Privacy policy
Effective Date: 12 September 2026
Privacy policy
Effective Date: 12 September 2026
1. Introduction
Welcome to AUC Property ("we," "our," or "us"). Your privacy is important to us, and we are committed to protecting your personal data.
AUC Property is the trading name of AUC PROPERTY INVESTMENTS LIMITED, a company registered in England and Wales under company number 14795181, whose registered office is at 24 Polegate, Luton, England, LU2 8AJ.
This Privacy Policy outlines how we collect, use, store, and protect your data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to our websites at aucpropertyinvestments.co.uk and aucproperty.co.uk, to our advertising and enquiry forms, to our social media and messaging channels, and to the strategy sessions we hold with you.
Because we help people consider property investment opportunities, some of what you share with us is financial information — for example, the capital you have available, your income position, and what you are trying to achieve. Financial information is not "special category data" under the UK GDPR, but it is sensitive and we treat it as confidential, limiting access to those who need it.
Our services are intended for adults. We do not knowingly collect personal data from anyone under 18.
2. Data We Collect
We may collect the following types of personal data:
Personal Identifiers: Name, email address, telephone number, postal address or location, employment or business role, and other contact details.
Financial and Suitability Data: Information you give us so we can assess whether an opportunity is suitable for you and worth discussing — for example the capital you have available to invest, your investment timeframe and objectives, your previous property or investment experience, and your employment or business situation. You choose what you share with us. We ask only for what we need in order to have a useful conversation.
Messaging and Social Media Data: Where you contact us or respond to our advertising through Instagram, Facebook Messenger, WhatsApp or an automated messaging flow (we use ManyChat), we collect your messages to us, your public social media profile name and handle, and the responses you give to any questions asked in that conversation.
Appointment and Call Data: Details of the strategy sessions you book with us, including your booking details, attendance, and our notes. We record our strategy sessions. Where we do, we hold the audio or video recording, any transcript, and any automated summary of the call. We tell you at the start of the call that it is being recorded, and you can ask us not to record, or to delete the recording afterwards, without affecting the help we give you.
Usage and Advertising Data: Information about how you use our websites and enquiry forms, such as IP address, device and browser type, pages visited, time spent on our site, the advertisement or link you arrived from, and campaign tracking parameters (for example UTM tags and click identifiers such as Meta's fbclid).
Marketing and Communication Data: Your preferences for receiving marketing from us, the emails and messages we send you and whether you open or click them, and your responses to our advertising.
Training, Quality and Market Research Data: We may collect and analyse data for training, quality improvement, and market research purposes.
We do not ask you for, and you should not send us, special category data such as health information. We do not carry out credit checks.
3. How We Use Your Data
We use the data collected for the following purposes:
‣ To respond to enquiries submitted through our websites, advertising, messaging channels and enquiry forms.
‣ To assess whether a strategy session is likely to be worthwhile for you, and to arrange and hold that session.
‣ To understand your objectives and circumstances well enough to discuss opportunities that are relevant to you.
‣ To keep an accurate record of our conversations with you, including call recordings, transcripts and notes.
‣ To provide and administer our services if you decide to proceed with us.
‣ To analyse and improve our website's performance, our advertising, and your experience of dealing with us.
‣ To measure the performance of our advertising and attribute enquiries to the campaigns that generated them.
‣ To ensure compliance with our legal, regulatory, tax, accounting and insurance obligations.
‣ To conduct training, quality control and market research to improve our service.
‣ To communicate with you about our services, offers and updates, where you have consented or where we are otherwise permitted to do so.
We do not make decisions about you by automated means alone. Where a qualification question or automated messaging flow is used, the outcome is reviewed by a person.
4. Legal Basis for Processing
We process your personal data on the following bases under Article 6 of the UK GDPR:
Consent: Where you have given consent — for example, to receive marketing emails or text messages, to non-essential cookies, or to the use of a call recording beyond our own internal record.
Contractual Necessity: Where processing is necessary to provide our services to you, or to take steps at your request before entering into a contract — including arranging and holding your strategy session.
