Privacy Policy

Last updated: 14 May 2026

This Privacy Policy explains how Sourcera ("we", "us", "our") collects, uses, and protects your personal information when you visit sourcera.property or use our services. We are committed to handling your personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1. Who we are

Sourcera is operated by [REGISTERED COMPANY NAME], a company registered in England and Wales (company number [COMPANY NUMBER]), with its registered office at [REGISTERED OFFICE ADDRESS]. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].

For the purposes of UK data protection law, we are the data controller of the personal information you provide to us. You can contact us at privacy@sourcera.property.

2. What personal data we collect

We collect the following categories of personal data:

• Account information — name, email address, hashed password.
• Payment information — billing name, billing address, partial card details and transaction history. Full card numbers are processed and stored by Stripe; we never see or store full card numbers.
• Usage information — properties you add, analyses you run, viewings you log, offers you record, and other content you create in the platform.
• Technical information — IP address, browser type and version, device identifiers, operating system, referrer URL, and pages visited.
• Communication information — emails you send us and our responses.
• Marketing data — your Facebook click identifier (_fbc), browser identifier (_fbp), and related cookies used to measure advertising effectiveness (see Section 5).

3. How we use your personal data and the lawful basis

Under the UK GDPR, we must have a lawful basis for processing your personal data. Our bases are:

• Performance of a contract — to provide the course and app, process your payments, deliver the services you've purchased, and provide customer support.
• Legitimate interests — to monitor and improve our service, prevent fraud, secure our systems, and (where permitted) market our services to existing customers. You can object to processing for legitimate interests at any time.
• Consent — for non-essential cookies and for any marketing communications to people who are not existing customers. You can withdraw consent at any time.
• Legal obligation — to comply with tax, accounting, anti-fraud, and other legal duties.

4. Marketing communications

We may send you transactional emails (order confirmations, password resets, subscription notifications) — these are necessary for the contract between us and cannot be opted out of without closing your account.

If you've bought from us, we may also send you occasional updates about new features or related products on the basis of legitimate interests. You can opt out at any time via the unsubscribe link in any marketing email or by emailing privacy@sourcera.property.

5. Cookies and similar technologies

We use cookies for the following purposes:

• Strictly necessary — your authentication session (auth_token), CSRF protection, and basic site operation. These do not require consent.
• Analytics — we use Amplitude to understand how the product is used and improve it. This is set on the basis of legitimate interests; you can opt out by configuring your browser to block these.
• Advertising — we use the Meta (Facebook) Pixel and Conversions API, which set cookies including _fbp and _fbc. These are used to measure the effectiveness of our advertising and to deliver relevant ads to people like you. We rely on legitimate interests for this; you can opt out via your browser settings or by using ad blockers.

6. Who we share your data with

We share personal data with the following categories of processors. Each is bound by a data processing agreement and is approved for transferring UK personal data:

We do not sell your personal data. We do not share your personal data with any other third party except where required by law or to enforce our Terms of Service.

7. International transfers

Some of our processors are based outside the UK. Where personal data is transferred outside the UK, we rely on one of the following safeguards approved by the UK government or ICO:

• UK Adequacy Regulations (where the destination country is recognised as providing adequate protection).
• Standard Contractual Clauses with the UK International Data Transfer Addendum.
• The UK Extension to the EU-US Data Privacy Framework.

8. How long we keep your data

• Account data — for as long as your account is active, plus 6 years after closure for tax and accounting purposes.
• Payment records — 6 years from the date of the transaction (HMRC requirement).
• Marketing and analytics data — up to 26 months from your last interaction.
• Support emails — 2 years from last correspondence.

9. Your rights

Under UK GDPR you have the following rights, free of charge:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — ask us to delete your data (subject to legal retention obligations).
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a structured, commonly used format.
• Right to object — to processing based on legitimate interests, including for direct marketing.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email privacy@sourcera.property. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk), but we'd appreciate the chance to address your concerns first.

10. Security

We take appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest, hashed passwords (bcrypt), least- privilege access controls, and continuous monitoring. No system is 100% secure; if we ever become aware of a personal data breach affecting your rights and freedoms, we will notify you and the ICO as required by law.

11. Children's privacy

Our services are not directed at children under 18 and we do not knowingly collect personal data from them. If you believe we have collected data from a child, please contact us so we can delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. For material changes, we will notify you by email or via a prominent notice in the service.

13. Contact

Questions, requests, or complaints about how we handle your personal data: privacy@sourcera.property.