Privacy

Who we are

GetMyPropertyReport (placeholder - set before public launch) runs getmypropertyreport.com. Contact: [email protected].

What you give us

The postcode, address or map point of the home you are researching, and optionally its asking price, your budget, the property type, bedrooms, your priorities, up to two workplace postcodes and an arrival time. We use these only to prepare your report.

What we keep

• Your account (if you create one): your name, email address, a one-way hash of your password (never the password itself), when and from which connection address you signed up and last signed in, and which reports are yours. We use these to run your account, to protect the service from misuse, and because HM Land Registry's licences for some of the data require us to keep records of who uses it. We keep them until you delete your account in Account settings, which also deletes every report in it. An account whose email address is never confirmed is deleted after 7 days. Account emails (confirmation and password reset) are sent through our email provider or this server's own mail system.
• Launch emails (if you ask on the pricing page to be told when Standard or Advanced launches): your email address, which you chose, and when you signed up, confirmed and unsubscribed; no name and no connection address. We use it only to send you one email when it goes on sale: it is not joined to an account or a report, not shared and not used for anything else. We first email a link to confirm the address; an address that is never confirmed is deleted after a week. Every email has an unsubscribe link: open it and press the button, and we will not email you about it again. We keep an unsubscribed address marked as unsubscribed, so it is never emailed unless you sign up and confirm again. These emails are sent the same way as account emails.
• Report update emails (if you ask on a saved report to be emailed when its data updates): your email address, or if you are signed in your account (whose confirmed address we then use), which report it is about, the data date it was prepared from, and when you signed up, confirmed, unsubscribed and were last emailed; no name and no connection address. We use it only to email you, at most once a month and only while the report is kept, when the official data behind the report has been updated, with the report's postcode and links to the report and to the latest evidence: it is not shared and not used for anything else. Without an account we first email a link to confirm the address; an address that is never confirmed is deleted after a week. Every email has an unsubscribe link: open it and press the button, and we will not email you about that report again (signed in, you can also stop them on the report). It is deleted with the report (when it is deleted, or after 12 months) or with your account. These emails are sent the same way as account emails.
• Your report is saved for 12 months at its own unguessable link, so you can reopen or share it. Anyone with the link can read it. You can delete a report from My reports, or, for a report prepared without an account, with its "Delete this report" button in the browser that prepared it; after 12 months it is deleted automatically.
• A record of the area: for each report we also keep a short record of the area's figures (the postcode and its neighbourhood, and area figures from the report such as how the area is changing, deprivation, local prices and the census mix), with the date, so we can check our reports and follow how places change. It holds no address, workplace, connection address or anything about you. When your report is deleted or expires, its link is removed from this record within minutes; the record of the area stays.
• Postcode pages: each postcode a report has been prepared for gets a public page (for example getmypropertyreport.com/postcode/se13-7ay) showing area-level figures from its record of the area, such as typical prices and how the area is changing. It never shows an address, a report or anything about who prepared it, and like the record of the area it stays when the report is deleted or expires.
• Workplace postcodes are never saved. When your home or workplace is in London they are sent to the Transport for London journey planner to estimate your commute (and elsewhere only if our own planner finds no journey). Our own journey planner, used outside London, places the workplace at its postcode's centre from our own postcode list, so nothing about it leaves our server. Only the journey times, modes, changes and waits are kept, under a one-way hash, for 12 hours.
• Questions you ask about a home are sent with that report's evidence to Anthropic, whose Claude model writes the answer. We keep the answer for 30 days under a one-way hash of the report and question, so the same question is not asked twice; please do not type personal details into a question.
• Abuse protection: to stop automated misuse we count reports and sign-ups per connection. These short-lived rate-limit counters use a salted one-way hash of your connection address and are deleted within a day; the separate report-analysis record above lasts with its report.
• Private report analysis: when a report is saved, we keep its report reference, postcode, request time and requesting IP address, plus the approximate country and city supplied by Cloudflare when available. We use this to analyse report requests. This record is kept separately, is never included in the shared report, and is deleted with the report or when it expires after 12 months. Access is limited to the site operator; backups expire on their normal rotation.
• Visit counts: we count how many times each page and feature is used per day (for example, "40 reports prepared on 25 September"). Only the daily totals are kept: no cookie, connection address, postcode or report link is recorded with them.
• Server logs record requests (including connection addresses) for security and troubleshooting and are kept only briefly.

Security check

Cloudflare Turnstile checks for automated misuse before a report is generated, and before an account, a launch email sign-up or a report update email sign-up is taken. The widget communicates with Cloudflare, which processes browser and connection information for this check. We send its one-use token for server validation, not your property, budget or workplace details, and do not retain the token in reports. See Cloudflare’s privacy policy.

Visit counts

When it is switched on, Cloudflare Web Analytics counts page views and page speed with a small script that sets no cookie and keeps no identifier for you: Cloudflare records the page, the browser type and the country, in aggregate. It runs only on the public pages (the home page, the guides, the sample and the postcode pages), never on a report, an account page, an email link or a page whose address carries anything you typed, and this site sends no referrer. We see counts, never a person. See Cloudflare’s privacy policy.

Cookies

Two essential cookies. One keeps your session: it protects forms from forgery and remembers reports this browser prepared. If you sign in, the other keeps you signed in for 30 days: it holds a random code, and we keep only a one-way hash of it. There are no analytics, advertising or tracking cookies.

Who else sees what

To answer your questions we look up the location of the home (not you) with official services: Postcodes.io, Environment Agency, Defra, Police.uk, planning.data.gov.uk, the Planning London Datahub, the Mining Remediation Authority, Natural Resources Wales, the Welsh Government, SEPA, the Scottish Government, Scottish Water, The Rivers Trust and Ofcom. Your workplace postcodes go only to Transport for London. If you use "Ask about this home", your question and the report's evidence go to Anthropic to write the answer. Photos of the area are loaded by your browser from Wikimedia Commons (and, when switched on, Geograph and Mapillary), which see your connection address as any website would; we ask them only about the home's location. Your browser loads the map background from Ordnance Survey (api.os.uk) or, where that is not set up, OpenFreeMap, and map software from unpkg.com, which see your connection address as any website would. We do not sell or share your details for marketing.

Your rights

You can change your name and password, and delete your account and its reports, in Account settings. You can delete a report you prepared from My reports or with its delete button. For any other request about your data (access, correction, deletion) contact us at the address above; you can also complain to the Information Commissioner's Office (ico.org.uk).