Legitimate Interest: To operate, promote and improve our business, to follow up on enquiries, to keep records of our conversations, to measure and improve our advertising, to train our team, and to keep our systems secure. We balance these interests against your rights, and you can object at any time (see section 7).
Legal Obligation: Where we are required to process data to comply with applicable law, including tax and accounting obligations.
5. Data Retention
We retain your data only as long as necessary to fulfil the purposes outlined in this policy or as required by law. Once no longer needed, data is securely deleted or anonymised.
Enquiry data: Where you enquire but do not proceed with us, we retain your details for [24 MONTHS] so we can respond to and follow up on your enquiry, after which they are deleted or anonymised.
Call recordings, transcripts and notes: Retained for [12 MONTHS], or for longer where we need them as a record of what was discussed and agreed. You can ask us to delete a recording sooner.
Client records: Where you proceed with us, we retain records relating to our dealings with you for [6 YEARS] after the end of our relationship, in line with the limitation period for contractual claims and our tax and accounting obligations.
Marketing data: Retained until you withdraw your consent or object to receiving marketing communications, after which we keep a minimal record of your objection so that we do not contact you again.
6. Data Sharing & Third Parties
We do not sell or rent your personal data. However, we may share data with:
Service Providers: Third-party companies that help us run and improve our business. These currently include our website and CRM platform (GoHighLevel / LeadConnector), our automated messaging platform (ManyChat), our website security and performance provider (Cloudflare), and our Booking Tool (Google Meet), our email provider (gmail), and our call recording tool Fathom.
Advertising and Analytics Platforms: Meta Platforms (Facebook and Instagram) and any other platforms we advertise on, so that we can measure and improve the performance of our advertising. See section 8.
Professional Advisers: Our accountants, insurers and legal advisers, where necessary to run our business, obtain advice or manage a claim.
Partners Involved in a Specific Opportunity: If you decide to proceed, we may need to share your details with the parties involved in that transaction — for example solicitors, brokers, letting or management agents, or a vendor. We will tell you who they are before we do this.
Legal Authorities: If required by law or to protect our rights.
We ensure that all third parties comply with data protection law and take appropriate security measures to protect your data. Where any provider stores or processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
7. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
Right to Access: Request a copy of your personal data, including any call recordings we hold of you.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data, subject to legal exceptions — note that we may need to retain certain records for the periods described in section 5.
Right to Restrict Processing: Limit how we use your data in certain circumstances.
Right to Data Portability: Request a transfer of your data to another provider.
Right to Object: Object to processing based on legitimate interests, and to processing for direct marketing at any time.
Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time. You can unsubscribe from marketing using the link in any email, by replying STOP to a text message, or by contacting us.
To exercise your rights, please contact us at [email protected]. We will respond within one month.
8. Cookies & Tracking Technologies
We use cookies and similar technologies to run our website, improve your experience and gather analytics.
We also use advertising and analytics tools to measure how our advertising and enquiry forms perform. This includes the Meta pixel and Meta's Conversions API, which tell Meta when someone who clicked one of our advertisements takes an action on our site, so that we can measure results and improve our targeting. Where we send information to Meta in this way it is hashed before transmission. We also use Cloudflare for website security and performance, which collects limited technical information about visits.
You can control cookie settings through your browser preferences and through the cookie controls on our website. Blocking non-essential cookies will not stop you using the site.
9. Data Security & Confidentiality
We implement industry-standard security measures to protect your data from unauthorised access, alteration, disclosure or destruction. Access to your information, including anything you tell us about your finances and any recording of your call, is limited to the people who need it in order to deal with your enquiry or provide our services.
However, no online transmission is 100% secure, so we encourage users to take their own precautions.
10. Contact Information
If you have any questions or concerns regarding this Privacy Policy or how we process your data, please contact us at:
Email: [email protected]
Website: aucpropertyinvestments.co.uk
Address: 24 Polegate, Luton, England, LU2 8AJ
AUC PROPERTY SOURCING LIMITED (company number 15064477) is the data controller responsible for your personal data.
ICO Registration Number: C2031829
11. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so that we can put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
12. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date." Continued use of our website after such changes constitutes your acceptance of the updated policy.
By using our website and our services, you acknowledge that you have read and understood this Privacy Policy.
