Privacy Policy

PropHealth is operated by Moin Siddiqui (“we”, “us”, “our”). We are the data controller for personal data collected through this service. You can contact us at hello@prophealth.co.uk.

This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR and the Data Protection Act 2018.

We may collect the following personal data:

• Account data: name, email address, and password when you create an account.
• Property data: addresses and property details you search for or add to your account.
• Usage data: pages visited, features used, and browser/device information, collected via standard server logs and analytics.
• Communications: any messages you send us via email or our contact form.
• Open Banking data (optional): if you connect your bank account for the Remortgage Radar feature, we receive read-only transaction summaries via an FCA-regulated Open Banking provider. We do not store raw bank credentials.

We are in private beta. During this period we collect only the minimum data necessary to run the service and respond to your enquiries.

We use your data to:

• Create and manage your PropHealth account
• Generate property reports and scores
• Send you service emails (invite confirmations, feature updates relevant to your account)
• Improve the product based on how it is used
• Comply with legal obligations

We do not sell your personal data. We do not use your data for automated advertising.

We process your data on the following lawful bases under UK GDPR:

• Contract: to provide the service you have signed up for.
• Legitimate interests: to improve our product and prevent fraud.
• Consent: for optional features such as Open Banking integration, where you give explicit permission.
• Legal obligation: where required by UK law.

We share your data only where necessary:

• Infrastructure providers: cloud hosting and database services (data processed in the UK or EEA).
• Property data sources: HM Land Registry, Environment Agency, and similar public-sector APIs — we query these on your behalf but do not share your personal data with them.
• Open Banking provider: an FCA-regulated third party, only if you connect your bank account.
• Legal requirements: if required by court order or regulatory authority.

We do not share your data with data brokers, advertising networks, or marketing platforms.

We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it by law (for example, financial records for tax purposes, retained for 6 years under HMRC requirements).

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict how we process your data
• Object to processing based on legitimate interests
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at privacy@prophealth.co.uk. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect how the service works.

We use industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. No system is completely secure; if you believe your account has been compromised, contact us immediately.

We will notify you by email if we make material changes to this policy. The “Last updated” date at the top of this page reflects the most recent revision.

For any questions about this policy or how we handle your data:

Email: privacy@prophealth.co.uk

Post: PropHealth, c/o Moin Siddiqui, United Kingdom