Legal

Privacy policy

What personal data we collect on this website, why, and what you can do about it.

Last updated: 4 September 2026

This is an implementation draft prepared for final legal review before launch. It has not been approved by a solicitor.

1. Who is responsible for your data

The controller is Lucennio Property Limited, a company registered in England and Wales with company number 16014466, which operates the Property Business Insights website. Contact: info@lucennioproperty.com. We are not currently required to appoint a data protection officer.

2. What we actually do

This site is a publication. You can read everything on it without giving us any personal data and without signing in. We do not operate a reader account system, a membership area, comments, or a newsletter sign-up on this website, and we do not run advertising-network tracking or cross-site profiling. We do offer optional analytics measurement using Google Analytics 4, which only runs if you accept it. Nothing is requested from Google, and no analytics cookie is set, unless and until you choose "Accept analytics". The processing described below is all the processing that currently takes place.

3. Personal data we process

What	Why	UK GDPR lawful basis
Advertising enquiries	If you complete our advertising enquiry form we store your name, company, email address and message so we can respond and discuss a commercial arrangement.	Legitimate interests (responding to a business enquiry you have made) and, where a contract follows, steps taken at your request before entering a contract.
Email enquiries	Emails you send to info@lucennioproperty.com, including your address, signature details and message content.	Legitimate interests (handling correspondence).
Administrator accounts	Email addresses of our own staff who sign in to the private admin area using a one-time email sign-in link, plus sign-in timestamps generated by our authentication provider.	Legitimate interests (securing and administering the site).
Server and security logs	Our hosting and database providers log request data such as IP address, timestamp, requested URL, user agent and error information, to keep the service running and to detect abuse.	Legitimate interests (security, fraud prevention and service reliability).
Advertising measurement events	When a banner is displayed or clicked we record the creative, the event type, the timestamp and the path of the page it appeared on (referrer_path). We do not set an advertising cookie, do not build a profile and do not store your IP address or a device identifier against these events, so they are not ordinarily personal data.	Legitimate interests (measuring whether placements we sell were served and clicked).
Optional analytics (Google Analytics 4)	Only if you accept analytics. Google Analytics 4 (measurement ID G-45NBDV1Z4P) sets first-party cookies (_ga and _ga_*) containing a randomly generated identifier, and collects: pages and articles viewed, referring source, approximate location derived from IP address at country/region level, device, browser and screen characteristics, and the interaction events we define — article views (article slug, section, whether the article came from our pipeline or the imported archive), tool starts and completions (the tool name only), successful advertising or partnership enquiries, and outbound link clicks (the link context and destination website name). We use it to measure audience, acquisition, content performance and tool usage. We never send names, email addresses, message text, postcodes, calculator inputs or any other information you type into this site as analytics parameters. IP addresses are not stored by us; Google uses IP address for approximate location and then discards it.	Consent (you choose to allow analytics storage). You can withdraw consent at any time via 'Cookie settings' in the footer.
Consent preference	Your analytics choice is stored in your browser's local storage under a single key so the banner does not reappear on every page. It is strictly necessary for honouring your choice and is never used for measurement, profiling or advertising.	Legitimate interests / strictly necessary (recording and honouring a preference you expressed).

We do not currently operate reader referral or lead-generation forms on this site. If we introduce one, we will update this policy before it goes live and explain what is shared with the provider.

4. Cookies and similar technologies

Strictly necessary (always active)

Hosting and security: our hosting and content-delivery infrastructure may set short-lived cookies or headers needed to route requests, balance load and protect the site from abuse.
Administrator sign-in token, held in local storage for our own staff who log in to the private admin area. Not used for readers and not used for measurement.
Your analytics consent choice, held in local storage so the banner does not reappear on every page.

