Privacy Policy

Who we are

DirectHearth Ltd ("DirectHearth", "we", "us", "our") is a company registered in England and Wales under company number 17322232. We provide an AI-powered property transaction platform that connects estate agents, solicitors, mortgage brokers, surveyors, landlords, tenants, buyers and sellers.

We are the data controller for personal data processed through our platform. We are registered with the Information Commissioner's Office (ICO) under registration reference ZC205701. If you have any questions about this policy, contact us at privacy@directhearth.com.

What data we collect

We collect data you provide directly — for example your name, email address, phone number, role, and any information you add to your profile, listings, transactions or documents.

We also collect data automatically, including device information, browser type, IP address, pages visited and usage patterns, so we can keep the platform secure and improve it.

We do not ask for or collect sensitive personal data unless it is genuinely needed for a service you have asked us to provide, such as identity verification required by law.

Lawful bases for processing

We process personal data on the following lawful bases under the UK GDPR:

• Contract — to provide the platform and services you have signed up for. • Legitimate interests — to keep the platform secure, prevent fraud, and improve our products. • Legal obligation — where we must comply with laws such as anti-money-laundering rules. • Consent — where we rely on your consent (for example, optional analytics cookies), you can withdraw it at any time.

Cookies

We use essential cookies to make the platform work, and — with your consent — analytics cookies to understand how it is used. You can manage your choices at any time via the cookie banner or the Cookie Policy page.

Sharing your data

We only share personal data with the people and services needed to operate the platform: other users who are part of your transaction chain, our service providers (below), and regulators or law enforcement where required by law.

We never sell your personal data to third parties.

Service providers (processors)

We use the following service providers to operate the platform. Each processes personal data only on our instructions, under a data processing agreement, and only as far as needed to provide their service to us:

• Stripe — payment processing and monthly subscription billing (including our 1-month free trial). Card details are entered and stored by Stripe; we never see or store full card numbers. See stripe.com/privacy. • Resend — sending our transactional emails (verification links, password-reset emails). See resend.com/privacy. • Render — hosting our application, website and database, with data encrypted in transit and at rest. See render.com/privacy.

Retention

We keep personal data only for as long as needed for the purpose it was collected, to meet legal obligations, or to resolve disputes. When data is no longer needed, it is securely deleted or anonymised.

Your rights

You have the right to access the personal data we hold about you, to ask us to correct inaccurate data, to request erasure, to restrict or object to processing, and to receive your data in a portable format.

To exercise any of these rights, email privacy@directhearth.com. We will respond within one month as required by law.

If you are not satisfied with our response, you can raise a concern with the Information Commissioner's Office (ICO) at ico.org.uk.