Privacy notice

What we collect

We only collect what you type into our forms:

• Landlords: your contact details and details of the property you offer.
• Councils: your name, work contact details, authority and role, and the anonymised demand information you choose to share. We ask councils not to send personal data about households.
• Investors: your contact details, your answers to the statutory investor statement, your typed signature, and the interests you register.
• Everyone: the page you sent the form from, the date and time, and the outcome of our automated spam check.

Why we use it, and our lawful basis

• To reply to your enquiry and discuss working together: our legitimate interests, or steps before entering a contract with you.
• To send you updates, only if you ticked the box to receive them: your consent, which you can withdraw at any time.
• To keep a record of investor statements and risk warnings you accepted: our legal obligations under financial promotion rules and our legitimate interest in showing we followed them.
• To protect our forms from spam and abuse: our legitimate interests.

Who we share it with

We do not sell your data. We use Cloudflare to host this website, store form submissions and check for spam, and Resend to deliver notification emails to our team. Both act on our instructions. Some processing may take place outside the UK under the safeguards required by UK data protection law.

How long we keep it

Enquiries are kept for 24 months after our last contact with you, unless we go on to work together. Investor statements and related records are kept for six years so that we can show we met our obligations. Update-list details are kept until you unsubscribe.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to our use of it, or withdraw consent. Email privacy@bundool.com and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.