Data processing agreement

When you store personal data about sellers, investors and other contacts in Dealcraft, you are the controller and we, PROPGAIN UK LIMITED, a company registered in England and Wales (company number 16913648), registered office 20 Wenlock Road, London N1 7GU, are your processor.

We will

• Process the data only on your documented instructions, i.e. to provide the service.
• Make sure our staff are bound by confidentiality.
• Keep it secure: each customer's data is held in a separate database file, access needs a login, traffic is encrypted, and there are daily backups.
• Use sub-processors only with notice: hosting (Fasthosts), payments (Stripe), email delivery, and Anthropic (AI for comparable sales). For comparable sales we send only a property's street, postcode, type, bedrooms and floor area; never house numbers, contact details or notes. Postcodes are also looked up on postcodes.io, HM Land Registry and the EPC register (public data).
• Help you respond to data subject requests. The app has subject access export and erasure tools built in.
• Tell you without undue delay about any personal data breach.
• Delete or return the data at the end of the service (see the terms for the timetable).
• Make information available to show compliance.

You will

• Have a lawful basis for the personal data you store, and give people privacy information.
• Respect marketing opt-outs (the app records them and excludes them from marketing exports).
• Consider whether your activities count as estate agency work under UK law, with the AML supervision and due diligence that requires.