Privacy Policy

1. Introduction

This Privacy Policy explains how eXpertVal Ltd (referred to as “eXpertVal”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you use the eXpertVal service. It applies to estate agents who sign up for an account, and to homeowners who use a branded valuation page hosted on our platform.

We’re committed to processing your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have questions about this policy or how we handle your data, contact us using the details at the bottom of this page.

2. Who we are

eXpertVal is operated by eXpertVal Ltd, a company registered in England and Wales. For the purposes of UK data protection law, eXpertVal is the data controller for estate agent account data, and a data processor for lead data that estate agents collect through their branded valuation pages.

3. What data we collect

3.1 Estate agent account data

When you sign up as an estate agent, we collect:

• Your first and last name
• Your email address
• Your phone number (optional)
• Your agency name (optional)
• A password, which we store in hashed form
• Your chosen subdomain or URL slug for your branded valuation page
• Any profile information you choose to add (photo, biography, contact details)
• Payment information when you subscribe (handled by our payment processor, not stored by us)

3.2 Homeowner lead data

When a homeowner uses an agent’s branded valuation page, we collect:

• Their name, email address and phone number
• The property address they requested a valuation for
• Any additional information they choose to share (number of bedrooms, condition notes, etc.)
• The valuation result we generate, including the comparable sales used

3.3 Usage data

We automatically collect technical information when you use the service, including your IP address, browser type, device information, pages visited and timestamps. We use this for security, fraud prevention and to improve the service.

4. How we use your data

4.1 Account management and service delivery

We use your account data to create and manage your account, authenticate you when you sign in, host your branded valuation page, generate valuations, deliver leads to your dashboard, send transactional email (password resets, billing notifications, account alerts), and provide customer support.

4.2 Marketing communications

We may send you marketing emails about product updates, new features or relevant estate-agency content. You can opt out of marketing email at any time using the unsubscribe link in any email, or by emailing us. We will never sell your data to third parties for marketing purposes.

4.3 Homeowner nurture sequences

When a homeowner completes a valuation through an agent’s branded page, the homeowner consents to receive a nurture sequence of branded emails from that agent, sent through our infrastructure. Homeowners can unsubscribe from these emails at any time using the one-click unsubscribe link in every message.

4.4 Service improvement

We analyse aggregated usage patterns and valuation accuracy data to improve the AI valuation model and the platform. Where we use individual data for this purpose, it is anonymised so that you cannot be re-identified.

5. Legal basis for processing

We process personal data under one or more of the following legal bases:

• Contract: to provide the service you’ve signed up for.
• Consent: for marketing communications and nurture sequences.
• Legitimate interests: for security, fraud prevention, and to improve the service.
• Legal obligation: where we’re required to retain or disclose data by UK law.

6. Where and how we store your data

Personal data is stored in a managed PostgreSQL database hosted by Supabase in the European Union (Frankfurt region). We use Supabase’s row-level security features so that no estate agent can see another agent’s leads, and so that homeowners’ data is scoped to the agent who collected it.

Data is encrypted in transit (TLS 1.2 or later) and at rest. Passwords are hashed using industry-standard algorithms before storage. We do not transfer personal data outside the UK or EEA except where supplier agreements include appropriate safeguards (UK adequacy regulations or Standard Contractual Clauses).

7. How long we keep your data

We keep estate agent account data for as long as your account is active. If you close your account, we retain core account data for up to six years afterwards to meet UK accounting and tax record-keeping obligations under the Companies Act and HMRC rules. After that period, we delete or anonymise it.

Lead data collected by an agent through their branded page is retained for as long as the agent’s account is active. Agents may delete individual leads or export all leads to CSV at any time from their dashboard. When an agent closes their account, lead data is deleted within 30 days unless the lead has independently requested otherwise.

Marketing email logs and unsubscribe records are kept indefinitely to honour unsubscribe requests.

8. Sharing your data

We share personal data only with the following categories of recipients:

• Service providers we use to deliver the service, including our hosting (Vercel), database (Supabase), transactional and marketing email (Resend), and payment processing (Stripe). Each is subject to a data processing agreement.
• The estate agent who collected the lead, in the case of homeowner data. This is the whole purpose of the platform.
• Law enforcement or regulators, where we’re required by UK law to disclose data.

We do not sell personal data to third parties, full stop.

9. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data (subject to retention obligations above).
• Restriction: ask us to limit how we use your data.
• Portability: ask for your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests, or to direct marketing.
• Withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email us at hello@expertval.ai. We will respond within one month of receiving a valid request.

If you’re unhappy with how we’ve handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO). The ICO can be contacted at ico.org.uk or on 0303 123 1113.

10. Cookies

We use a small number of cookies and similar technologies, all of which fall into one of two categories:

• Strictly necessary: for authenticating signed-in users, remembering your session, and protecting against fraud. These cannot be disabled without breaking the service.
• Analytics: aggregated, anonymised usage data so we can understand which features are used and improve them. These can be disabled in your browser settings.

We do not use third-party advertising cookies or any tracking that follows you across other websites.

11. Changes to this policy

We may update this policy from time to time, for example to reflect changes in how we process data or in UK data-protection law. The “Last updated” date at the top of this page shows when the most recent change was made. If we make a material change, we’ll notify account holders by email at least 14 days before the change takes effect.

12. Contact us

For any data-protection question or request, email us at hello@expertval.ai. We aim to respond within one working day for general questions and within one month for formal rights requests.