Privacy & cookies

Local development draft. Replace before going to production.

What we collect

• Account data — your name, email, password (hashed) and optional phone number.
• Listing data you create, including images and documents you upload.
• A session cookie (hs_session) used to keep you signed in.
• Payment metadata. Card numbers are not stored on our servers.

Lawful basis (UK GDPR)

• Performance of a contract — to provide the service you signed up for.
• Legitimate interests — security, fraud prevention, and improving the service.
• Legal obligation — record-keeping required by tax and consumer protection law.

Sharing

We don't sell your data. We use third-party processors for payment, geocoding (postcodes.io / OpenStreetMap Nominatim) and mapping tiles (OpenStreetMap). Each is called only as needed for the feature you use.

Your rights

Under the UK GDPR you have rights to access, correct, delete and port your personal data, and to object to certain processing. Contact us via the address provided in our terms to exercise these.

Cookies

We use a single strictly-necessary cookie (hs_session) to keep you signed in. We do not use advertising or analytics cookies.