below. A registered proprietor, or any other data subject named in such a record, may object to our processing of their personal data under Article 21 UK GDPR by contacting us using the details set out in section 7; any such objection will be assessed in accordance with that Article.
3.4 AI Research Assistant
Our research assistant lets you ask questions about properties, areas and the housing market. Like most AI products, it runs on third party AI infrastructure: your questions and conversation are processed by the providers described in section 4.1 in order to generate responses. We process this information to provide the Service you have requested and, for sessions started without an account, under our legitimate interest in operating and safeguarding the assistant.
Conversations are stored so that you can return to them and so that we can maintain quality and prevent misuse. Chat history linked to your account is deleted when your account is deleted; sessions started without an account are not linked to your identity. The assistant is designed for property research: please do not enter sensitive personal information about yourself or others into it.
04Data Sharing and Third Parties#
4.1 Service Providers
We share data with trusted service providers who process it on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | US/EU |
| Stripe | Payment processing | US/EU |
| PostHog | Analytics, session recordings, heatmaps, error tracking | US/EU |
| Customer.io | Email, onboarding and lifecycle messaging | EU |
| Analytics, Tag Manager, authentication | US/EU | |
| Meta/Facebook | Advertising analytics | US |
| X (Twitter) | Advertising analytics | US |
| B2B marketing insights | US | |
| Cloudflare | Content delivery, security | Global |
| Mapbox | Interactive maps and location services | US |
| AI infrastructure providers | Model hosting, web search and embeddings for the research assistant | US |
Supabase
- Purpose
- Database and authentication
- Location
- US/EU
Stripe
- Purpose
- Payment processing
- Location
- US/EU
PostHog
- Purpose
- Analytics, session recordings, heatmaps, error tracking
- Location
- US/EU
Customer.io
- Purpose
- Email, onboarding and lifecycle messaging
- Location
- EU
- Purpose
- Analytics, Tag Manager, authentication
- Location
- US/EU
Meta/Facebook
- Purpose
- Advertising analytics
- Location
- US
X (Twitter)
- Purpose
- Advertising analytics
- Location
- US
- Purpose
- B2B marketing insights
- Location
- US
Cloudflare
- Purpose
- Content delivery, security
- Location
- Global
Mapbox
- Purpose
- Interactive maps and location services
- Location
- US
AI infrastructure providers
- Purpose
- Model hosting, web search and embeddings for the research assistant
- Location
- US
4.2 Other Disclosures
We may share your information:
- To comply with legal obligations or court orders
- To protect our rights, property, or safety
- In connection with a business sale or merger
- With your explicit consent
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
05International Data Transfers#
Some of our service providers operate outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place:
- UK-US Data Bridge or Standard Contractual Clauses
- Adequacy decisions by the UK government
- Your explicit consent where required
06Data Retention#
We retain your data for specific periods based on its purpose:
| Data type | Retention period | Reason |
|---|---|---|
| Account data | Active account + 30 days | Service continuity |
| Search history | 90 days | Improve accuracy, detect misuse |
| Payment records | 7 years | Legal requirement (HMRC) |
| Official copies of HM Land Registry records | Duration of the purchaser's entitlement to access; associated purchase records retained for 7 years | Continued provision of purchased records; statutory accounting and audit obligations |
| Analytics data | 26 months | Service improvement |
| AI research chat history | Deleted with your account | Conversation history and continuity |
| Error logs | 90 days | Debugging and security |
| Marketing consent | Until withdrawn | Regulatory compliance |
Account data
- Retention period
- Active account + 30 days
- Reason
- Service continuity
Search history
- Retention period
- 90 days
- Reason
- Improve accuracy, detect misuse
Payment records
- Retention period
- 7 years
- Reason
- Legal requirement (HMRC)
Official copies of HM Land Registry records
- Retention period
- Duration of the purchaser's entitlement to access; associated purchase records retained for 7 years
- Reason
- Continued provision of purchased records; statutory accounting and audit obligations
Analytics data
- Retention period
- 26 months
- Reason
- Service improvement
AI research chat history
- Retention period
- Deleted with your account
- Reason
- Conversation history and continuity
Error logs
- Retention period
- 90 days
- Reason
- Debugging and security
Marketing consent
- Retention period
- Until withdrawn
- Reason
- Regulatory compliance
07Your Rights#
Under UK GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a portable format
- Object: Object to processing based on legitimate interests, on grounds relating to your particular situation
- Automated decisions: Not be subject to solely automated decision-making
To exercise any of these rights, email [email protected]. We respond within one calendar month of receiving a request, as UK GDPR requires; where a request is complex we may extend this by up to two further months, and we will tell you within the first month if so. Each request is assessed on its own facts, and we explain our reasoning, including where we balance your request against the legitimate interests served by publishing information drawn from public sources. An objection under Article 21 UK GDPR must set out grounds relating to your particular situation, and we assess it against our documented legitimate interests assessments. Where requests are manifestly unfounded or excessive, including repetitive or template requests, Article 12(5) UK GDPR permits us to refuse them or to charge a reasonable fee, and we will explain our decision where we rely on it. For property pages and images specifically, our removals and corrections page explains how we handle these.
Complaints: If you are dissatisfied with how we handle your data, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
08Data Security#
We implement appropriate technical and organisational measures to protect your data:
- Encryption in transit (TLS/SSL) and at rest
- Regular security audits and testing
- Access controls and authentication
- Employee training and confidentiality agreements
- Incident response procedures
However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10Children's Privacy#
Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can delete it.
11Marketing Communications#
We send marketing emails about our services only where you have opted in. You can unsubscribe at any time by:
- Clicking "unsubscribe" in any marketing email
- Updating your preferences in account settings
- Emailing [email protected]
We will always send service-related emails (such as payment confirmations) regardless of marketing preferences.
12Automated Decision-Making#
We use algorithms to provide property valuations and market analysis. These are not used for decisions with legal or similarly significant effects. Our estimates are for informational purposes only and should not be relied upon as professional valuations.
13Changes to This Policy#
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on this page
- Updating the "Last updated" date
- Emailing you (for material changes)
The current version of this policy applies whenever you use the Service.
14Contact Us#
For privacy questions, requests, or complaints, contact our data protection contact:
- Contact
- Data Protection Contact, Vepler Ltd
- Address
- 171-75 Shelton Street, Covent Garden, London WC2H 9JQ
- [email protected]
- Company
- 13193131 (England and Wales)