Optional analytics (off until you accept)

Google Analytics 4 first-party cookies _ga and _ga_*, used to distinguish visits and sessions for audience and usage measurement.
We operate Google Consent Mode. Analytics storage, advertising storage, advertising user data and advertising personalisation all default to denied. Only analytics storage is ever switched on, and only if you press "Accept analytics" — the advertising states stay denied permanently. No request is made to Google's tag or analytics domains before that.
You can change or withdraw your choice at any time using the "Cookie settings" link in the footer. Withdrawing consent stops further events immediately, sets analytics storage back to denied, and deletes the _ga and _ga_* cookies where your browser allows us to. The site works exactly the same if you reject analytics.

5. Third-party content and embeds

Pages may load web fonts from Google Fonts, which means your browser makes a request to Google's servers and Google receives your IP address and user agent as part of that request. Our regulatory tools call public reference services (for example the postcode lookup service postcodes.io) with the postcode you enter, in order to return a result. We do not embed social media players or third-party comment systems.

6. Who we share data with

We use a small number of processors and service providers to run the site: our application hosting provider; our managed database, authentication and file-storage provider; content-delivery infrastructure serving our images and static files; and, where you have accepted optional analytics, Google (Google Ireland Limited, with Google LLC as a sub-processor) as our analytics provider. We also use AI text and image services in our editorial production workflow — these process source material and our editorial prompts, not reader personal data. We may disclose information where we are legally required to, or to establish or defend legal claims. We do not sell personal data, and we have not enabled Google Signals, advertising features or data sharing with Google advertising products.

7. International transfers

Some of our providers process data outside the UK. Google Analytics data may be processed on Google servers in the United States and other countries. Where a transfer outside the UK happens, it is made under the UK's adequacy regulations, including the UK extension to the EU–US Data Privacy Framework where the provider is certified, or under the International Data Transfer Agreement or Addendum to the EU standard contractual clauses, together with appropriate additional safeguards. You can ask us for details of the mechanism relied on for a particular provider.

8. How long we keep it

Advertising and partnership enquiries: kept while we are in discussion and for up to 24 months afterwards, then deleted, unless a contract means we need to keep records longer.
Business correspondence and records relating to a contract: kept for up to six years after the relationship ends, to meet legal and accounting requirements.
Administrator accounts: kept while the person needs access, then removed.
Server, security and error logs: retained for the short operational period set by our hosting and database providers, typically days to a few weeks.
Advertising impression and click events: retained in aggregate for reporting; we review and prune historic event rows periodically.
Optional Google Analytics data: user and event data retention is configured at 14 months, after which Google deletes the underlying event-level records; only aggregated reporting remains. The _ga cookie itself expires after up to two years, or sooner if you withdraw consent or clear your browser storage.

9. Marketing choices

We do not run a reader marketing email list from this website. If you have asked us about a commercial arrangement, we may email you about that enquiry, and you can tell us to stop at any time by replying or emailing info@lucennioproperty.com. Any marketing email we send in future will include an unsubscribe link.

10. Your rights

Under UK GDPR you have the right to access your personal data; to have inaccurate data corrected; to have data erased in certain circumstances; to restrict or object to processing, including processing based on legitimate interests and any direct marketing; to data portability where applicable; and to withdraw consent where we have relied on it. To exercise a right, email info@lucennioproperty.com. We respond within one month and may ask you to confirm your identity.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or by telephone on the helpline published on that website.

12. Security

The site is served over HTTPS. Administrative access requires a one-time email sign-in link and an explicit administrator check, and database access is restricted by row-level security policies so that private records are not reachable through the public interface. Uploaded files and static assets are served from our own storage. No system is completely secure, but we take measures appropriate to the risk.

13. Children

This is a business-to-business publication intended for property professionals. It is not directed at children and we do not knowingly collect personal data from anyone under 18.

14. Changes to this policy

We update this policy when our processing changes. The "last updated" date above shows the current version.

15. Contact

Lucennio Property Limited (company number 16014466), England and Wales — info@lucennioproperty.com. See also our terms and conditions.