Privacy notice
Note for solicitor: Draft UK GDPR / Data Protection Act 2018 notice. Please review alongside the DPIA, the AI vendor data processing terms, and the retention policy.
1. Who we are
[COMPANY NAME LTD], trading as My Auction Pack, [REGISTERED ADDRESS], is the controller of your personal data. ICO registration number: [ICO REG NO]. Contact: [privacy@myauctionpack.co.uk or hello@myauctionpack.co.uk].
2. What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Name, email, billing details | To take your order, send your Report and handle support | Contract |
| Legal pack documents you upload (which may contain personal data of sellers, tenants and others) | Only to produce your Report | Contract (for you); legitimate interests (for third parties named in the Pack) |
| Lot details and strategy assumptions | To produce your Report | Contract |
| Payment records | Accounting and tax law | Legal obligation |
| Partner introduction requests | To introduce you to a partner you ask us to | Consent / contract |
| Marketing preferences | To send updates, only if you opt in | Consent |
Note for solicitor: Confirm lawful bases, especially for third-party personal data in packs (tenants, sellers) and any special category data that may appear.
Free guide sign-ups
What we collect: first name, email address, which describes you; and optionally your mobile number, how many auction properties you buy a year, areas or postcodes you’re looking in, typical budget, how you usually fund a purchase, your next auction date, how you heard about us, and whether you agreed to marketing emails (with the wording and time).
Technical details: the page you signed up on, the link or campaign tags that brought you, the website you came from, and your browser type. We use these to understand which pages and campaigns work.
Why: to give you the guide, to tailor guides and offers about auction packs, and to save you retyping your details if you order a report. Your mobile number is only used about your enquiry. We send marketing emails only if you tick the box, and you can unsubscribe at any time.
Lawful basis: [LAWFUL BASIS – to be confirmed with solicitor]
How long we keep it: [RETENTION PERIOD – to be confirmed]
Who we share it with: We don’t sell your details. [EMAIL PROVIDER, e.g. Mailchimp – once set up]
3. AI processing
- We use AI tools from [AI VENDOR(S)] to read and extract information from your documents, under data processing terms.
- Your uploads are used only to produce your Report. They are not used to train AI models, by us or our vendors.
- The Report is not an automated decision with legal or similarly significant effects on you; you decide whether to bid.
4. Who we share data with
- Processors: hosting [HOST], AI vendor [AI VENDOR], payments [PAYMENT PROVIDER – Stripe planned], email [EMAIL PROVIDER].
- Partners, only when you ask us to introduce you, and only the details needed.
- Authorities where the law requires it.
5. International transfers
[State whether any processor stores data outside the UK and the safeguard used, e.g. UK IDTA / UK Addendum or adequacy regulations.]
6. How long we keep it
- Uploaded legal packs: deleted [X] days after your Report is delivered.
- Your Report: [X][days / months], so you can re-download it.
- Order and payment records: [6 years – confirm], for tax and accounting.
7. Your rights
You can ask to access, correct, delete, restrict or move your data, object to processing, and withdraw consent at any time. Contact [privacy@myauctionpack.co.uk or hello@myauctionpack.co.uk]. You can also complain to the Information Commissioner’s Office at ico.org.uk.
8. Cookies
[List cookies and analytics if any are added. This prototype sets no cookies and self-hosts its fonts.]
9. Security
[Summarise measures: encryption in transit and at rest, access controls, deletion process.]