Privacy policy · Pavilion

Who we are

We are the data controller for the personal data described in this policy. Where we provide tools or services to an agent, broker or franchisor and process personal data on their instructions (for example data they manage within their account), we may act as a data processor, and in that case their own privacy notice governs how that data is used.

Company — Aidvante Consulting Group Ltd, a company registered in England and Wales under company number 12102627
Registered office — 17-21 George Street, Croydon, England, CR0 1LA
Contact for privacy matters — contact@propertypavilion.co.uk

We are committed to protecting your personal data and handling it in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who this policy applies to

This policy applies to everyone who uses Pavilion, including:

Buyers and tenants browsing listings, saving listings, enquiring or booking viewings
Sellers and landlords (individuals, agents, brokers and franchisors) who create listings
Visitors to our website generally

Pavilion is a marketplace and advertising platform. We connect people who want to buy, sell, let or rent commercial property, businesses, franchises and homes. We are not a party to any sale, letting or transaction between users.

2. The personal data we collect

We collect information you give us, and some information automatically when you use the Platform.

Account data — name, email address, phone number, password and, for agents, brokers and franchisors, business name and details.
Listing data — information you publish about a property or business, which may include location or postcode, photographs, asking price, premium, rent, tenure, lease years remaining, planning use class, size, and commercial figures such as turnover and net profit.
Enquiry and viewing data — when you contact a seller or book a viewing, your name, phone number, email address, chosen viewing date and any message you send.
Payment data — when you pay for a listing, featured placement or subscription. Card details are handled directly by our payment processor (see Section 7); we do not store full card numbers.
Support and reports — information you provide when you contact us or report a listing.
Technical data (collected automatically) — IP address, device and browser type, operating system, and approximate location derived from your IP or the area you search.
Usage data (collected automatically) — pages viewed, searches run, listings saved and how you interact with the Platform.
Cookies and similar technologies (collected automatically) — see our separate Cookie policy.

We do not intentionally collect special category data (such as health or ethnicity). Please do not include such information in listings or messages.

3. How and why we use your data (legal bases)

Each purpose below is followed by its legal basis under UK GDPR.

Create and manage your account — performance of a contract.
Publish, display and moderate listings — performance of a contract; legitimate interests (running a trustworthy marketplace).
Pass enquiries and viewing requests to sellers and agents — performance of a contract; legitimate interests.
Take payment and provide paid features — performance of a contract.
Verify sellers and agents, and prevent fraud — legitimate interests; legal obligation.
Provide customer support — performance of a contract; legitimate interests.
Send service messages (for example enquiry alerts and billing notices) — performance of a contract.
Send marketing about Pavilion — consent, or legitimate interests where permitted.
Analytics to improve the Platform — consent (for non-essential cookies); legitimate interests.
Comply with legal and regulatory obligations — legal obligation.

Where we rely on legitimate interests, we have balanced those interests against your rights. You can ask us for more detail on this balancing at any time.

4. Marketing

We will only send you marketing emails where you have consented, or where permitted by law (for example to existing customers about similar services). You can opt out at any time using the unsubscribe link in any marketing email or by contacting us. Opting out of marketing does not stop essential service messages (such as billing or enquiry notifications).

5. Listings are public

If you publish a listing, the content you choose to include will be publicly visible on the Platform and may appear in search engines, on social media when shared, and in link previews. Do not include personal data you do not want to be public. Contact details you add to a listing are shared with interested buyers and tenants.

If you are selling a business or franchise, you control what you publish. You can keep sensitive commercial information (such as detailed accounts, or the exact location of a confidential sale) private until a buyer agrees a confidentiality agreement (NDA). We are not responsible for information you choose to make public in a listing.

6. When enquiries are shared

When you send an enquiry or request a viewing, the details you provide (including your name, phone and email) are shared with the relevant seller, landlord, agent or broker so they can respond to you. They become a separate data controller for that information and are responsible for their own use of it.

We share personal data with the people and organisations below. Our service providers act as processors on our instructions, except where we say otherwise.

Sellers, agents, brokers and franchisors — to handle your enquiries and viewings (see Section 6).
Hosting and infrastructure — Vercel Inc. hosts the Platform and uploaded photographs, and Neon hosts our database, both in data centres in London.
Payment processing — Stripe.
Mapping — maps on search and listing pages are loaded from OpenStreetMap tile servers. Your browser sends its IP address to those servers when a map loads, and the OpenStreetMap Foundation's privacy policy applies to that request.
Location lookup — the place name or postcode you type into a search or listing is sent to postcodes.io, run by Ideal Postcodes Ltd, to find the town and map coordinates. No account information is sent with it.
Email and communications — Resend, which sends our service emails such as sign-in links and enquiry notifications.
Sign in with Google — if you choose to sign in with Google, Google tells us who you are. Google acts as an independent controller for that sign-in, and Google's own privacy policy applies.
Professional advisers — lawyers, accountants and insurers where necessary.
Authorities and regulators — where required by law, or to prevent fraud or protect our rights.
A buyer of our business — if we sell or reorganise our business, in which case your data may be transferred.

We do not sell your personal data.

8. International transfers

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses, so that your data receives an equivalent level of protection.

9. How long we keep your data

We keep personal data only as long as necessary:

Account data — for as long as your account is active, then up to 30 days after closure.
Listing data — while the listing is live and for a reasonable period afterwards for records and dispute handling.
Enquiry and viewing data — up to 24 months.
Payment and transaction records — at least 6 years to meet accounting and tax obligations.
Marketing data — until you opt out, then suppressed from further marketing.

10. Your rights

Under UK data protection law you have the right to:

Access a copy of your personal data
Rectify inaccurate or incomplete data
Erase your data in certain circumstances
Restrict or object to our processing
Data portability for data you provided to us
Withdraw consent at any time (where we rely on consent)

To exercise any right, contact us at contact@propertypavilion.co.uk. We will respond within one month. There is normally no charge. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

11. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and secure hosting. No system is completely secure, so we cannot guarantee absolute security, but we take our obligations seriously and will notify you and the ICO of any breach where required.

12. Children

Pavilion is not intended for use by anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date shows the latest version. Significant changes will be notified to account holders where appropriate.

14. Contact us

Aidvante Consulting Group Ltd (trading as Property Pavilion), 17-21 George Street, Croydon, England, CR0 1LA. Email: contact@propertypavilion.co.uk.