1. Introduction
Welcome to AUC Property ("we," "our," or "us"). Your privacy is important to us, and we are committed to protecting your personal data.
AUC Property is the trading name of AUC PROPERTY INVESTMENTS LIMITED, a company registered in England and Wales under company number 14795181, whose registered office is at 24 Polegate, Luton, England, LU2 8AJ.
This Privacy Policy outlines how we collect, use, store, and protect your data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to our websites at aucpropertyinvestments.co.uk and aucproperty.co.uk, to our advertising and enquiry forms, to our social media and messaging channels, and to the strategy sessions we hold with you.
Because we help people consider property investment opportunities, some of what you share with us is financial information — for example, the capital you have available, your income position, and what you are trying to achieve. Financial information is not "special category data" under the UK GDPR, but it is sensitive and we treat it as confidential, limiting access to those who need it.
Our services are intended for adults. We do not knowingly collect personal data from anyone under 18.
2. Data We Collect
We may collect the following types of personal data:
Personal Identifiers: Name, email address, telephone number, postal address or location, employment or business role, and other contact details.
Financial and Suitability Data: Information you give us so we can assess whether an opportunity is suitable for you and worth discussing — for example the capital you have available to invest, your investment timeframe and objectives, your previous property or investment experience, and your employment or business situation. You choose what you share with us. We ask only for what we need in order to have a useful conversation.
Messaging and Social Media Data: Where you contact us or respond to our advertising through Instagram, Facebook Messenger, WhatsApp or an automated messaging flow (we use ManyChat), we collect your messages to us, your public social media profile name and handle, and the responses you give to any questions asked in that conversation.
Appointment and Call Data: Details of the strategy sessions you book with us, including your booking details, attendance, and our notes. We record our strategy sessions. Where we do, we hold the audio or video recording, any transcript, and any automated summary of the call. We tell you at the start of the call that it is being recorded, and you can ask us not to record, or to delete the recording afterwards, without affecting the help we give you.
Usage and Advertising Data: Information about how you use our websites and enquiry forms, such as IP address, device and browser type, pages visited, time spent on our site, the advertisement or link you arrived from, and campaign tracking parameters (for example UTM tags and click identifiers such as Meta's fbclid).
Marketing and Communication Data: Your preferences for receiving marketing from us, the emails and messages we send you and whether you open or click them, and your responses to our advertising.
Training, Quality and Market Research Data: We may collect and analyse data for training, quality improvement, and market research purposes.
We do not ask you for, and you should not send us, special category data such as health information. We do not carry out credit checks.
3. How We Use Your Data
We use the data collected for the following purposes:
‣ To respond to enquiries submitted through our websites, advertising, messaging channels and enquiry forms.
‣ To assess whether a strategy session is likely to be worthwhile for you, and to arrange and hold that session.
‣ To understand your objectives and circumstances well enough to discuss opportunities that are relevant to you.
‣ To keep an accurate record of our conversations with you, including call recordings, transcripts and notes.
‣ To provide and administer our services if you decide to proceed with us.
‣ To analyse and improve our website's performance, our advertising, and your experience of dealing with us.
‣ To measure the performance of our advertising and attribute enquiries to the campaigns that generated them.
‣ To ensure compliance with our legal, regulatory, tax, accounting and insurance obligations.
‣ To conduct training, quality control and market research to improve our service.
‣ To communicate with you about our services, offers and updates, where you have consented or where we are otherwise permitted to do so.
We do not make decisions about you by automated means alone. Where a qualification question or automated messaging flow is used, the outcome is reviewed by a person.
4. Legal Basis for Processing
We process your personal data on the following bases under Article 6 of the UK GDPR:
Consent: Where you have given consent — for example, to receive marketing emails or text messages, to non-essential cookies, or to the use of a call recording beyond our own internal record.
Contractual Necessity: Where processing is necessary to provide our services to you, or to take steps at your request before entering into a contract — including arranging and holding your strategy session.
Legitimate Interest: To operate, promote and improve our business, to follow up on enquiries, to keep records of our conversations, to measure and improve our advertising, to train our team, and to keep our systems secure. We balance these interests against your rights, and you can object at any time (see section 7).
