Privacy policy

Last updated: 26 September 2026

This policy explains what personal data Property99 ("Property99", "we", "us", "our"), the operator of property99.co.uk (the "Site"), collects about you, why, who can see it, how long we keep it, and the rights you have. It is written for the people who use a property advertising site: private sellers and landlords, estate and letting agents, and the buyers and tenants who contact them.

1. The short version

  • We collect what we need to run a property advertising site: your account details, the adverts you place, the enquiries you send and receive, and technical data about how the Site is used.
  • We use it to show adverts, to put advertisers and enquirers in touch, to keep the Site safe from fraud, and to meet our legal duties. We do not sell personal data and we do not show advertising networks anything about you.
  • Other members see only what a property advert needs: the advert itself, your display name or trading name, and the messages you choose to send. Your email address, phone number and address are not shown unless you put them in an advert or a message.
  • You can download everything we hold about you and delete your account from your account page at any time.

2. Who we are

property99.co.uk is operated under the Property99 name. We are the controller of the personal data described in this policy and we follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations. We are an online advertising venue: property is sold and let between members, and we are not a party to those dealings.

Privacy contact: [email protected], or open a support ticket.

3. One account across our sites

property99.co.uk is run by the same operator as marketcity.co.uk, zproperty.co.uk and property99.co.uk. The three websites share one membership database and one pool of property adverts. The account you create on any of them works on all three, a property you advertise on one of them is shown on the others as well, and when you sign in on one site we may sign you in on another one you open, so that you do not have to sign in twice. This policy applies in the same way on each site, and a reference to the Site includes each of them.

4. What we collect

  • Account details: email address, password (stored only as a one way hash), display name, and when you complete your profile your first and last name, phone number, town and date of birth.
  • Business details if you add an agency or agent profile: trading name, company number, business address, logo, redress scheme membership, client money protection scheme, anti-money laundering registration number, letting agent registration, memberships and the names of your negotiators or branches. These are shown publicly on your adverts because the law requires agents to display them.
  • Adverts: everything you enter about a property, including the address or area, price or rent, photographs, floor plans, energy rating, council tax band, tenure, deposit and the other attributes on the form, together with the date you posted it and the site you posted it on.
  • Enquiries and messages: the messages you send and receive through the Site, including any attachments, and the time they were sent and read.
  • Watchlists, saved searches and alerts you set up, and the searches you run while signed in, which we use to show you relevant properties.
  • Reviews you leave or receive.
  • Support tickets and any correspondence with us.
  • Technical data: IP address, the country it belongs to, device and browser type, pages visited, and the date and time of each visit and sign in.
  • Payment records if you buy a featured placement: the amount, date and a reference from the payment provider. We do not see or store card numbers.

5. Why we use it and our lawful basis

  • To provide the Site (performance of our contract with you): creating your account, publishing your adverts on this Site and on the sites we operate together, delivering messages between members, showing watchlists and alerts, and answering support requests.
  • To keep the Site and its members safe (our legitimate interests, and the legal duties on us): checking sign ups and sign ins against network intelligence and block lists, holding sign ups from outside the United Kingdom for review, spotting fake adverts, rental fraud and scams, moderating content and enforcing our terms.
  • To meet legal obligations: keeping records that the law requires, responding to lawful requests from the police, Trading Standards, a redress scheme, HM Revenue and Customs or a court, and handling your data protection requests.
  • To tell you what you asked to be told (contract and legitimate interests): emails about your account, your adverts, new messages, property alerts and important changes to the Site. Notifications about messages are limited so that they cannot flood your inbox.
  • To understand how the Site is used (legitimate interests): aggregate statistics that do not identify you.
  • With your consent where we ask for it, for example browser push notifications, which you can switch off in your browser at any time.

6. Who can see your data

  • Other members and the public: your adverts, your display name or trading name, your business profile details, your reviews, and your public profile page. Adverts are public pages and can be indexed by search engines on the site that is their home. Messages are private between the two members.
  • The advertiser or enquirer you contact: sees your display name and the message you send. If you include your phone number or email in a message, they see that too.
  • Service providers that process data for us under contract: our hosting provider in the United Kingdom, Cloudflare for content delivery and protection, Brevo for sending email, a network intelligence service for fraud checks, Meilisearch for search, and a payment provider if you buy a featured placement. They act on our instructions and may not use your data for their own purposes.
  • Google and Meta only if you choose to sign in with Google or Facebook, as described below.
  • Authorities and others where the law requires or permits: the police, Trading Standards, a redress scheme, a court, or a party who shows a genuine legal right to the data. We tell you when we can.
  • A successor operator if the Site is transferred, under the same protections.

