Last updated 17 September 2026

Privacy Policy

How Homebuyer Report collects, uses and protects your personal data under UK GDPR and the Data Protection Act 2018.

Who we are

Homebuyer Report (“we”, “us”) operates homebuyerreport.co.uk. For data protection queries, contact us at admin@homebuyerreport.co.uk.

Data we collect

Account information — name, email address, password (hashed), and optional business branding details (company name, phone, website, logo).
Order & search data — postcodes and house numbers/names you search or order reports for, plus report delivery email addresses.
Payment data — processed by Stripe; we store payment status, amounts and Stripe session references, not full card numbers.
Technical data — IP address, browser user agent, security events (failed logins, rate limits, honeypot/probe hits), and session cookies needed to keep you signed in.
Promotional offers — free-report balance, expiry and promo markers on your account; and, where you claim a free offer, a limited claim record for your email (see Retention).
Mail preferences — whether you want “report ready” emails (you can unsubscribe from the email or change this in your profile).

Why we use your data (lawful bases)

Contract — to create your account, generate PDFs, process payments/credits and deliver reports.
Legitimate interests — to secure the service (fraud/bot prevention, firewall logging), improve reliability, and show relevant account status.
Consent — for non-essential cookies (for example Google reCAPTCHA) where you accept them via our cookie banner.
Legal obligation — where we must retain transaction records for tax or regulatory reasons.

UK GDPR compliance & your rights

Under UK GDPR you may request:

Access — a copy of personal data we hold about you
Rectification — correction of inaccurate data
Erasure — deletion where we have no overriding legal duty to keep it
Restriction / objection — in certain circumstances
Data portability — for data you provided to us in a structured form
Withdraw consent — for cookie/consent-based processing, via the cookie banner or by clearing site data

To exercise these rights, email admin@homebuyerreport.co.uk. You may also complain to the Information Commissioner’s Office (ICO).

Processors & international transfers

We use trusted processors such as Stripe (payments), Google (reCAPTCHA, only with cookie consent), and hosting infrastructure in the UK/EEA or under appropriate transfer safeguards. Public data sources (HM Land Registry, MHCLG EPC, Environment Agency, Police.uk) are queried to compile reports; search postcodes are sent to those APIs as required to fulfil your order.

Retention

Property report files (PDF and online HTML copies) are kept for 12 months from the date the report was created, after which the files are automatically removed. A stub record (address, purchase date, amount) may remain in your account vault and billing ledger for history. You may delete a report from your vault at any time; that also removes the PDF and online link and is logged on your billing ledger.

Business accounts with a purchased credit balance above £0 are exempt from automatic report-file removal while the business account remains active. If the purchased credit balance reaches £0, business status ends and the account becomes a standard account (business accounts themselves are not deleted while active).

Catalogue sample reports, and reports with an open support dispute, are not auto-removed under the 12-month rule. Account records and payment references are kept while your account is active and for a reasonable period afterwards for support, audit and legal purposes (including tax). Security logs are retained for a limited period for abuse prevention. Free promotional credit balances on an account expire after one year from grant.

If you claim a free promotional report, we may retain your email address for up to 6 years after that claim (even if you later delete your account). This is under our legitimate interest in preventing repeat abuse of limited promotional offers. You may still request erasure of other account data; we will explain if a limited fraud-prevention record must remain until that retention period ends.

Contact — data protection

Privacy / data protection: admin@homebuyerreport.co.uk
Website: homebuyerreport.co.uk