Legal
Privacy Policy
Property Cast Limited · Last updated: July 2026
1. Who We Are
Property Cast Limited: registered in England & Wales, Company Number 16948626, 9 Heathlands Court, Wokingham, Berkshire, RG40 3AY. ICO Registration Number: ZC165602. Contact: liv@iaincwhite.com
For most of what this policy describes, PropCast is the data controller. Where you upload or connect data for us to process through the platform, we act as your data processor under the Data Processing Agreement — section 9 explains the split.
2. What We Collect
- About you and your team: names, business email addresses and phone numbers; company details; login credentials (passwords are hashed); support correspondence.
- Billing: card or invoice payment details, handled by our payment providers — we do not store full card details ourselves.
- Your content: property listings, descriptions, images and videos from your website or data source; agent profiles; branding; Google Business Profile reviews and ratings.
- Technical data: IP address, device and browser information, usage logs, and the performance of your published posts (with permissions you grant on each channel).
3. How and Why We Use It
We use data to run your account and deliver the service; to collect, transform and publish your marketing content; to track how posts perform; to support you; to bill you; to keep the platform secure and improve it; and to meet our legal obligations. Our lawful bases:
| What we process | Lawful basis | Why |
|---|---|---|
| Account and login information | Contract | Needed to provide the service under our Terms |
| Content from your website and Google Business Profile | Contract | Needed to deliver the automated marketing you’ve engaged us for |
| Payment information | Contract | Needed to collect subscription fees |
| Usage analytics and system logs | Legitimate interests | Improving the platform, keeping it secure, troubleshooting |
| Marketing communications | Legitimate interests / consent | We’ll only market to existing customers about similar services; you can opt out at any time |
| Financial and accounting records | Legal obligation | UK tax, accounting and audit law |
| Data you put through the platform | Your instructions (as processor) | Processed on your behalf under the Data Processing Agreement |
We don’t use your data for automated decision-making with legal or similarly significant effects.
4. Who We Share It With
- CCT Technology Limited: provides the platform technology and social media publishing services, using established providers for cloud hosting, authentication, social media publishing, image generation and email delivery, all under written data protection terms.
- Payment providers: GoCardless Limited (card payments) and Revolut Business (invoicing and payments) who handle payments securely; full card details never reach us.
- The social media platforms you connect (e.g. Facebook, Instagram) — publishing your content to them is the service. Once published, that content is held by those platforms under their own terms and privacy policies.
- Authorities where disclosure is required by law, court order or a regulator, or to protect our legal rights.
We don’t sell personal data, and we won’t contact your clients without your explicit consent.
5. Where It’s Processed
Data is processed in the UK or the European Economic Area (permitted under the UK adequacy regulations). If any provider processes data further afield, we put a legally approved transfer mechanism in place (the UK IDTA or the UK Addendum to the EU Standard Contractual Clauses).
6. How Long We Keep It
| Data | Kept for |
|---|---|
| Your content and account data | Deleted within 90 days of your contract ending (or returned to you — your choice, per the DPA) |
| Financial and accounting records | 6 years after contract end (UK tax and accounting law) |
| System logs and technical data | 12–24 months, for security monitoring and troubleshooting |
| Marketing preferences | Until you opt out, plus 3 years to evidence compliance |
Content already published to social media platforms stays on those platforms under their policies — we can’t delete it from there after publication, though you can from your own accounts.
7. Your Rights
Under UK GDPR you can ask us for access to your data, correction, deletion, restriction, a portable copy, or object to processing based on legitimate interests, and you can withdraw consent (e.g. to marketing) at any time. Email liv@iaincwhite.com — we’ll respond within one month, free of charge (we may ask for proof of identity).
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office — though we’d appreciate the chance to sort it out first.
8. Cookies
The platform uses strictly necessary cookies for login sessions and security — these don’t require consent. Our website doesn’t currently set any analytics or marketing cookies. If we introduce any in future, we’ll ask for your consent via a cookie banner before setting them, and update this policy.
9. When You Put Data Through the Platform
For personal data you upload or connect — your agents’ details, property content, social connections — you are the controller and we are your processor, under the Data Processing Agreement (Schedule 1 to our Terms). In short: you’re responsible for having the right to share that data (including permission for photos of identifiable people, and not uploading special category data), and we’re responsible for handling it only on your instructions and keeping it secure. The DPA has the detail.
10. Security
We protect personal data with encryption in transit, hashed passwords, role-based access controls, security monitoring and audit logs, secure cloud hosting, and secure development practices. The platform’s technical measures are set out in the Data Processing Agreement. No system is completely secure, but if a breach affects your personal data we will notify you without undue delay.
11. Changes and Third-Party Links
We may update this policy from time to time — the “Last updated” date at the top will change, and we’ll notify you of material changes by email or through the platform. Links to third-party sites (including the social platforms) are governed by those sites’ own privacy practices.
Property Cast Limited · Company Number 16948626