Privacy Policy

1. Introduction

1.1 About This Policy

Tayside Property Purchasers is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

1.2 Who We Are

Data Controller:

Tayside Property Purchasers trading as J&M PROPERTY SOURING LTD

Company Registration Number: SC730186

Registered Address: 272 Bath Street, Glasgow, Scotland, G2 4JR

Data Protection Officer:

Marcel Motyka

Email: motykarmarcel41@gmail.com

Phone: 07301 755 937

1.3 Contact Us

For any data protection queries or to exercise your rights, please contact: Email: contact@taysidepropertypurchasers.com | Phone: 01382 699 559

1.4 Scope

This policy applies to personal data we collect through our website and services. By submitting your information through our website, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

When you submit an inquiry through our website, we collect the following personal information:

• Full Name
• Email Address
• Phone Number
• Property Address

2.2 Website Usage Data

We automatically collect certain information when you visit our website, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referral source (how you found our website)
• Device information

This data is collected through cookies and similar tracking technologies. For more information, see Section 8 (Cookies).

3. How We Use Your Information

3.1 Primary Purpose

We collect and use your personal information for the following purposes:

To respond to your property sale inquiry, including:

• Contacting you by phone or email to discuss your property
• Arranging property valuations
• Providing property purchase offers
• Following up on your inquiry (even if you don't respond initially)
• Maintaining records of our communications

Legal Basis: Legitimate interests (responding to your inquiry and providing the services you've requested) and taking steps at your request to potentially enter into a contract.

3.2 Website Improvement and Analytics

We use website usage data to:

• Analyse how visitors use our website
• Improve website functionality and user experience
• Monitor website performance and security

Legal Basis: Legitimate interests (improving our website and services).

3.3 Marketing Communications (Optional)

If you have provided separate consent, we may contact you with:

• General property market updates
• Company news and updates
• Service announcements

You can withdraw consent for marketing communications at any time (see Section 7).

Legal Basis: Consent (where provided).

3.4 Legal Obligations

We may process your personal data where necessary to comply with legal obligations, such as responding to court orders or regulatory requests.

Legal Basis: Legal obligation.

4. How We Share Your Information

4.1 Service Providers

Your inquiry information is processed by Optimise Outreach Limited, our website hosting and technical service provider. They process data on our behalf solely to provide website hosting and lead management services.

4.2 Advertising Platforms

We may share limited, anonymised data with advertising platforms (Google Ads and Meta/Facebook) to:

• Measure advertising effectiveness
• Create similar audiences for marketing purposes
• Improve our advertising targeting

This data does not include your name or contact details in an identifiable form.

4.3 Legal Requirements

We may disclose your personal information where required by law, such as:

• To comply with legal obligations
• To protect our legal rights
• To prevent fraud or security threats
• In connection with legal proceedings

4.4 Business Transfers

If our business is sold or merged with another company, your personal data may be transferred to the new owners as part of that transaction.

5. Data Storage and Security

5.1 Where We Store Your Data

Your personal data is stored securely in a Neon PostgreSQL database located in London, United Kingdom. This ensures your data remains within the UK at all times.

5.2 Security Measures

We implement appropriate technical and organisational security measures to protect your personal data, including:

Encryption:

• All data transmitted to and from our website is encrypted using TLS 1.2+ encryption
• Data stored in our database is encrypted at rest using AES-256 encryption

Access Controls:

• Row-Level Security (RLS) policies ensure data isolation and access control at the database level
• Role-based access control (RBAC) restricts system access to authorised personnel only
• All access is logged and monitored

Infrastructure Security:

• Hosted on secure AWS infrastructure in London
• Continuous security monitoring and vulnerability scanning
• Regular security updates and patches
• Automated daily encrypted backups stored across multiple availability zones

Key Management:

• Encryption keys managed via AWS Key Management Service (KMS)
• Regular key rotation policies
• Audit logging of all key access

5.3 Data Retention

We retain your personal data only for as long as necessary:

• Active inquiries: Data is retained while we are actively pursuing your property sale inquiry (typically up to 12 months)
• Completed transactions: If you sell your property to us, we retain your data for 6 years in accordance with UK business record-keeping requirements
• Inactive inquiries: If you do not respond to our communications or decline our services, we will delete your data after 12 months unless you have consented to ongoing marketing communications

After these periods, your personal data will be securely deleted unless we are legally required to retain it longer.

6. International Data Transfers

6.1 No International Data Transfers

We do not transfer any personal data outside the United Kingdom. All personal data collected through our website is stored and processed exclusively within the UK. Our service providers, including our hosting provider, also process all data within the United Kingdom.

