Privacy Policy
Last updated 26 June 2026
This policy explains how Estate Agency Media collects and uses your personal data when you use this website and our services, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Estate Agency Media is a private limited company registered in England & Wales under company number 16227802. We are the “data controller” for the personal data described in this policy.
For any privacy or data-protection request, contact us at info@estateagencymedia.co.uk or on 07549 320128.
2. The data we collect
- Contact & booking details — your name, email address, phone number, the property address/postcode, the service booked, appointment date/time, and any notes or special requests you provide.
- Photos you upload — for virtual staging, the room photos you submit so we can stage them.
- Account details — if you create an account, your email and a securely hashed password (we never store your password in plain text).
- Payment information — your payment is processed by Stripe. We receive confirmation that a payment succeeded and a reference, but we never receive or store your full card details — these are entered directly on Stripe’s secure checkout.
- Enquiry details — anything you send us through our forms or by email.
- Usage data — privacy-friendly, cookieless analytics about page views and where visitors came from (see “Cookies & analytics” below).
3. How and why we use your data (and our lawful basis)
- To take and fulfil your booking or order — scheduling, taking payment, and delivering the photography, video, virtual staging or digital brochures. Lawful basis: performance of a contract.
- To create a calendar event for your shoot and send you confirmations, reminders and updates. Lawful basis: contract / our legitimate interests in running the service.
- To store and process the photos you upload so we can produce your virtual staging. Lawful basis: performance of a contract.
- To manage your customer account and password resets. Lawful basis: contract.
- To respond to your enquiries. Lawful basis: our legitimate interests in answering you.
- To understand how the site is used and where visitors come from, so we can improve it. Lawful basis: our legitimate interests (using cookieless analytics).
- To meet our legal and accounting obligations. Lawful basis: compliance with a legal obligation.
4. Payments
Card payments are processed by Stripe via its secure, hosted checkout. Your card details are entered on Stripe’s systems and are never seen or stored by us. See Stripe’s privacy policy at stripe.com/gb/privacy.
5. Who we share your data with
We don’t sell your data. We share it only with the service providers (“processors”) we rely on to run the business, and only what each needs to do its job:
- Stripe — payment processing.
- Dropbox — secure storage of the photos you upload for virtual staging.
- Google (Google Calendar) — creating and managing the calendar event for your booking.
- Resend — sending transactional emails (confirmations, reminders, password resets).
- Neon — our database host, where booking, order and account records are stored (a PostgreSQL database).
- Vercel — website hosting and privacy-friendly analytics.
We may also disclose data where required by law, or to establish, exercise or defend legal claims.
6. International transfers
Some of these providers may process data outside the UK. Where they do, the transfer is protected by appropriate safeguards — such as a UK adequacy decision or the UK International Data Transfer Agreement / Standard Contractual Clauses.
7. How long we keep it
- Booking and order records, and related financial records, are kept for as long as needed to provide the service and to meet legal/accounting obligations (generally up to six years).
- Photos you upload for virtual staging are kept for the duration of the job and for a reasonable period after delivery, then deleted.
- Account data is kept until you ask us to delete it or close the account.
- Enquiry correspondence is kept for a reasonable period and then deleted.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data erased in certain circumstances;
- restrict or object to our processing;
- data portability;
- withdraw consent where we rely on it; and
- not be subject to solely automated decisions with legal effect (we don’t make such decisions).
To exercise any of these, email info@estateagencymedia.co.uk. We’ll respond within one month. If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
9. Cookies & analytics
We use Vercel Analytics, which is privacy-friendly and cookieless: it measures page views and referral sources without storing cookies on your device or tracking you across other websites, and it does not build a profile of you. Because no non-essential cookies are set, no cookie-consent banner is required. If we ever introduce cookie-based tools, we’ll ask for your consent first.
10. Security
We take appropriate technical and organisational measures to keep your data safe — for example, payments are handled by Stripe, account passwords are stored only as secure hashes, and access to systems is restricted.
11. Children
Our services are aimed at estate agents, developers and property professionals. The site is not directed at children and we don’t knowingly collect children’s data.
12. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it last changed.
13. Contact
Estate Agency Media (company no. 16227802) — info@estateagencymedia.co.uk · 07549 320128.
