Privacy Policy
Last updated: 4 August 2026
1. Who we are
Untagged Property is operated by Untagged Limited (“we”, “us”). This policy explains how we process personal data when you use untagged.co.uk, including free tools and the signed-in portfolio.
Email: admin@untagged.co.uk
Address: Untagged Limited, Popeshead Court Offices, Peter Lane, York City Centre, YO1 8SU
2. What we collect
2.1 Account and portfolio data
When you register or use the portfolio we may process: name, email, password (hashed), property and tenancy details you enter, expenses, uploads (receipts/media), and communication you send us (e.g. contact form).
2.2 Tool usage and security
- Guest tool rate limits: to stop abuse we count searches per tool in a rolling 24-hour window. For guests we store a hashed version of your IP address (HMAC-SHA256 with our application key), not the raw IP, in cache keys.
- Signed-in limits: keyed to your user ID.
- Google reCAPTCHA: on registration, contact, and some knowledge actions, to detect bots (see Google’s policies).
- Server logs: may include IP and user agent for security and debugging, retained only as long as needed.
2.3 Analytics (optional)
If you consent via our cookie banner, we use Google Analytics 4 to measure site usage. Analytics cookies are not set until you opt in. See our Cookie Policy.
2.4 Open data look-ups (not usually personal data)
Public tools query third-party open data using postcodes or coordinates you enter (for example postcodes.io, MHCLG EPC register, Environment Agency flood monitoring, Police.uk, and the public VOA council tax band checker). Those responses relate to properties and areas. We do not sell this data.
3. Why we process data (lawful bases)
- Contract: providing your account and portfolio features.
- Legitimate interests: securing the site, preventing abuse (rate limits, reCAPTCHA), improving the product, answering contact requests.
- Consent: Google Analytics; optional newsletter if you tick that box on registration.
- Legal obligation: where we must keep or disclose information by law.
4. Processors and sharing
We do not sell your personal data. We use service providers who process data on our instructions, including:
- Google: Analytics (with consent); reCAPTCHA on protected forms.
- Hosting / email infrastructure used to run the website and deliver transactional messages.
We may disclose information if required by law or to protect our users and systems.
5. International transfers
Some providers (including Google) may process data outside the UK. Where that happens, appropriate safeguards (such as standard contractual clauses) are expected to apply under their terms.
6. Retention
- Account and portfolio data: while your account is active and for a reasonable period afterwards if needed for disputes or legal duties.
- Guest tool quotas: typically expire with the 24-hour window (cache TTL).
- Contact messages: as long as needed to respond and keep a business record.
- Analytics: per Google Analytics retention settings and your consent withdrawal.
7. Your rights (UK GDPR)
You may have rights to access, rectify, erase, restrict or object to processing, and data portability, and to withdraw consent where processing is based on consent. You can also complain to the ICO. Contact us at admin@untagged.co.uk to exercise your rights.
8. Children
Our services are aimed at adults (property investors and landlords). We do not knowingly collect data from children under 16.
9. Tools and estimates
Calculators and look-ups (including council tax estimates, deal analysis, and renovation costs) are for information and projection only. They are not regulated financial, tax, or legal advice. Always check official sources (local authority bills, GOV.UK, lenders, solicitors).
10. Changes
We may update this policy and will revise the “Last updated” date above. Significant changes may also be highlighted on the site.