Privacy Policy

1. Who We Are

AgentHMO is a marketplace and directory for House in Multiple Occupation (HMO) properties in the United Kingdom, at agenthmo.co.uk (the "Service").

AgentHMO is a trading style of Mattison Capital Ltd, a private limited company registered in England and Wales (Company Number: 08952368), with its registered office at 7 Bell Yard, London, England, WC2A 2JR. Mattison Capital Ltd is the data controller for the personal data described in this policy and is registered with the Information Commissioner's Office under reference ZA516303.

This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have under the UK GDPR and the Data Protection Act 2018. If you are listed in our business directory and did not give us your details yourself, see section 5, which is written specifically for you.

2. Personal Data We Collect

2.1 Information you give us

• Account information: name, email address, phone number, company name, job title
• Property information: property details, addresses, postcodes, specifications, photographs and financial details you choose to enter
• Enquiries and submissions: information submitted through our sell, valuation, contact and claim forms, including where you submit a form before creating an account
• Communications: messages and correspondence you send us
• Preferences: saved searches, favourites, investor preferences and email settings

2.2 Information collected automatically

We do not track you. AgentHMO runs no analytics, no session recording and no advertising technology. We do not use Google Analytics, and we set no cookies beyond those strictly necessary to sign you in and keep the Service secure — which is why you are not asked to accept cookies. See our Cookie Policy.

The only data collected automatically is:

• Server logs: our hosting provider records IP address, browser type and the pages requested, as any web server does. These are used to keep the Service running and secure, and are not used to build a profile of you or combined with your account.
• Security signals: reCAPTCHA assesses interaction signals on our forms to tell humans from bots.

2.3 Information from other sources

• Google sign-in: if you sign in with Google, we receive your name, email address and profile picture from Google
• Public sources: for our business directory, we collect business contact details from company websites, public registers and other publicly available sources (see section 5)

3. How and Why We Use Your Data

We must have a "lawful basis" for every use of your personal data. Ours are set out below.

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and you can object at any time (see section 9).

4. Who We Share Your Data With

We do not sell your personal data. We share it with the service providers below, who process it on our instructions under a written data processing agreement.

We may also disclose personal data where required by law or in response to a valid request from a public authority, and to our professional advisers where necessary. If our business is merged, acquired or sold, personal data may transfer as part of that transaction; we will tell you if that happens.

Content you choose to publish — such as a property listing or a directory profile — is visible to other users and to the public.

5. If You Are Listed in Our Business Directory

This section applies where we hold information about you because you or your business appears in our HMO supplier directory, and you did not give us that information directly. The UK GDPR requires us to tell you the following.

• What we hold: business name and contact details, including a business contact name, email address, telephone number, address, website, LinkedIn profile and a description of the services offered.
• Where we got it: publicly available sources — principally company websites, public registers and industry listings. Some listing descriptions are drafted with the assistance of an AI tool from those public sources; they are not statements of fact about you, and we will correct anything inaccurate on request.
• Why we hold it: our legitimate interest in maintaining a useful and accurate directory of HMO service providers for people looking for one.
• Contacting you: we may email the business contact address once or twice to invite you to claim, correct or remove your listing. Every such email contains an unsubscribe link, and we keep a suppression list so that unsubscribing is permanent.

You can object to being listed at any time and we will remove the listing. Email hello@agenthmo.co.uk and we will action it without needing a reason from you.

6. International Transfers

Some of our providers are based outside the UK, as shown in section 4 — principally in the United States. Where personal data leaves the UK, we rely on one of the following safeguards:

• a UK adequacy decision, where the destination country is covered by one — including transfers to US organisations certified under the UK Extension to the EU-US Data Privacy Framework; or
• the International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses together with the UK Addendum, backed by a transfer risk assessment.

You can ask us for a copy of the safeguard applying to a particular transfer by emailing hello@agenthmo.co.uk.

7. How Long We Keep Your Data

Where we are required to keep records for longer by law, we will. When a retention period ends we delete the data or irreversibly anonymise it.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls limiting who can see what, and separate administrative permissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a personal data breach is likely to result in a risk to your rights, we will report it to the ICO within 72 hours and tell you where the law requires it.

9. Your Rights

Under UK data protection law you have the right to:

• Be informed about how we use your data — that is what this policy is for
• Access a copy of the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure of your data in certain circumstances
• Restrict processing in certain circumstances
• Data portability — receive data you gave us in a portable format
• Object to processing based on legitimate interests, and absolutely to direct marketing at any time
• Withdraw consent at any time, without affecting processing carried out beforehand

You can do some of these yourself: change your email preferences in your account settings, and delete your account from your profile page. Deleting your account removes your profile, your submissions and your record in our CRM.

For anything else, email hello@agenthmo.co.uk. We respond within one month, and will tell you if we need longer because a request is complex. Exercising your rights is free.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO), the supervisory authority for data protection in the UK. You can do so at ico.org.uk/make-a-complaint or by calling their helpline on 0303 123 1113. You do not need to contact us first, though we would welcome the chance to resolve your concern.

10. Cookies

We set only the cookies strictly necessary to run the Service. We use no analytics, tracking or advertising cookies, which is why you are not asked to accept anything. Full details are in our Cookie Policy.

11. Automated Decision-Making

We do not make decisions producing legal or similarly significant effects about you by automated means, and we do not carry out profiling of that kind.

12. Children

The Service is not intended for anyone under 18 and we do not knowingly collect data about children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Third-Party Links

The Service links to third-party websites, including those of directory listees. We are not responsible for their privacy practices and encourage you to read their policies.

14. Changes to This Policy

We may update this policy from time to time. We will change the "Last Updated" date above and, if the change is significant, tell you directly.

15. Contact Us

For any question about this policy or to exercise your rights:

• Company: Mattison Capital Ltd (trading as AgentHMO)
• Company Number: 08952368
• Registered Office: 7 Bell Yard, London, England, WC2A 2JR
• ICO Registration: ZA516303
• Email: hello@agenthmo.co.uk
• Website: agenthmo.co.uk/contact