Privacy policy

We may collect account details such as name, email address, password hash, role, company or brokerage details, and sign-in records.

We may also collect seller submission details, broker application information, listing ownership records, confidential enquiry content, internal marketplace messages, saved listings, saved searches, contact submissions, and support records.

Where enabled, we may process Google sign-in details, payment and subscription records, and limited analytics or cookie-preference data in line with the choices you make.

Personal data is used to create and secure accounts, review seller submissions, assess broker applications, publish and manage listings, route confidential buyer enquiries, support internal messaging, provide customer support, and administer subscription or billing activity where applicable.

We may also use data for fraud prevention, abuse handling, moderation, dispute management, service security, system monitoring, and compliance with legal obligations.

Depending on the activity, we generally rely on contract, legitimate interests, legal obligation, and consent where consent is required, such as for optional analytics or cookie categories.

This section should be reviewed whenever new data uses or integrations are introduced so the lawful basis remains aligned with live operations.

Personal data may be shared with service providers supporting hosting, database infrastructure, authentication, email delivery, payments, file storage, and similar operational functions, but only to the extent reasonably necessary for the service.

Confidential enquiries and internal messages are shared with the relevant listing owner or broker contact so marketplace communication can be handled appropriately.

We keep personal data for as long as reasonably necessary for account access, marketplace operations, support, record-keeping, fraud prevention, and legal or regulatory obligations.

Retention periods should be reviewed against live operational, contractual, and compliance needs before launch and whenever processes materially change.

Depending on the circumstances, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent for processing that depends on consent.

You can contact gdpr@buyabusinessltd.comabout privacy rights or data protection concerns. You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your personal data is handled.