Privacy policy

This policy explains what personal information is processed when you use this site, why it is processed, who handles it, how long it is kept and the rights you have.

Last updated: 2 September 2026

Who we are

The Property Sourcer is the data controller for the processing described in this policy.

• Registered business name: Mike Massey Limited trading as The Property Sourcer
• Registered address: 4 St Thomas Street, Sunderland, United Kingdom, SR1 1NW
• Company number: 17414254
• Contact: info@thepropertysourcer.co.uk or 07835 537535

An important point about our database

We do not create customer accounts or store customers' names, email addresses, postal addresses or card details in our website database when they buy a report.

Personal information still has to be processed to take payment and deliver a purchase. It is handled by the service providers described below. We may also access transaction information held in our Stripe account, delivery information held by our email provider, or correspondence sent to us when needed to fulfil an order, answer a query, issue a refund, prevent fraud or meet a legal obligation.

Deal-alert subscriptions are different from purchase records. If you choose to join the alerts list, your email address must be stored so that the alerts can be sent. Buying a report does not automatically subscribe you to alerts.

What is processed, and why

If you buy a report

Stripe collects the information needed to process your payment, which may include your name, email address, billing information, card details, payment amount and technical information used for fraud prevention. Stripe gives us payment confirmation and transaction reference information.

After payment, the email address associated with the checkout is used to send the report you purchased. Postmark processes that email address and the contents of the delivery email for this purpose.

Your card details are entered on Stripe's checkout service. We do not see or store your full card number. We also do not write your name, email address, postal address or card details into our website database.

Legal basis: performing our contract with you, complying with legal obligations and, where relevant, our legitimate interests in preventing fraud, handling enquiries and protecting the service.

If you join the deal-alert list

We store your email address, a confirmation token, and the dates you signed up and confirmed. We use this information only to send alerts when a new report is published and to manage your subscription.

We use double opt-in: you are sent a confirmation link and are subscribed only when you click it. Every alert email includes an unsubscribe link. When you unsubscribe, your alert-subscription record is deleted.

Legal basis: your consent, which you can withdraw at any time.

If you contact us

If you email, telephone or otherwise contact us, we and the providers used for that communication may hold your contact details and correspondence so that we can respond, deal with your query and refer back to it if necessary.

Legal basis: taking steps at your request, performing our contract with you where the enquiry concerns a purchase, or our legitimate interest in responding to enquiries and keeping an appropriate record of them.

Automatically, when you visit

Our website host may keep standard access and security logs. These can include your IP address, pages requested, date and time, browser information and error or security information. These logs are used to operate and secure the site, investigate faults and prevent misuse. They are not customer records in our website database.

Legal basis: our legitimate interests in operating, maintaining and protecting the website.

Cookies

We use one cookie: a session cookie that remembers what is in your basket and protects our forms against cross-site request forgery. It is deleted when you close your browser.

We do not use analytics, advertising or tracking cookies. There is no Google Analytics on this site, no advertising pixels, no remarketing tags and no social-media trackers.

The session cookie is strictly necessary to provide the site and basket securely. It therefore does not require consent, although we explain it here so you know what it does.

Street View images

Some reports show a Google Street View image of the area. We fetch these images on our own server and serve them from our domain, so your browser does not contact Google merely because you view one of those images.

Who handles your information

We do not sell your personal information and do not share it for other businesses' marketing. We use the following service providers:

• Stripe — provides checkout, payment processing, fraud prevention and transaction records. Stripe receives payment and customer information directly through its checkout service and may act as a controller for some of its processing. See Stripe's privacy policy.
• Postmark — sends report-delivery emails, confirmation emails and deal alerts. It processes recipients' email addresses, message contents and email delivery information. See Postmark's privacy policy.
• Fasthosts — hosts the website and its database and may process technical data such as server logs. The website database does not contain the directly identifying purchase-customer details listed above.
• Our email and professional advisers — our email provider may hold correspondence, and our accountant, solicitor or other adviser may receive limited information where reasonably necessary.

We may also disclose information where required by law, to establish or defend legal rights, or to prevent fraud or other misuse.

How long information is kept

• Purchase-customer details in our website database — we do not store them there.
• Stripe transaction information — held by Stripe in accordance with its policies and our account arrangements. We may retain or access accounting and transaction records for the period required by law, normally six years from the end of the relevant company financial year and longer where the law requires.
• Report-delivery records — held by Postmark in accordance with its service settings and retention arrangements.
• Deal-alert subscriptions — until you unsubscribe, after which the subscription record is deleted.
• Unconfirmed alert sign-ups — deleted if they are not confirmed.
• Correspondence — normally for up to two years after the last contact, unless we need it for longer for a legal, accounting or dispute-related reason.
• Server logs — retained for the limited period set by our hosting and security arrangements.

Where information is processed

Our website and database are hosted in the UK. Stripe, Postmark or other providers may process personal information outside the UK. Where required, international transfers are protected by an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

Your rights

Depending on the circumstances, you may have the right to ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is inaccurate or incomplete;
• delete information where there is no lawful reason to keep it;
• restrict how information is used;
• object to certain uses of information;
• provide information in a portable format where that right applies; and
• stop sending you marketing communications.

Email info@thepropertysourcer.co.uk to exercise your rights. We will normally respond within one month and there is normally no charge. We may need to ask for information to confirm your identity.

If you are unhappy with how we use your personal information, please contact us first so that we can try to resolve the issue. You also have the right to complain to the Information Commissioner's Office. Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113.

Security

The site uses an encrypted connection. Buyer documents are kept outside the public web folder and released through protected order links. Card details do not pass through or remain on our systems. We use access controls and data-minimisation measures designed to limit the information available if something goes wrong.

Changes to this policy

We will update the date at the top when this policy changes. If a significant change affects people already subscribed to alerts, we will notify them where appropriate.