Privacy Policy
Last updated: 22 May 2026
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or purchase The Estate AI Office. It is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU GDPR where applicable.
Contents
1. Who we are (data controller)
The Estate AI Office is operated by an individual trader based in Gibraltar. For data-protection purposes, we are the "data controller" of personal data described in this policy. Contact: hello@theestateaioffice.com.
2. What data we collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, email address, billing country | You, at checkout |
| Transaction | Order number, amount, currency, product purchased, date | Lemon Squeezy (merchant of record) |
| Communications | Email content if you contact us; support tickets | You, when you email us |
| Marketing preferences | Email open/click data; unsubscribe status | Email service provider (Resend) |
| Technical (website) | IP address, browser type, pages viewed, referrer, device type | Your browser, analytics tools |
| Advertising | Pixel/conversion events, ad attribution | Meta Pixel (Facebook/Instagram), Google Analytics |
We do not collect: payment card numbers (handled directly by Lemon Squeezy), passwords, government IDs, medical information, or special-category data.
3. How we use your data (lawful bases)
| Purpose | Data used | Lawful basis (UK GDPR) |
|---|---|---|
| Fulfil your purchase (deliver the Product, receipts) | Identity, contact, transaction | Contract (Art. 6(1)(b)) |
| Provide customer support & process refunds | Identity, contact, transaction, communications | Contract / Legitimate interest |
| Send product updates & quarterly monthly drops (post-purchase only) | Email, marketing preferences | Legitimate interest (soft opt-in; you can unsubscribe in every email) |
| Send marketing emails (if you opted in) | Email, marketing preferences | Consent (Art. 6(1)(a)) |
| Measure ad performance & website conversions | Technical, advertising, transaction | Consent (cookies) |
| Comply with tax, accounting, AML and other legal obligations | Identity, transaction | Legal obligation (Art. 6(1)(c)) |
| Defend or pursue legal claims | Any relevant data | Legitimate interest |
4. Who we share your data with
We share personal data only with vetted service providers acting as our processors, each bound by data-processing agreements:
- Lemon Squeezy LLC — merchant of record, processes payments, issues invoices, handles refunds (privacy policy)
- Resend — email delivery for transactional emails and product updates (privacy policy)
- Carrd / website host — landing page and download delivery
- Meta Platforms Ireland Ltd — advertising & retargeting via Meta Pixel (privacy policy)
- Google Ireland Ltd — analytics and conversion measurement (privacy policy)
- Anthropic, PBC — only if you choose to share inputs you create with us; we do not transmit your data to Claude on your behalf
We do not sell personal data. We do not share personal data with advertisers in raw form.
5. International data transfers
Some processors above are located outside the UK or the EEA (notably in the United States). Where personal data is transferred internationally, we rely on the UK Addendum to the EU Standard Contractual Clauses, the EU Standard Contractual Clauses, or the UK–US Data Bridge / EU-US Data Privacy Framework, as appropriate, to provide an adequate level of protection.
6. How long we keep your data
- Transaction records: 6 years (required by UK and Gibraltar tax/accounting rules)
- Customer email list: until you unsubscribe, then deleted within 30 days
- Support tickets: 24 months after last interaction
- Website analytics: 14 months
- Marketing pixel events: per Meta/Google retention policies (typically 13–24 months)
7. Your rights (UK GDPR)
You have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten"), subject to legal retention requirements
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Object — to processing based on legitimate interest, including direct marketing
- Withdraw consent — at any time, where consent is the legal basis
- Lodge a complaint — with the UK Information Commissioner's Office (ICO) or your local supervisory authority
To exercise any right, email hello@theestateaioffice.com. We will respond within one month.
8. Cookies & tracking
See our Cookie Policy for detail. In summary, we use essential cookies (always on) and optional analytics/advertising cookies (only with your consent via our cookie banner).
9. Children
The Product is sold to estate-agent professionals only and is not directed at anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please contact us and we will delete it.
10. Security
We use industry-standard technical and organisational measures to protect personal data, including TLS encryption in transit, access controls on processors, and minimisation of data collected. No system is perfectly secure; we cannot guarantee absolute security.
11. Changes to this policy
Material changes will be communicated via email or a notice on the website at least 14 days before taking effect. The "Last updated" date above reflects the current version.
12. Contact & complaints
The Estate AI Office
Email: hello@theestateaioffice.com
UK supervisory authority
Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint · 0303 123 1113
Gibraltar supervisory authority
Gibraltar Regulatory Authority — gra.gi/data-protection