Your data, kept private by design.

1. Who we are

Homeflit (homeflit.com) is the controller of the personal data described in this notice. You can contact us about anything in it at hello@homeflit.com. Homeflit is in public beta, and this notice will be reviewed by our legal adviser during the beta.

2. What we collect

• Your account: name, email address, a securely hashed password, whether you have confirmed your email, your code name and your settings (such as email preferences).
• Homes you claim: the address and postcode you enter, property details, the price you would consider, your level of interest, and photos you upload.
• Proof of ownership: documents you upload so we can check a claim. These are stored privately and are never shown to other users.
• Buyer activity: homes you save, your search areas (a circle or a shape you draw) with budget and preferences, offers you make and messages you send.
• Viewings: times suggested and agreed in a conversation, and the address if an owner chooses to share it with you.
• Reports: reports you make about a listing or photo.
• Visits to the site: which pages are used, the postcode district searched, the type of device, the country, and how you arrived (for example a search engine). We count visits without cookies, using a code that changes every day and cannot be used to identify you.
• Security records: sign in sessions and limited technical logs used to keep the service secure and prevent misuse.

3. Why we use it

• To provide Homeflit (performing our agreement with you): running your account, showing homes on the map, checking claims, delivering offers and messages, sending the emails you rely on, and helping owners and buyers arrange viewings.
• To keep Homeflit safe and fair (our legitimate interests): checking ownership, preventing fraud and misuse, handling reports, and securing accounts.
• To improve Homeflit (our legitimate interests): understanding, in aggregate, which areas people search and how the site is used. This never identifies individuals.
• To meet legal obligations where the law requires us to keep or disclose information.

Alert emails about offers, messages and matching homes can be switched off at any time in your account settings or with the unsubscribe link in each email. Emails that confirm your address or reset your password are always sent because the service needs them.

4. What other users see

• Your code name, never your real name or email.
• For a claimed home: its postcode area, the property details and photos you choose to add, and the price you set. The exact address stays private unless you, as the owner, share it with a particular buyer in a conversation.
• Buyers’ budgets and search areas are private. The buyer interest map only shows shading over squares about 5 km wide, never an individual search.

5. Who we share it with

We do not sell personal data. We share it only with the services that run Homeflit on our behalf, under contracts that require them to protect it:

• Cloudflare: hosting, database and private file storage.
• Resend: sending our emails.
• Hostinger: our email inbox, for messages you send to hello@homeflit.com.
• OpenFreeMap: supplies the map images; your device requests them directly, so they receive your IP address as any website would.
• A private server we rent, which supplies map positions for homes. It receives map areas, not your personal details.

We may also disclose information where the law requires it, or to protect people from harm or fraud. If you choose to follow a link to another service (for example street view), that service’s own privacy policy applies.

6. Where it is stored

Our providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Addendum.

7. How long we keep it

• Account, claim, message and search area data: for as long as your account exists, and then deleted unless we need to keep something for a legal reason or an open dispute.
• Proof of ownership documents: for as long as the claim exists. Ask us and we will delete them.
• Detailed visit records: 90 days, after which only daily totals are kept.
• Database backups: kept for 30 days, then deleted automatically.

8. Cookies and similar storage

We use one essential cookie to keep you signed in. Your browser also remembers small preferences on your device, such as tips you have closed. We do not use advertising or tracking cookies, so we do not ask for cookie consent.

9. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Email hello@homeflit.com and we will reply within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the chance to put things right first.

10. Keeping it safe

Data is encrypted in transit, passwords are hashed, proof documents and private files are only available to the account owner and our reviewers, and access to administration is limited to confirmed accounts we authorise.

11. Changes

If we change how we use personal data we will update this notice and the date above, and tell you in advance of any significant change.