LEGAL
Privacy notice
Last updated: 21 October 2026
This notice explains how HHL Property Deals (“HHL”, “we”, “us”), collects and uses personal information about you when you visit this website, enquire about a property deal, join our deal list or talk to us about selling your property. We handle your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
HHL Property Deals is the data controller for the personal information described in this notice.
- Legal entity and company number: [Placeholder]
- Registered office: [Placeholder]
- ICO registration number: [Placeholder]
- Phone and WhatsApp: 07455 174173
- Email: [Placeholder]
If you have any questions about this notice or how we use your information, please contact the HHL team using the details above.
2. The information we collect
Depending on how you deal with us, we may collect:
- Contact details: your name, phone number, email address and postal address.
- Investment preferences: your budget, preferred strategies (for example flips, buy-to-let, BRRR or HMOs), target areas and timescales.
- Property details (landlords and sellers): the address, type, condition, tenancy position and price expectations of a property you are thinking of selling, and any figures you choose to share, including figures from the sourced deal calculator if you send them to us.
- Identity and anti-money laundering information: photo ID, proof of address, proof and source of funds, and the results of identity and sanctions checks.
- Financial information: details needed to take or refund payments, such as bank details and payment records.
- Communications: messages you send us by WhatsApp, phone, email, Instagram or any other channel, and notes of our conversations.
- Website usage: anonymous information about how the website is used (see section 8).
We do not knowingly collect special category data (such as health information). Please don’t send it to us unless we specifically ask for it and explain why.
3. How we collect it
- Directly from you, when you message or call us, request a deal pack, join our deal list, or tell us about a property.
- From identity verification and anti-money laundering check providers.
- From other people involved in a transaction, such as solicitors, brokers, agents, sellers and buyers.
- From publicly available sources, such as HM Land Registry and Companies House.
4. How we use it, and our legal basis
We only use your information where the law allows us to. We rely on:
- Contract: to respond to your enquiry, send you deal packs, provide our sourcing, packaging or purchase services, and take payment, where this is needed to enter into or perform a contract with you.
- Legal obligation: to carry out the identity, anti-money laundering and sanctions checks required by the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, and to keep records for tax and accounting.
- Legitimate interests: to run and improve our business, keep records of our dealings with you, prevent fraud, and establish or defend legal claims. We balance these interests against your rights.
- Consent: to send you new off-market deals and updates. You can withdraw consent at any time by telling us, or by replying “STOP” to a message.
5. Who we share it with
We never sell your personal information. We share it only where needed, with:
- The other party to a deal, and their solicitor or agent, only with your knowledge, once you decide to proceed.
- Solicitors, conveyancers, mortgage brokers, surveyors and other professionals you ask us to introduce you to.
- Identity verification and anti-money laundering check providers.
- Our service providers, such as website hosting (Vercel), messaging (WhatsApp), email, accounting and IT providers, who may only use it to provide their service to us.
- Our accountants, insurers, professional advisers and redress scheme, where needed.
- HMRC, the police, the National Crime Agency or other authorities, where the law requires us to.
6. International transfers
Some of our service providers, such as WhatsApp (Meta) and Vercel, may process information outside the UK. Where they do, we make sure suitable safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement, as UK data protection law requires.
7. How long we keep it
- Identity and anti-money laundering records: five years after the end of our business relationship or the completion of the transaction, as the law requires.
- Transaction, payment and accounting records: six years from the end of the financial year they relate to.
- Enquiries that don’t go ahead: up to [Placeholder] after our last contact, unless you ask us to delete them sooner.
- Deal list: until you unsubscribe or ask us to remove you.
After that, we securely delete or anonymise it.
8. This website, cookies and analytics
This website does not use advertising or tracking cookies. We use Vercel Web Analytics to count visits and see which pages are popular; it does not use cookies and does not identify individual visitors. During your visit, your browser remembers whether you have already seen the opening film so it isn’t shown again; this stays on your device and is not sent to us.
The site loads fonts from Google Fonts and code from a public content delivery network, so your browser shares your IP address with those providers to fetch the files. Figures you type into the sourced deal calculator stay on your device unless you choose to send them to us. When you tap a WhatsApp link, WhatsApp’s own privacy policy applies to your messages.
9. Keeping your information safe
We take appropriate technical and organisational steps to protect your information, including limiting access to people who need it, using secure, password-protected systems, and only asking for documents such as ID through secure channels. If a data breach is likely to put your rights at risk, we will tell you and the Information Commissioner’s Office as the law requires.
10. Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, where we no longer have a reason to keep it;
- ask us to restrict or stop using your information, or object to how we use it;
- ask us to transfer information you gave us to another organisation;
- withdraw your consent at any time, where we rely on consent.
Some rights don’t apply in every case; for example, we must keep anti-money laundering records even if you ask us to delete them. To use any of these rights, contact us using the details in section 1. There is normally no charge, and we will reply within one month.
11. Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
12. Changes to this notice
We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated at the top.
See also our terms of business.