Privacy Policy | BuyLand.co.uk

1. Who we are

BuyLand.co.uk is a trading name of Malden Ltd, a company registered in England and Wales under company number 11672272. Our registered office is at 20–22 Wenlock Road, London, England, N1 7GU. We are registered with the Information Commissioner's Office (ICO) under registration number ZC165459.

For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018) we are the data controller for the personal data we hold about you. You can reach us at info@buyland.co.uk.

2. What we collect

We collect only what we need to provide our reports, documents and valuations:

Order details — your email address (for delivery and receipts) and the property identifiers you search or order against: postcodes, addresses and title numbers. For Land Charges and bankruptcy searches, the person's name you ask us to search.
Payment data — payments are processed by Stripe; we never see or store your card details. We keep records of what you bought and for how much.
Account details — your email address, used to sign in with a one-time code. No passwords.
Valuation and report inputs — plot locations and boundaries, acreage, land type, property details (e.g. bedrooms), and anything you add to optional fields such as intended use or valuation feedback.
Planning Pack inputs — quiz answers and the details you type into the letter generators (names and addresses appear in the letters you create).
Enquiries and subscriptions — your email when you contact us, ask for help with a failed search, join a waitlist or subscribe to updates.
Technical data — IP address, browser user-agent and request logs used to operate the service and prevent abuse. Our own analytics store the page viewed, referrer and country — not your IP.
Cookies — an httpOnly session cookie to keep you signed in, plus analytics and advertising-measurement cookies (see section 4). No data brokers and no cross-site advertising networks beyond that measurement.

3. Why we use it (lawful bases)

To fulfil your orders — obtaining documents from HM Land Registry, generating reports and valuations, and emailing them to you. Lawful basis: performance of a contract.
To send transactional emails — sign-in codes, receipts, delivery emails, order updates. Lawful basis: performance of a contract.
To send things you asked for — waitlist launches, page-update alerts. Lawful basis: consent, withdrawable any time via the unsubscribe link or by emailing us.
To improve the service and measure marketing — analytics and advertising conversion measurement. Lawful basis: legitimate interests / consent where required.
To prevent fraud and abuse — protecting the service and our document suppliers. Lawful basis: legitimate interests.
To meet legal obligations — accounting records, lawful requests. Lawful basis: legal obligation.

4. Who we share it with

We never sell your personal data. We share data with a small set of processors and suppliers so the service can run:

HM Land Registry — the property identifiers (and, for name-based searches, the names) you ask us to search are submitted to HMLR to obtain your documents.
Stripe — payment processing.
Hosting and storage providers — our application, database and document storage run in UK (London) data centres.
Email delivery providers — transactional email (sign-in codes, receipts, document delivery).
Mapping, analytics and advertising-measurement providers — location search, plot maps, site analytics and ad conversion measurement.
Network security and content-delivery providers — sitting in front of our site to protect and accelerate it.
AI providers — used to write the plain-English summaries in reports and document summaries; the content of the relevant register or dataset (which can include proprietor names) is processed for that purpose and is not used to train models.

5. How long we keep it

Order records and delivered documents are retained while your account is active, and order/payment records for at least 6 years as accounting records.
Accounts, reports and pack purchases are retained for as long as your account is open; sign-in sessions expire after 30 days.
Valuation requests and feedback are retained to improve the valuation model.
Enquiries and help requests are kept for 12 months after resolution.
Server access logs are retained for 90 days.

6. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Have inaccurate data corrected.
Have your data erased (subject to our legal retention obligations).
Object to or restrict processing.
Receive a copy of your data in a portable format.
Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at info@buyland.co.uk. You can also complain to the ICO at ico.org.uk/make-a-complaint if you're unhappy with how we've handled your data — though we'd appreciate the chance to put it right first.

7. International transfers

Our hosting and database are located in the UK. Some of our processors (including our payment, email, analytics, network-security and AI providers) may transfer data to the United States under appropriate safeguards (UK International Data Transfer Addendum or equivalent).

8. Security

We use industry-standard measures to protect your data: encrypted connections (HTTPS), hashed session tokens, no plaintext passwords (we don't use passwords — we use one-time email codes), and access controls on our infrastructure. No system is perfectly secure; if a breach affects you, we'll notify you and the ICO as required by law.

9. Children

BuyLand.co.uk is not intended for anyone under 18. If you believe a minor has created an account, please contact us and we'll remove it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top tells you when. Material changes will also be flagged on the site or by email.

11. Contact

Malden Ltd (trading as BuyLand.co.uk)
20–22 Wenlock Road, London, England, N1 7GU
Company number: 11672272
ICO registration: ZC165459
Email: info@buyland.co.uk