Homeowner Privacy Notice

Mohamed Soltan, trading as Postyx ("we", "us"), is the data controller for the personal data described here. We are a sole trader registered in the United Kingdom.

• Contact: hello@postyx.uk
• Address: Flat 7, 455–455A New Cross Road, London, SE14 6TA
• ICO registration number: ZC133005

When you post a job or contact us, we collect:

• Your name
• Your email address
• Your phone number
• Your address — when you first post a job we ask for your postcode only. If you go on to book a visit, we ask for your full address (house number or name, street and postcode), because we need it to come to you
• Details of the job you describe, and any photos you choose to upload
• Your preferred date and time for a site visit, if you request one
• Basic technical data — for example that a letter's QR code was scanned, and standard website logs — so we can tell whether our letters are useful and keep the site working

If we wrote to you, we may also hold property information about that address from public sources: HM Land Registry Price Paid data (sale price, date of sale, property type, freehold or leasehold), Energy Performance Certificate records (EPC rating, floor area, age band), and local authority planning portals (planning application reference, description and decision).

• To respond to your enquiry and arrange a site visit — to take steps at your request before any contract, and our legitimate interest in running the service.
• To introduce you to a builder, once you agree — your consent / your request.
• To contact you about your job (for example to confirm a visit time, or send you your job tracking link) — legitimate interest / your request.
• To improve and measure the service (for example scan and response rates) — legitimate interest.
• To comply with our legal obligations — legal obligation.

We only sent you a letter because your property appeared in public records suggesting building work might be relevant. Our legal basis for that initial contact by post is our legitimate interest, and you can opt out at any time — see section 7.

We use trusted service providers who process data on our behalf to run the service:

• Supabase and Vercel — hosting, database, and storage for any photos you upload
• Resend — sending you emails, such as your job tracking link
• Intelliprint — printing and posting letters
• Stripe — payments, where relevant
• Google and Sentry — maps and location data, and error monitoring so we can fix faults
• OpenAI — used only for builder-facing content in our business tools. The job details and photos you send us are not sent to OpenAI

These providers act on our instructions. Some may process data outside the UK; where they do, transfers are protected by UK International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

We keep your data only as long as needed to help with your job and for a reasonable period afterwards for our records — up to 24 months after your last contact with us — then delete or anonymise it.

We keep financial records for longer where the law requires it (currently 7 years, for HMRC). If you ask us to delete your data sooner, we will — see section 6.

Under UK GDPR you have the right to:

• Access the data we hold about you
• Have it corrected if it is wrong
• Have it deleted
• Restrict or object to how we use it
• Receive it in a portable format
• Withdraw your consent at any time, where we rely on consent

To exercise any of these, email hello@postyx.uk. We will respond within one month, and there is no fee for most requests.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

You can ask us to remove your details and stop contacting you at any time — just email hello@postyx.uk and we will action it promptly.

It helps if you include your name and property address. We will remove your record and add your address to a suppression list, so we do not write to it again.

We may update this notice. The current version is always published here.