Privacy Policy

Taking Care Ltd ("Taking Care", "we", "us", "our") operates the website takingcare.co.uk, a marketplace for the sale of tenanted residential properties in the United Kingdom. Taking Care Ltd is the data controller for personal data collected through this website. Contact: hello@takingcare.co.uk

We collect the following categories of personal data: Account data: name, email address, phone number, role (buyer/landlord/agent), company name (agents only). Property data: property addresses, tenancy information, documents you upload, photographs. Transaction data: enquiries sent and received, messages between parties. Usage data: pages visited, search queries, properties saved, time on site. Communications: emails you send us, support requests. Consent records: date and time of consent to our terms and privacy policy, marketing preferences.

We process your personal data on the following legal bases: Contract performance (Article 6(1)(b)): to provide the marketplace service you have signed up for, including managing listings, enquiries and account features. Legitimate interests (Article 6(1)(f)): to improve our platform, prevent fraud, and send relevant service communications. Consent (Article 6(1)(a)): for marketing emails and non-essential cookies. You may withdraw consent at any time. Legal obligation (Article 6(1)(c)): where we are required to retain data by law.

We use your personal data to: • Create and manage your account • Display and manage property listings • Facilitate enquiries between buyers and sellers • Send transactional emails (account confirmation, enquiry notifications) • Send marketing emails where you have consented • Improve the platform through analytics • Comply with legal obligations • Prevent fraud and ensure platform security

We share your data only where necessary: With other users: buyer contact details are shared with the seller/agent when an enquiry is submitted. Property details including landlord information are visible to registered users. With service providers: we use Supabase (EU West/London region) for database and authentication services, and Vercel for hosting. Both are bound by data processing agreements. With authorities: where required by law or to protect legal rights. We do not sell your personal data to third parties.

We retain your personal data for as long as your account is active. If you close your account, we delete your data within 30 days, except where we are legally required to retain it (e.g. financial records, which are kept for 7 years). Enquiry data is retained for 3 years after a transaction completes.

You have the following rights: Right of access: to request a copy of the personal data we hold about you. Right to rectification: to correct inaccurate data. Right to erasure: to request deletion of your data ("right to be forgotten"). Right to restrict processing: to limit how we use your data. Right to data portability: to receive your data in a portable format. Right to object: to object to processing based on legitimate interests. Right to withdraw consent: for any processing based on consent. To exercise any of these rights, email hello@takingcare.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use essential cookies required for the platform to function (authentication, session management) and optional analytics cookies to understand how the site is used. You can manage cookie preferences via the banner shown on your first visit. See our Cookie Policy for full details.

Your data is stored in the EU West (London) Supabase region and processed within the UK/EU. We do not transfer your data outside the UK/EEA except where adequate protections are in place under UK GDPR.

We may update this privacy policy from time to time. We will notify registered users of material changes by email. The date of the most recent revision is shown at the top of this page.

For any privacy-related queries: hello@takingcare.co.uk Taking Care Ltd takingcare.co.uk