Legal
Privacy Policy
Last updated 20 October 2026
This policy explains what personal data Gavelock collects, why, and the rights you have under the UK GDPR and the Data Protection Act 2018.
1. Who we are
Gavelock ("we", "us") operates the property marketplace at gavelockproperty.com and is the data controller for personal data processed through it. Contact our data team at privacy@gavelockproperty.com.
ICO registration: application in progress. We will publish our registration number here once issued.
2. Data we collect
- Account details: name, email address, phone number and password (stored securely, never in plain text).
- Listing details: property address, photos, price, tenure, EPC, council tax and other material information.
- Marketplace activity: bids, offers, counter-offers, saved properties and deal status.
- Sale details: legal names and chosen conveyancer contact details for a Memorandum of Sale.
- Verification records: during early access, identity and proof-of-funds checks are simulated and no documents are collected.
- Technical data: basic logs (such as IP address and browser type) needed to keep the service secure.
- Waitlist and partner enquiries: name, email, company and your message.
3. Why we use it (lawful bases)
- Contract: to run your account, listings, bids, offers and sale paperwork.
- Legal obligation: to meet anti-money laundering, tax and record-keeping duties.
- Legitimate interests: to keep the platform secure, prevent fraud and improve our service.
- Consent: for marketing emails. You can withdraw consent at any time.
4. Who we share it with
- The other party to a sale and their conveyancer, once an offer or auction result is agreed.
- A conveyancer or partner you choose to be referred to (we will always tell you if we receive a referral fee).
- Trusted service providers who host and run our platform, under data processing agreements.
- Regulators, law enforcement or courts where the law requires it.
We never sell your personal data. Public bid history shows an anonymised label, not your identity.
5. International transfers
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Addendum.
6. How long we keep it
- Account data: while your account is active, then up to 12 months.
- Completed or agreed transaction records: 5 years after the transaction ends, as required by UK anti-money laundering rules.
- Waitlist data: until you unsubscribe or 24 months of inactivity.
7. Your rights
You can ask to access, correct, delete, restrict or move your data, and object to processing based on legitimate interests. Email privacy@gavelockproperty.com; we will respond within one month. Some data must be kept for legal reasons even if you ask us to delete it.
If you are unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Cookies
We only use strictly necessary storage to keep you signed in and secure. We do not use advertising or analytics cookies. If that changes, we will ask for your consent first.
9. Security
Data is encrypted in transit, access is restricted by account permissions, and sensitive information such as auction reserve prices is visible only to the seller.
10. Changes
We will update this page when our practices change and tell registered users about significant changes.