Privacy Policy

1. Who we are

This Privacy Policy explains how [Propular Ltd, company number [COMPANY NUMBER], registered address [REGISTERED ADDRESS], England & Wales] ("Propular", "we", "us") collects and uses personal data when you use our website and services (the "Service"). Propular is the data controller in respect of personal data collected via the Service. This policy is written in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Personal data we collect

• Account data: name, email address, hashed password (or OAuth identifier).
• Usage data: the searches you run, areas you view or save, plan and billing status.
• Technical data: IP address, browser type, device type, referrer, and cookies (see Cookie Policy).
• Communications: any messages you send us via support or forms.

We do not intentionally collect special category data. Please do not send such data to us.

3. How we use your data and lawful bases

• To provide the Service (contract): create your account, run searches, deliver results.
• To improve the Service (legitimate interests): understand how features are used, fix bugs, prevent abuse.
• To communicate with you (contract / legitimate interests / consent for marketing): send transactional emails and, where you've opted in, product updates.
• To comply with legal obligations (legal obligation): tax, accounting and responding to lawful requests.

4. Sharing your data

We share personal data only with trusted processors acting on our behalf, including: [HOSTING PROVIDER], [AUTH / DATABASE PROVIDER], [EMAIL PROVIDER], [ANALYTICS PROVIDER], and [PAYMENT PROVIDER]. Each is bound by contract to appropriate security and confidentiality obligations. We may also disclose data if required by law or to protect our rights.

5. International transfers

Some of our processors may store or process data outside the UK. Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or equivalent safeguards.

6. How long we keep data

Account data is kept for as long as your account is active and for up to [24] months afterwards, unless a longer retention period is required by law (for example, tax records for 6 years). You can request deletion at any time.

7. Your rights

Under UK GDPR you have the right to: access your data, correct inaccurate data, erase your data, restrict or object to processing, and data portability. You may also withdraw consent for marketing at any time. To exercise these rights, contact [PRIVACY EMAIL].

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We use industry-standard measures to protect your data, including encryption in transit, hashed passwords and access controls. No system is completely secure, and we cannot guarantee absolute security.

9. Cookies

See our Cookie Policy for details of the cookies we use and how to control them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified via the Service.

11. Contact

Privacy questions and requests: [PRIVACY EMAIL].