Privacy Policy
Version in force from 8 July 2026. This policy describes how personal data is processed on myhomeprice.co.uk, in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
1. Data controller
ATELIER IMAGINATION REALISATION, a société par actions simplifiée à associé unique (SASU) registered in France (951 305 226 R.C.S. Versailles; SIRET 951 305 226 00015), whose registered office is at 131 boulevard Carnot, 78110 Le Vésinet, France (“we”, “us”). As we offer services to individuals in the United Kingdom, we process personal data in accordance with the UK GDPR and the Data Protection Act 2018, as well as the EU GDPR. For any question about personal data, contact: contact@myhomeprice.fr.
2. Data we process, purposes and lawful bases
| Data | Purpose | Lawful basis |
|---|---|---|
| Email address, password (hashed) | Account creation and management, authentication | Performance of a contract (Art. 6(1)(b) UK GDPR) |
| Valuation inputs (price, postcode, property type) and valuation history | Providing the service, viewing your history | Performance of a contract (Art. 6(1)(b) UK GDPR) |
| Billing data (name, billing address, transaction history) | Payment, invoicing, accounting | Performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) UK GDPR) |
| Email address (newsletter) | Sending information about the housing market | Consent, collected by double opt-in and withdrawable at any time (Art. 6(1)(a) UK GDPR) |
| Technical logs (IP address, timestamps) | Security, abuse and fraud prevention | Legitimate interests (Art. 6(1)(f) UK GDPR) |
| Pseudonymised usage events (hashed session identifier, hashed IP, pages viewed, actions performed) | Service improvement, aggregate analytics and training of our statistical models | Legitimate interests (Art. 6(1)(f) UK GDPR) |
Card details are collected and processed exclusively by our payment provider Stripe; we never have access to them.
3. Retention periods
- Account data and valuation history: for the life of the account, then deleted within 30 days of an account deletion request;
- Accounting records and invoices: six (6) years from the end of the relevant financial year, as required by UK company and tax law;
- Newsletter email address: until consent is withdrawn (unsubscribe link or a simple request);
- Technical logs: twelve (12) months at most;
- Pseudonymised usage events: up to three (3) years.
4. Recipients and processors
Data is accessible only to authorised personnel of the controller and to our processors, strictly to the extent necessary for their tasks:
- Supabase, Inc. — database hosting and authentication;
- Stripe — payment processing and billing;
- Brevo — transactional emails and newsletter delivery;
- Vercel Inc. — application hosting.
No data is sold or rented to third parties. No decision producing legal effects is made based solely on automated processing within the meaning of Article 22 UK GDPR.
5. International transfers
Some of our processors (Vercel, Supabase, Stripe) may process data in countries outside the United Kingdom, notably the United States. These transfers are covered by appropriate safeguards under Articles 44 et seq. UK GDPR: UK adequacy regulations (including the UK-US Data Bridge) and/or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, depending on the provider.
6. Security
We implement appropriate technical and organisational measures, including: encryption in transit (TLS), password hashing, database-level access rules (row-level security), logging, and data minimisation. In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with Article 34 UK GDPR.
7. Cookies
The site only uses cookies strictly necessary for the service to work, which are exempt from consent under the Privacy and Electronic Communications Regulations (PECR) and ICO guidance:
- Authentication session cookie (Supabase) — keeping you signed in; duration: session/renewal;
- Language preference cookie — remembering your chosen language; duration: 1 year.
No advertising, third-party analytics or tracking cookies are set. That is why no cookie consent banner is shown.
8. Your rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights over your data: access, rectification, erasure, restriction of processing, portability, objection (including to direct marketing), and withdrawal of consent at any time.
You can exercise these rights by email to contact@myhomeprice.fr. We respond within one (1) month, extendable by two (2) months for complex requests. Proof of identity may be requested where there is reasonable doubt. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk).
9. Changes
This policy may be updated to reflect changes to the service or the law. In the event of a substantial change, account holders will be informed by email or by a visible notice on the site. The version date appears at the top of this document.