7. Data Breach Notification

7.1 Our Commitment

We take data security seriously and have implemented appropriate technical and organisational measures to protect your personal data. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify you without undue delay (typically within 72 hours of becoming aware of the breach)
• Provide details about the nature of the breach and the categories of data affected
• Explain the likely consequences of the breach
• Describe the measures we have taken or will take to address the breach
• Provide recommendations on steps you can take to protect yourself

8. Your Rights

Under UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request a copy of the personal data we hold about you. The first copy will be provided free of charge.

8.2 Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

8.3 Right to Erasure ("Right to be Forgotten")

You can request that we delete your personal data in certain circumstances, such as:

• The data is no longer necessary for the purpose we collected it
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

However, we may refuse erasure if we need to retain the data for legal obligations or to establish, exercise, or defend legal claims.

8.4 Right to Restrict Processing

You can request that we restrict how we use your personal data in certain circumstances, such as:

• While we verify the accuracy of data you've contested
• When processing is unlawful but you don't want the data erased
• When we no longer need the data but you need it for legal claims

8.5 Right to Object

You have the right to object to processing based on legitimate interests. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

You also have an absolute right to object to direct marketing at any time.

8.6 Right to Data Portability

Where processing is based on consent or contract performance and carried out by automated means, you can request to receive your personal data in a structured, commonly used, and machine-readable format.

8.7 Right to Withdraw Consent

Where we process your data based on consent (such as for marketing communications), you can withdraw that consent at any time. This will not affect the lawfulness of processing before withdrawal.

8.8 How to Exercise Your Rights

You can exercise your data subject rights by contacting us directly:

By Email: contact@taysidepropertypurchasers.com

By Phone: 01382 699 559

When making a request, please include:

• Your full name and contact information
• Details of the information you are requesting
• Any relevant dates or time periods
• Proof of identity (if required to verify your request)

We will respond to your request within one month. If your request is complex, we may extend this by up to two months and will inform you of the extension.

8.9 Right to Complain

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO)

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Phone: 0303 123 1113

Website: www.ico.org.uk

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and analyse how our website is used.

9.2 Types of Cookies We Use

Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility. You cannot opt out of these cookies.

Analytics Cookies

We use Google Analytics to understand how visitors interact with our website. These cookies collect anonymous information about pages visited, time spent on the site, and traffic sources.

Advertising Cookies

We use advertising cookies from Google Ads and Meta/Facebook Pixel to:

• Track conversions from our advertising campaigns
• Create remarketing audiences
• Measure advertising effectiveness

9.3 Cookie Consent

When you first visit our website, you will see a cookie consent banner. You can choose to accept or reject non-essential cookies. Essential cookies will be set automatically as they are necessary for the website to function.

9.4 Managing Cookies

You can manage your cookie preferences at any time by:

• Using the cookie preference tool on our website
• Changing your browser settings to block or delete cookies
• Opting out of Google Analytics: Google Analytics Opt-out
• Opting out of Google Ads: Google Ads Settings
• Opting out of Facebook Ads: Facebook Ad Preferences

Note: Blocking all cookies may affect website functionality and your user experience.

9.5 Third-Party Cookies

Our website uses cookies from third-party services:

• Google Analytics - Analytics and reporting (Privacy Policy: https://policies.google.com/privacy)
• Google Ads - Advertising tracking (Privacy Policy: https://policies.google.com/privacy)
• Meta/Facebook Pixel - Advertising tracking (Privacy Policy: https://www.facebook.com/privacy/policy)

These third parties may collect and process data in accordance with their own privacy policies.

10. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. When you leave our website, we encourage you to read the privacy policy of every website you visit.

11. Changes to This Policy

11.1 Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

11.2 Notification

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you by email if you have provided your email address
• Display a prominent notice on our website

11.3 Review

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

13. Legal Information

13.1 Data Controller

Tayside Property Purchasers is the data controller responsible for your personal data.

13.2 Lawful Basis Summary

13.3 Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

13.4 Do Not Sell My Personal Information

We do not sell your personal information to third parties.

14. Document Information

Policy Version: 1.0

Created: October 14, 2025

Last Reviewed: October 17, 2025

Next Review: October 17, 2026

This document was created to comply with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR) 2003

15. Acknowledgements

This privacy policy framework was developed with reference to guidance from:

• Information Commissioner's Office (ICO)
• UK Government data protection guidance
• Legal templates and best practices for UK businesses