Privacy notice

The estate agency whose board you scanned is the data controller for your personal data. ScanEstate (operated by [registered company name]) provides the landing page and analytics as their data processor, under a written data processing agreement with each agency. For questions about this notice, or to exercise the rights below, contact us at info@scanestate.co.uk (we'll route requests to the relevant agency where they're the controller).

• Scan analytics — that a scan happened, the time, your device type and operating system, and a truncated IP address (the host part is zeroed before storage, so it cannot identify you). Recorded for every scan to count interest.
• A device identifier — a random ID stored in a cookie, set only if you accept analytics, so we can tell a repeat visit from a new one. Never set if you decline.
• On-page activity — whether you tapped Call, Email, Website or Share, to gauge engagement.
• Enquiry details — only the name, phone, email and preferred time you choose to submit when requesting a viewing.

• Anonymous scan & engagement analytics — to show the agent which boards and properties draw interest. Lawful basis: legitimate interests (the agency's interest in understanding demand), using data that doesn't identify you.
• The device cookie / identified analytics — lawful basis: your consent, given on the banner. You can withdraw it at any time by declining or clearing the cookie.
• Enquiry details — to arrange the viewing you asked for. Lawful basis: the agency's legitimate interests / taking steps at your request prior to a possible contract. We never use your data for advertising and never sell it.

We keep cookies to a minimum. On the buyer landing page:

• scanestate_consent — remembers your accept/decline choice. Strictly necessary. Expires after 12 months.
• scanestate_visitor — the random repeat-visit identifier. Analytics; set only if you accept. Expires after 12 months.

No non-essential cookie is set before you choose. (Agency/admin sign-in uses a strictly-necessary session cookie, which buyers never receive.)

Your enquiry details are forwarded to the branch of the estate agency that placed the board, so they can arrange your viewing. Aggregate scan analytics are shown to that same agency. We use a small number of processors to run the service — Resend (to deliver the notification email) and Supabase (database & authentication hosting). We do not share your data with any other third parties, and we do not sell it.

Our hosting is configured for the UK/EU region. Where a processor (for example, email delivery) processes data outside the UK, that transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or an adequacy decision.

Anonymous scan analytics are retained while the agency is using ScanEstate. Enquiry details are kept for as long as needed to handle your viewing and any follow-up, then deleted in line with the agency's retention policy. You can ask the agency to delete your enquiry at any time.

Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. Contact the estate agency (the controller) or us at info@scanestate.co.uk to exercise them; ScanEstate will assist as processor.

If you have a concern about how your data is handled, please contact us first. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint · helpline 0303 123 1113.