Privacy and help

Customer privacy notice

CADASTRAL LIMITED, company number 17193011, trading as Cadastral Home Surveys, is responsible for the personal information used to arrange and provide your survey. Contact Jack Hughes at jack@cadastral.co.uk, 07415 467781, or 87 Kempston Street, Liverpool, L3 8HE, United Kingdom, about this notice or your information.

We use the client and co-client names and contact details, correspondence and billing address, property and access details, service choices and concerns, quotation, accepted agreement and separate early-start evidence, inspection/report information, correspondence, and invoice/payment status. Information comes from you, your authorised representative, the introducing agent or access contact, the surveyor, and payment-status information from Stripe. Please provide another person's details only where appropriate to arranging the service; do not supply unrelated sensitive information in free-text fields.

We use this information to answer enquiries, prepare and agree the survey, arrange access, perform and deliver the report, provide agreement copies, manage invoices, and handle support, cancellations and complaints. We rely on steps requested before a contract and performance of that contract for the client's service; applicable legal obligations for records required by law; and our legitimate interests in arranging access, maintaining secure and accurate records, preventing abuse and establishing or defending claims, taking account of the affected person's rights. We do not enrol customers, sellers or access contacts in marketing through this workflow.

Necessary information is handled by Render for the private application, database and document storage; Backblaze B2 for encrypted backups; Google for Jack's connected Gmail correspondence; and Stripe for customer-initiated invoice payment. It may also be shared with the assigned surveyor, an access contact, or professional advisers and a competent complaints/redress body where necessary for the stated purpose. Agents do not receive internal CRM records or other customers' information merely because they referred a client. Stripe handles card details on its own payment page and has its own responsibilities for payment, fraud prevention and legal compliance; this CRM does not retain full card details.

The selected Render application/database region is Frankfurt and the Backblaze backup region is EU Central. Provider support, correspondence and payment processing can involve other countries, including the United States. The providers publish their processing roles, subprocessors and international-transfer provisions at render.com/dpa, www.backblaze.com/company/policy/dpa-for-uk-residents, cloud.google.com/terms/data-processing-addendum, and stripe.com/legal/dpa. You may contact us for information about the safeguards applicable to your information. Regional hosting alone is not a promise that all processing stays in that region.

Retention criteria: keep unsuccessful-enquiry details only while needed to answer or follow up the requested enquiry or resolve a related complaint; review and remove or anonymise them when that purpose ends. Keep customer agreements, acceptance evidence, reports and material correspondence while needed to supply the service, deal with support or complaints, meet the actual applicable legal or insurer record requirements, or establish or defend a claim. Keep financial records for applicable accounting and tax obligations. Keep access and security logs only while needed to operate, secure or investigate access to the service. Record any actual preservation requirement before retaining information for longer. Review deletion or anonymisation when these purposes end; this is an owner-managed review, not an automatic deletion claim. Encrypted recovery copies follow the configured rolling backup retention (seven daily and four weekly recovery points); separately retained recovery or incident copies must also be reviewed when no longer necessary. Deleted information is not reused from a recovery copy for a new purpose, and a restore must respect recorded deletion decisions.

Private records use restricted access, authenticated customer access and encrypted transport. Essential session and security cookies support the customer page; this workflow does not add advertising cookies or marketing consent. A customer link does not grant access to another customer or Jack's internal CRM.

You may request access, correction, erasure or restriction and, where applicable, portability. You may object to processing based on legitimate interests. If we rely on consent for a particular purpose, you may withdraw it without affecting prior lawful processing. Rights have legal limits which we will explain where relevant. You can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/; contacting us first is optional.

Information necessary to identify the client/property, agree and supply the service and satisfy applicable obligations is needed to proceed; optional details are distinguished in the form. The CRM checks document and payment completeness but does not make solely automated decisions with legal or similarly significant effects about you. Jack reviews the quotation and practical arrangements.

Your private survey form is limited to this invitation. Contact jack@cadastral.co.uk about your information or access.