Privacy policy

We collect personal data directly from you, in these places:

• Creating an account: name, email address, phone number, and a postal address (used to correspond with you and, if you go ahead with a deal, to identify you as the buyer). Your password is stored as a salted hash - we never store it, or see it, in plain text.
• Marketing consent: whether you've opted in to marketing emails, and the date you gave that consent. This defaults to off - it's never assumed.
• Enquiring about a deal: if you enquire without an account, we collect whatever you enter directly on that form (name, email, phone, address, your message).
• Saved deals and saved searches: which deals you've saved, and any search filters you've asked us to email you about when a matching deal goes live.
• Site activity: which deals you've viewed and saved, tied to your account if you're logged in, or recorded anonymously if you're not. We use this to work out genuine interest signals (for example, showing that several investors have recently saved a deal) - never to build an advertising profile, and never shared with anyone outside Prosper Housing.

We do not buy personal data about you from anyone else, and nothing on this list is collected without you actively giving it to us.

• To run your account and respond to enquiries - necessary to perform our contract with you, or to take steps you've asked for before entering one.
• To email you about a saved search, or follow up an enquiry - necessary to provide the specific service you asked for.
• To send marketing about new deals - only with your consent, and only until you withdraw it (every marketing email includes an unsubscribe link, and you can also ask us directly at any time).
• To keep the site secure and working as intended - our legitimate interest in running a functioning, abuse-resistant service, balanced against your rights.

Every page view on the public site is logged - page visited, referring site (just the domain, e.g. "google.com", never the full URL), and whether you're on mobile or desktop - so we can see which pages get used and roughly how much traffic the site gets. This never uses a cookie and never stores your IP address: instead it stores a one-way hash of your IP, browser and the date, which changes automatically every midnight and can't be reversed back into your IP. Because it changes daily, it can't identify you or link your visits together across days - if you visit twice in one day it's recognised as the same visitor for that day only.

Accepting the cookie banner (see "Cookies" below) adds a second, more capable layer on top of this using an actual cookie, which is why that part needs your consent and this part doesn't.

Every page view on the public site is logged anonymously regardless of any choice you make below - see "Anonymous traffic statistics" underneath. Nothing in that logging identifies you, and it doesn't use a cookie at all.

We separately set these cookies, all HttpOnly so no script on the page can read them:

• Strictly necessary, always set:
  • A session cookie, which keeps you logged in. Expires automatically after 7 days.
  • A one-off view cookie, set the first time you open a specific deal page, so a page refresh or a second visit within 30 minutes isn't counted as a new view in our interest statistics. It expires automatically after 30 minutes and identifies nothing beyond "this browser looked at this deal recently".
  • A cookie-consent cookie, recording your answer to the banner below so we don't ask again. Lasts a year.
• Only set if you accept the cookie banner:
  • A visitor id - a random value, not derived from your IP address or anything else about you, that lets us recognise your browser on a return visit and see which pages you looked at in what order during one visit. Lasts a year, or until you clear your cookies. Declining the banner means this is never set, and none of your visits can be linked together.

We don't run any advertising cookies or third-party tracking pixels on this site. Nothing about your visit is shared with an ad network, and we don't build advertising profiles.

We don't sell your personal data, to anyone, ever. It's shared only in these limited ways:

• Our hosting and email providers, strictly to run the service - hosting the site and database, and delivering account and enquiry emails on our behalf. They process data under our instructions and aren't permitted to use it for their own purposes.
• A housing provider, only if you go ahead with a deal - if you reserve a fully managed deal, the details needed to complete that specific transaction and arrange the lease are shared with the relevant housing provider. Nothing is shared before that point, and self-managed deals involve no such sharing at all since we're not party to the lease.
• Where the law requires it - for example, a valid request from a regulator or law enforcement.

Separately from your personal data, every deal on this site is enriched with independent, publicly available or licensed property data - Land Registry sale prices, EPC certificates, and comparable-sales and area data from our data partner Area360 (used under licence) - alongside the listing information itself. None of this describes you; it describes the property.

This data is what the free part of the platform is built on: creating an account gets you the full picture on every deal - address, financials, and this independent comparables data - at no cost, whether you choose a fully managed deal or run one yourself. Our sourcing fee, where it applies, is for the negotiation and project-management work we do on a fully managed deal - it is not a charge for access to this underlying property data, which is free to any signed-up account either way.

If you believe information about a specific property on this site is inaccurate, contact us using the details below and we'll investigate and correct it.

• Your account is kept for as long as it's active, or until you ask us to delete it.
• An anonymous enquiry (no account) is kept only for as long as we need to follow it up, and deleted once it's closed out.
• If you ask us to delete your account, we permanently erase it - along with your saved deals, enquiries and notes - rather than keeping a hidden copy. This can't be undone.

Under UK data protection law, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that's inaccurate or incomplete.
• Delete your account and the personal data tied to it, permanently.
• Stop sending you marketing, at any time and for any reason.
• Restrict or object to other processing, in some circumstances.

Contact us using the details below to exercise any of these. If you're not satisfied with our response, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Passwords are stored as salted hashes, never in plain text. Your session is authenticated with a signed, HttpOnly cookie that no script on the page can read. Access to personal data in our admin tools is restricted to authorised staff accounts.

If we make a material change to how we handle your personal data, we'll update this page and change the date at the top. Continuing to use the site after a change means you accept the updated policy.

For any question about this policy, or to exercise any of the rights above, email privacy@prosperhousing.co.uk.