Privacy Policy

Last Updated: 20 November 2025

Introduction

Propslio Limited ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform for fractional property investment.

We are compliant with UK financial regulations and adhere to UK GDPR, the Data Protection Act 2018, and all applicable UK financial services regulations.

Data Controller

Propslio Limited

Company Number: [Company Registration Number]

Registered Address: [Registered Office Address]

Email: [email protected]

Data Protection Officer: [email protected]

Information We Collect

Personal Information

  • Identity Data: Full name, date of birth, National Insurance number, passport or driving licence details
  • Contact Data: Email address, postal address, telephone number
  • Financial Data: Bank account details, payment card information, investment history, income and employment details, source of funds
  • Transaction Data: Details of investments, purchases, sales, and distributions
  • Technical Data: IP address, browser type, device information, login data
  • Usage Data: How you use our platform, pages viewed, time spent

KYC & AML Compliance: As a regulated financial services provider, we are legally required to collect and verify your identity information to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.

Special Category Data

In limited circumstances, we may process special category data including:

  • Criminal conviction data for fraud prevention and AML compliance
  • Health data if you request reasonable adjustments for accessibility

How We Use Your Information

Account Management & Service Delivery

Legal Basis: Performance of Contract
To create and manage your account, process investments, facilitate transactions, and provide customer support.

Regulatory Compliance

Legal Basis: Legal Obligation
To comply with financial regulations, KYC/AML requirements, tax reporting obligations, and court orders.

Fraud Prevention & Security

Legal Basis: Legitimate Interests
To detect and prevent fraud, money laundering, and unauthorized access to your account.

Marketing Communications

Legal Basis: Consent
To send you information about new investment opportunities, platform updates, and promotional offers (only with your explicit consent).

Platform Improvement

Legal Basis: Legitimate Interests
To analyze usage patterns, improve user experience, and develop new features.

Who We Share Your Data With

Financial Institutions

Banks and payment processors to facilitate transactions and verify account ownership.

Identity Verification Providers

Third-party KYC/AML services to verify your identity and comply with regulatory requirements.

Legal & Professional Advisors

Solicitors, accountants, auditors, and other professional advisors who assist us in providing our services.

Regulatory Authorities

Financial regulators, HMRC, law enforcement, and other government bodies when legally required.

IT Service Providers

Cloud hosting, email services, CRM systems, and analytics providers who support our platform operations.

Property Partners & Agents

Estate agents, property managers, and developers involved in properties you invest in.

Important: We never sell your personal data to third parties for marketing purposes. All third parties are required to keep your data secure and use it only for the specified purposes under data processing agreements.

International Data Transfers

Your data is primarily stored and processed within the United Kingdom. However, some of our service providers may process data in other countries. When we transfer your data outside the UK, we ensure:

  • The country has been deemed to provide an adequate level of data protection by the UK Government
  • We use Standard Contractual Clauses approved by the ICO
  • Appropriate technical and organizational security measures are in place

Please contact us if you would like more information about the specific safeguards we have in place for international transfers.

How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations:

Active account data Duration of relationship
Transaction records 7 years after closure
KYC/AML documentation 7 years after closure
Tax records 7 years minimum
Marketing consent Until withdrawn

We are required by financial regulations to retain certain financial records for a minimum of 7 years. We cannot delete this data earlier even if you request its deletion.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you (Subject Access Request).

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your data (subject to legal retention requirements).

Right to Restrict

Request restriction of processing in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Automated Decisions

Not be subject to automated decisions with significant legal effects.

Withdraw Consent

Withdraw consent at any time where processing is based on consent.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request.

Please note that some rights may be limited due to regulatory requirements (e.g., we cannot delete data we are legally required to retain for 7 years).

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage:

Encryption

TLS/SSL encryption for data in transit and AES-256 encryption for data at rest

Access Controls

Role-based access, multi-factor authentication, and regular access reviews

Secure Storage

Data stored in secure UK-based data centers with redundant backups

Monitoring

24/7 security monitoring, intrusion detection, and regular security audits

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by UK GDPR.

Cookies and Tracking

We use cookies and similar technologies to improve your experience on our platform. Our cookies fall into the following categories:

Strictly Necessary Cookies

Essential for the platform to function. These cannot be disabled and include authentication, security, and session cookies.

Performance Cookies

Help us understand how visitors use our platform (e.g., Google Analytics). You can opt out of these cookies.

Marketing Cookies

Track your activity across websites to deliver personalized advertisements. Requires your explicit consent.

You can manage your cookie preferences through your browser settings or our cookie consent tool. For more details, see our separate Cookie Policy.

Complaints and the ICO

If you have any concerns about how we handle your personal data, please contact our Data Protection Officer at [email protected]. We take all complaints seriously and will investigate promptly.

Right to Complain to the ICO

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Tel: 0303 123 1113

Website: www.ico.org.uk

We would appreciate the opportunity to address your concerns before you approach the ICO, but you have the right to contact them at any time.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you by email if you have an active account
  • Display a prominent notice on our platform

Your continued use of our services after we post changes constitutes your acceptance of the updated Privacy Policy.

Third-Party Websites

Our platform may contain links to third-party websites, plug-ins, and applications (e.g., property listings, partner websites, payment processors). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

Questions About Your Privacy?

If you have any questions about this Privacy Policy or how we handle your personal data, please don't hesitate to contact us.