Privacy policy
Short version: we collect as little as possible, we never sell it, and we don't track you around the web.
1. Who we are
The owner of Social & Sold ("we", "us") runs Social & Sold and is the controller of the personal data described here. Contact: hello@socialandsold.com. Postal address: Address to be added before launch.
2. What we collect
- Purchase and account details: your name, email, billing country and what you bought. Card and wallet details go straight to our payment partner; we never see or store them.
- Email sign-ups: first name, email and the market you sell in, when you ask for the free kit or updates.
- Messages: what you send us by email or the contact form.
- Technical logs: IP address, browser type, pages requested and time, recorded by our hosting provider and security tools to keep the site safe.
3. What we don't collect
- No analytics or advertising cookies, no tracking pixels, no fingerprinting.
- Our free tools run entirely in your browser. Anything you type, calculate or upload there (including a headshot in the brand preview) stays on your device.
- We don't sell or rent personal information, and we don't share it for cross-context behavioural advertising.
4. Why we use it (and our legal bases in the UK and EU)
| Purpose | Legal basis |
|---|---|
| Deliver what you bought, give access, send receipts and account emails | Contract |
| Send the free kit and marketing emails | Consent (withdraw any time with one click) |
| Answer your messages | Legitimate interests |
| Keep the site secure and prevent fraud | Legitimate interests |
| Keep tax and accounting records | Legal obligation |
5. Who processes data for us
We use a small number of service providers under contracts that limit how they use your data:
- Payment partner (merchant of record), which processes payments and handles sales tax and VAT. It acts as an independent controller for payment data under its own privacy policy.
- Email service for the free kit, receipts and newsletters.
- Website hosting and security for the site, member area and logs.
Some providers may process data outside your country, including in the United States. Where UK or EU data leaves those regions we rely on appropriate safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
6. How long we keep it
- Purchase records: 6 years, for tax law.
- Email list: until you unsubscribe, then removed within 30 days (we keep a suppression record so we don't email you again).
- Messages: up to 2 years.
- Security logs: up to 30 days unless needed to investigate an incident.
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent. Email hello@socialandsold.com from the address we have on file. We reply within 30 days and never charge for reasonable requests.
UK residents can complain to the Information Commissioner's Office (ico.org.uk). EU residents can contact their local data protection authority. California and other US state residents have similar rights to know, delete and correct, and the right not to be discriminated against for using them.
8. Security
The site uses HTTPS everywhere, strict security headers, two-factor sign-in for every admin account, a web application firewall, automatic updates and daily off-site backups. We keep personal data to the minimum we need.
9. Children
Our products are for real estate professionals. We don't knowingly collect data from anyone under 18.
10. Changes
If we change this policy in a way that matters, we'll update the date above and tell members by email before it takes effect.