Legal Obligation: Where we are required to process data to comply with applicable law, including tax and accounting obligations.
5. Data Retention
We retain your data only as long as necessary to fulfil the purposes outlined in this policy or as required by law. Once no longer needed, data is securely deleted or anonymised.
Enquiry data: Where you enquire but do not proceed with us, we retain your details for [24 MONTHS] so we can respond to and follow up on your enquiry, after which they are deleted or anonymised.
Call recordings, transcripts and notes: Retained for [12 MONTHS], or for longer where we need them as a record of what was discussed and agreed. You can ask us to delete a recording sooner.
Client records: Where you proceed with us, we retain records relating to our dealings with you for [6 YEARS] after the end of our relationship, in line with the limitation period for contractual claims and our tax and accounting obligations.
Marketing data: Retained until you withdraw your consent or object to receiving marketing communications, after which we keep a minimal record of your objection so that we do not contact you again.
6. Data Sharing & Third Parties
We do not sell or rent your personal data. However, we may share data with:
Service Providers: Third-party companies that help us run and improve our business. These currently include our website and CRM platform (GoHighLevel / LeadConnector), our automated messaging platform (ManyChat), our website security and performance provider (Cloudflare), and our Booking Tool (Google Meet), our email provider (gmail), and our call recording tool Fathom.
Advertising and Analytics Platforms: Meta Platforms (Facebook and Instagram) and any other platforms we advertise on, so that we can measure and improve the performance of our advertising. See section 8.
Professional Advisers: Our accountants, insurers and legal advisers, where necessary to run our business, obtain advice or manage a claim.
Partners Involved in a Specific Opportunity: If you decide to proceed, we may need to share your details with the parties involved in that transaction — for example solicitors, brokers, letting or management agents, or a vendor. We will tell you who they are before we do this.
Legal Authorities: If required by law or to protect our rights.
We ensure that all third parties comply with data protection law and take appropriate security measures to protect your data. Where any provider stores or processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
7. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
Right to Access: Request a copy of your personal data, including any call recordings we hold of you.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure: Request deletion of your personal data, subject to legal exceptions — note that we may need to retain certain records for the periods described in section 5.
Right to Restrict Processing: Limit how we use your data in certain circumstances.
Right to Data Portability: Request a transfer of your data to another provider.
Right to Object: Object to processing based on legitimate interests, and to processing for direct marketing at any time.
Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time. You can unsubscribe from marketing using the link in any email, by replying STOP to a text message, or by contacting us.
To exercise your rights, please contact us at [email protected]. We will respond within one month.
8. Cookies & Tracking Technologies
We use cookies and similar technologies to run our website, improve your experience and gather analytics.
We also use advertising and analytics tools to measure how our advertising and enquiry forms perform. This includes the Meta pixel and Meta's Conversions API, which tell Meta when someone who clicked one of our advertisements takes an action on our site, so that we can measure results and improve our targeting. Where we send information to Meta in this way it is hashed before transmission. We also use Cloudflare for website security and performance, which collects limited technical information about visits.
You can control cookie settings through your browser preferences and through the cookie controls on our website. Blocking non-essential cookies will not stop you using the site.
9. Data Security & Confidentiality
We implement industry-standard security measures to protect your data from unauthorised access, alteration, disclosure or destruction. Access to your information, including anything you tell us about your finances and any recording of your call, is limited to the people who need it in order to deal with your enquiry or provide our services.
However, no online transmission is 100% secure, so we encourage users to take their own precautions.
10. Contact Information
If you have any questions or concerns regarding this Privacy Policy or how we process your data, please contact us at:
Email: [email protected]
Website: aucpropertyinvestments.co.uk
Address: 24 Polegate, Luton, England, LU2 8AJ
AUC PROPERTY SOURCING LIMITED (company number 15064477) is the data controller responsible for your personal data.
ICO Registration Number: C2031829
11. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so that we can put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
12. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date." Continued use of our website after such changes constitutes your acceptance of the updated policy.
By using our website and our services, you acknowledge that you have read and understood this Privacy Policy.
©2026 All right reserved