Privacy notice

Who we are

Home Due Diligence is a trading name of Nicholas Wilkinson, a sole trader in the United Kingdom. Postal address: 7 Morley Lane, Derby, DE21 5AH. Email: hello@homeduediligence.co.uk.

Nicholas Wilkinson is the controller of the personal data described here. Questions, or requests to use your rights, go to hello@homeduediligence.co.uk.

What we collect

• Searches. The postcodes and addresses you look up, so we can show the area check and report. You don't need an account to search.
• Your workspace. Saved properties, reports, comparisons and watches. Without an account these are linked to a random identifier in a cookie on your device, not to you.
• Your account. If you sign in: your email address, sign-in records and notification preferences.
• Purchases. What you bought, when, the amount, and a one-way hash of the email you gave at checkout so we can find a purchase if you contact us. Stripe takes the payment: we never see or store your card details.
• Emails we send. Sign-in links, and Property Watch alerts if you opt in to them, with delivery records (sent, bounced, unsubscribed).
• Security records. Your IP address, briefly, to limit repeated requests and prevent abuse.

We don't use advertising trackers, and we don't sell your data. Google Analytics only runs if you accept analytics cookies. The cookies we use are listed on the cookies page.

Why we use it, and our lawful basis

• To provide the searches, reports, account and alerts you ask for (contract).
• To take payment, handle refunds and keep tax records (contract and legal obligation).
• To keep the service secure and working (legitimate interests).
• Property Watch emails are only sent if you opt in, and you can stop them at any time (consent).
• Google Analytics only runs if you accept analytics cookies, and you can withdraw at any time on the cookies page (consent).

Who processes it for us

• Cloudflare: hosting and network security.
• Supabase: database and sign-in (stored in London).
• Stripe: payments. Stripe is also a controller for the payment data it holds.
• Resend: sending Property Watch emails.
• Google: Google Analytics, only if you accept analytics cookies. It receives the pages you visit and your device and browser details, and may process them in the US under the UK–US data bridge.
• Ideal Postcodes: after a purchase, the address of the property is sent to find its exact location. Nothing about you is sent.

To look up official records we send property locations (postcodes or map coordinates) to the public data services listed on our data sources page. These don't identify you. Some providers may process data outside the UK; where they do, the transfer is covered by the UK–US data bridge or the UK International Data Transfer Addendum.

How long we keep it

• Account and workspace: until you delete them. Deleting your account completes after 7 days, so you can change your mind.
• Workspaces you never sign in to claim: up to 90 days after your last visit.
• Purchase records: 6 years, as tax law requires.
• Data exports you request: 24 hours.
• Security and account audit records: up to 2 years.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and take it elsewhere. Signed-in users can download or delete their data from their account. Every alert email has an unsubscribe link. For anything else email hello@homeduediligence.co.uk; we reply within one month.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.