Privacy Policy
Last updated: 10 October 2026
1. Introduction
HouseCheckup ("we", "us", "our") is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and share your information when you use our website at housecheckup.co.uk and related services (the "Service").
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy, please contact us at info@housecheckup.co.uk.
2. Data We Collect
There are no user accounts, logins or passwords on the Service, so we hold no account data. We collect and process the following categories of personal data:
Order Information
When you order a report we record the property address you asked us to check, the email address you gave for delivery, the report option you chose, the Stripe checkout and payment references, and a delivery record for the report email (the time it was sent and our email provider's message identifier). If you enter an email address at checkout but do not complete payment, we keep that email address and the address you were checking as an unfinished-order record.
Payment Information
Payment is processed by Stripe. We never see or store your full card number. Stripe holds the payment details and shares with us the payment identifiers, the amount and date, and whatever billing details Stripe collected at checkout, which we retain for accounting and dispute purposes.
Usage Data
Our own pageview log records the page visited, the referring page, an opaque session identifier set by us, coarse location (country, region, city) supplied by our hosting provider, and coarse device details (device type, browser, operating system, language, screen width). It does not record your IP address, email address or any property address. Our hosting provider, Vercel, keeps its own server logs, which include IP addresses, for security and operations.
Communication Data
Any information you provide when you email us, reply to a report email, or submit a review or contact form, including the correspondence itself.
3. Lawful Basis for Processing
We process your personal data under the following lawful bases as defined by UK GDPR Article 6:
| Lawful Basis | Purpose |
|---|---|
| Contract | To take your order, process payment, compile the report for the address you gave, and email it to you. |
| Legitimate Interest | To keep the Service secure, prevent fraud, keep evidence that a report was delivered, answer your questions about a report, improve the Service, and send transactional emails (order confirmation, report delivery). |
| Consent | To set non-essential cookies and to publish a review you have submitted. You can withdraw consent at any time. |
| Legal Obligation | To retain financial records for as long as accounting and tax law requires. |
4. Third-Party Data Processors
We share personal data with the following processors, each of whom is contractually bound to process data only on our instructions and in compliance with UK GDPR:
- Stripe, Inc. -- Payment processing. Stripe acts as an independent data controller for payment card data. See Stripe's Privacy Policy.
- Vercel Inc. -- Hosting, server logs, Vercel Analytics, and the storage that holds our order ledger, unfinished-order records and pageview log.
- Resend, Inc. -- Sends our order-confirmation and report-delivery emails and keeps a log of each send (recipient, time, delivery status and message identifier) for a limited period.
- Zoho Corporation -- Hosts the info@housecheckup.co.uk mailbox in which your emails to us, and our replies, are held.
We do not sell your personal data to any third party. We do not share your data with third parties for their own marketing purposes.
5. Data Retention
We retain your data only for as long as necessary to fulfil the purposes for which it was collected:
- Order records (the address checked, the delivery email, payment references and the delivery record) -- Retained with our financial records for 7 years, as accounting law requires and as evidence that the report was delivered.
- Unfinished-order records -- Kept so that we can match a later payment or query to the address you were checking; deleted on request.
- Email correspondence -- Kept in our mailbox so that we can answer follow-up questions about your report; deleted on request.
- Server logs -- Held by our hosting provider under its own retention schedule; we do not keep separate copies.
- Pageview log -- Contains no direct identifiers and is kept for aggregate reporting.
6. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, commonly used, machine-readable format.
Right to Object
Object to processing based on legitimate interest or direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at info@housecheckup.co.uk. We will respond within one calendar month as required by law.
7. Cookies
We use cookies and similar technologies on our website. For full details on the cookies we use, their purpose, and how to manage them, please see our Cookie Policy.
8. International Data Transfers
We are established in Estonia, and some of our processors (Stripe, Vercel and Resend) are headquartered in the United States. Where personal data is transferred outside the UK, we rely on the UK adequacy regulations for the EEA and on the approved transfer mechanisms (including the UK International Data Transfer Agreement or Addendum) that each processor maintains for UK personal data.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS 1.2+), encryption at rest, access controls, regular security audits, and secure development practices. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
11. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. We encourage you to review this policy periodically.
Contact Us
For any privacy-related queries or to exercise your data rights:
Email: info@housecheckup.co.uk
Data controller: HouseCheckup is a trading name of BSI OÜ, a private limited company registered in the Estonian Commercial Register (e-Business Register) under registry code 14591080, with its registered office at Maakivi tn 8-2, Räni alevik, Kambja vald, Tartu maakond 61708, Estonia. BSI OÜ is the seller and the data controller for orders placed through this site. See also our Company information page.