buyland

Privacy Policy

Last updated: 11 June 2026

1. Who we are

BuyLand.co.uk is a trading name of Malden Ltd, a company registered in England and Wales under company number 11672272. Our registered office is at 20–22 Wenlock Road, London, England, N1 7GU. We are registered with the Information Commissioner's Office (ICO) under registration number ZC165459.

For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018) we are the data controller for the personal data we hold about you. You can reach us at [email protected].

2. What we collect

We collect only what we need to run the marketplace:

  • Account details — your email address (used to sign in via a one-time code), and an optional display name, contact phone, location and avatar.
  • Agent profile details — if you register as an agent, the agency name, address, phone, website, logo and description you choose to publish.
  • Listings and wanted posts — the title, description, photos, price, location, acreage, and any other details you submit.
  • Messages — the contents of chat messages you send through our in-platform messaging.
  • Technical data — IP address, browser user-agent, and basic request logs used to operate the service and prevent abuse.
  • Cookies — a single httpOnly session cookie to keep you signed in. We don't use third-party advertising cookies.

3. Why we use it (lawful bases)

  • To provide the service — running your account, publishing your listings, delivering messages. Lawful basis: performance of a contract.
  • To send transactional emails — sign-in codes, approval notifications, message alerts. Lawful basis: performance of a contract.
  • To prevent fraud and abuse — moderating listings, detecting bad actors. Lawful basis: legitimate interests.
  • To meet legal obligations — responding to lawful requests, keeping accounting records. Lawful basis: legal obligation.

4. Who we share it with

We never sell your personal data. We share data with a small set of trusted processors so the site can run:

  • DigitalOcean — hosting and database (London region).
  • Postmark — transactional email delivery.
  • Google Maps Platform — location autocomplete and static maps.

Where you choose to publish a listing or agent profile, the information you put in the listing is public by design — that's the point of the marketplace. Your email and phone are never shown publicly; buyers and sellers contact each other through our chat.

5. How long we keep it

  • Active accounts and their content are retained for as long as your account is open.
  • Inactive accounts are kept for up to 24 months from your last sign-in, then deleted.
  • Removed or rejected listings are retained for 12 months in case of dispute, then deleted.
  • Chat messages are retained for 24 months after the conversation's last activity.
  • Server access logs are retained for 90 days.

6. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data erased (subject to our legal retention obligations).
  • Object to or restrict processing.
  • Receive a copy of your data in a portable format.
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at [email protected]. You can also complain to the ICO at ico.org.uk/make-a-complaint if you're unhappy with how we've handled your data — though we'd appreciate the chance to put it right first.

7. International transfers

Our hosting and database are located in the UK. Some of our processors (Google, Postmark) may transfer data to the United States under appropriate safeguards (UK International Data Transfer Addendum or equivalent).

8. Security

We use industry-standard measures to protect your data: encrypted connections (HTTPS), hashed session tokens, no plaintext passwords (we don't use passwords — we use one-time email codes), and access controls on our infrastructure. No system is perfectly secure; if a breach affects you, we'll notify you and the ICO as required by law.

9. Children

BuyLand.co.uk is not intended for anyone under 18. If you believe a minor has created an account, please contact us and we'll remove it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top tells you when. Material changes will also be flagged on the site or by email.

11. Contact

Malden Ltd (trading as BuyLand.co.uk)
20–22 Wenlock Road, London, England, N1 7GU
Company number: 11672272
ICO registration: ZC165459
Email: [email protected]

See also our Terms of Use.