7. Sign in with Google or Facebook

If you choose to sign in with Google or Facebook we receive your name, your email address and a link to your profile picture from that provider, and nothing else. We use them to create or match your account. We do not post to your account, read your contacts or receive your password. Each of our sites asks the provider for its own sign in, so a sign in on one site is always returned to that same site. You can stop using the provider at any time and set a password instead with the forgotten password link.

8. Cookies

We use only the cookies needed to run the Site: a session cookie that keeps you signed in, a remember me cookie if you tick that option, a cookie that remembers you have seen the cookie notice, and short lived cookies used by our security checks and by the sign in hand over between our own sites. We do not use advertising cookies, and we do not allow third parties to place tracking cookies through the Site. Cloudflare sets a cookie to tell real visitors from bots.

9. How we keep your data safe

All traffic to the Site is encrypted. Passwords are stored as one way hashes. Access to the database is limited to the operator and is logged. Uploaded files are scanned and served in a way that prevents them running code. We keep backups in encrypted form. No system is perfectly secure, so we also ask you to use a strong password and to tell us at once if you think your account has been used by someone else.

10. How long we keep it

  • Your account and its data: for as long as the account is open.
  • Adverts: while live, and then in your account history until you delete them or close your account.
  • Messages: until either member deletes the conversation or closes their account.
  • Security records (IP addresses, sign in history, fraud checks, removed content, closed accounts): up to two years, so that a banned member cannot simply return.
  • Payment records: six years, as tax law requires.
  • When you delete your account, your personal details are removed or anonymised at once and your adverts and messages are deleted. Backups roll over within thirty days.

11. Your rights and how to use them

  • Access and portability: download a copy of your data in a machine readable file from your account page.
  • Correction: change your details on your account page at any time.
  • Erasure: delete your account and all of your data from your account page. We keep only what the law obliges us to keep, such as payment records and a minimal record of a ban.
  • Objection and restriction: you may object to processing based on our legitimate interests, and ask us to restrict processing while we consider it.
  • Automated decisions: our fraud checks hold some sign ups for a human review; no decision with a legal effect on you is made purely by a machine. You may ask us to review any hold or refusal.
  • Complaints: you can complain to the Information Commissioner's Office at ico.org.uk, but please contact us first so that we can put things right.

To use any right, email [email protected] or open a support ticket. We answer within one month.

12. International transfers

Your data is stored in the United Kingdom. Some of our service providers operate globally; where data leaves the United Kingdom it is protected by the UK International Data Transfer Agreement or an adequacy decision, or by the provider's own approved safeguards.

13. Information from other sources and the checks we run

  • Country and network checks: every request to the Site carries the visitor's approximate country. When you sign up or sign in we look up your IP address with a network intelligence service to see whether it belongs to a VPN, proxy, Tor exit or hosting company, and we compare it with published block lists. Sign ups from outside the United Kingdom are held for review by an admin, and addresses that belong to anonymising services are refused. These checks protect members from rental and sales fraud; you can ask us to review any decision.
  • Sign in providers: if you use Google or Facebook we receive your name, email address and profile picture link from them.
  • Public registers: for agent accounts we may check publicly available registers, such as the redress schemes' member lists or Companies House, to confirm a business exists. We do not verify property ownership or title.

14. Marketing and notifications

We send emails about your account, your adverts, your messages and the property alerts you set up. We do not send marketing on behalf of anyone else. You can turn off property alerts and message notifications in your account settings; essential emails about your account and legal notices cannot be turned off while the account is open.

15. Other members and your safety

Once you share information with another member, for example in a message or at a viewing, that member holds it under their own responsibility. Be careful what you share before you have verified who you are dealing with. Never send identity documents, bank details or payments to reserve a property you have not seen. Report anything suspicious to us through the report link.

16. Links to other websites

Adverts and pages may link to mortgage, conveyancing, referencing, mapping or agent websites that we do not control. Their privacy policies apply once you leave the Site.

17. Your account security

Use a password you do not use anywhere else, keep it private, and sign out on shared devices. Tell us at once if you believe someone else has used your account. We never ask for your password by email.

18. If something goes wrong

If a security incident affects your personal data we will tell you and the Information Commissioner's Office where the law requires it, and we will explain what happened and what we are doing about it.

19. Children

The Site is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has created an account, tell us and we will remove it.

20. Changes to this policy

We may update this policy from time to time. The date at the top shows the latest version. For material changes we tell members by email or by a notice on the Site.

21. Contact

Email: [email protected]
Support: property99.co.uk/support

Last updated 26 September 2026

We only use essential cookies to keep you signed in and the site secure. No tracking or advertising cookies. Cookie policy