Privacy

There is no way to upload a photograph here, so we never hold one. The pictures you take stay on your own device.

The sentence you write describing your property is not used to train any model, ours or anybody else's.

Where you have got to on a list is kept in your own browser, not on a server.

We do not sell personal data and we do not share it for advertising.

The controller is the company that operates this site. Its full name, registered number and registered office are published on the legal information page.

For anything about your data, write to support@drumg3square.shop or ring +44 7400578832.

• Account data — your email address, a hashed password, and the plan you are on. Collected so that you can sign in and so that we can bill you. Lawful basis: performance of a contract.
• Billing data — the fact and amount of a payment, and a reference for it. Card numbers are entered with a third-party payment service and never reach this site. Lawful basis: performance of a contract, and a legal obligation for tax records.
• The property description you type — the one sentence used to work out the shape of the place. Lawful basis: performance of a contract.
• Technical data — IP address, browser and pages requested, in server logs. Lawful basis: legitimate interests, being the security and reliability of the service.
• Anything you write to us — kept so that we can answer you. Lawful basis: legitimate interests.

Photographs. There is no upload channel in the product at all. This is not a setting that is switched off; the capability does not exist.

The address of your property. Nothing asks for it and nothing needs it.

Which rows you ticked, and what you noted. That is kept in your browser's local storage on the device you used, and is not sent anywhere.

Special category data, and anything about children.

Your property description is not used to train any model. It is not used to fine-tune one, it is not added to a training set, and it is not passed to a model provider for that purpose.

Where a model is configured by the operator, the description is sent to it for one narrow job — working out how many bedrooms, how many floors — and for nothing else. With no model configured, that job is done in your browser and the sentence never leaves your device.

There is no setting you need to find and switch off. This is how it works for everyone.

• Account data — until you close your account, then 30 days.
• Property descriptions — 30 days, then deleted.
• Billing records — six years, as tax law requires.
• Server logs — 90 days.
• Correspondence with us — 24 months.

Where you have got to on a list is kept on your device until you clear your browser's storage. We cannot delete it for you because we cannot see it.

The hosting provider that serves this site, the payment service that takes payments, and — where the operator has configured one — a model provider that receives only the property description. Each acts on our instructions under a written contract.

We do not sell personal data, we do not share it for advertising or profiling, and we do not use automated decision-making that produces legal effects.

We would disclose data if the law required it, and we would tell you unless we were forbidden to.

Data may be processed outside the United Kingdom. Where it is, the transfer is made under the UK International Data Transfer Agreement, or under the UK Addendum to the European Commission's standard contractual clauses, together with a transfer risk assessment.

Under the UK GDPR and the Data Protection Act 2018 you have the right to be told what we hold, to get a copy of it, to have it corrected, to have it deleted, to have its use restricted, to receive it in a portable form, and to object to processing carried out on the basis of legitimate interests.

Write to support@drumg3square.shop and we will answer within one month. There is no charge.

If you are in California, you also have the right to know what is collected, to have it deleted, to correct it, and to opt out of any sale or sharing of personal information. We do not sell or share personal information, and we honour Global Privacy Control signals.

If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office, which is the United Kingdom's data protection regulator, at ico.org.uk. You can also complain to the regulator in the country you live in.

You do not have to come to us first, though we would rather you did — it is usually quicker.

The site is served over HTTPS with HTTP Strict Transport Security. Passwords are stored hashed. Card details never reach this site.

No system is perfect. If we ever had a breach that was likely to be a risk to you, we would tell the Information Commissioner's Office within 72 hours and tell you without undue delay.

If this policy changes in a way that affects you, registered users will be told by email at least 14 days beforehand, and the date at the top of this page will change.