Privacy Notice

Modulo Properties, trading as Modulo, is the data controller for the personal data described in this notice. That means we decide why and how your data is used, and we are responsible for looking after it.

Modulo Properties, contactable at moduloestats@moduloproperty.com or 205 649 2373.

• —Contact details (name, email, phone) — so we can answer your enquiry, arrange viewings and process an application. Legal basis: performance of a contract or steps taken at your request.
• —Enquiry and message content, including the property you asked about and any notes you add at checkout — so we can respond and keep a record of what was agreed. Legal basis: contract and our legitimate interest in running our lettings business.
• —Order details (order reference, item purchased, amount, status, subscription dates) — so we can deliver the service you paid for, issue receipts and keep accounting records. Legal basis: contract and legal obligation.
• —Account credentials for staff members who sign in to our admin dashboard — so we can secure access. Legal basis: legitimate interest in security.
• —Technical data (IP address, browser and device information, pages viewed, timestamps) — to keep the site secure, prevent spam and fraudulent form submissions, and understand how the site is used. Legal basis: legitimate interest in security and improving our service.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects for you.

We only send you marketing about properties or services if you ask us to. You can opt out at any time by replying to any message or emailing us. Transactional messages — enquiry replies, receipts and service notices — are not marketing and are sent as part of providing the service.

• —Service providers (processors) — our website hosting and database provider, and our email delivery provider, which handle data on our instructions only.
• —Paddle.com, our Merchant of Record — for the sale of our services, subscription management, payments, tax compliance and invoicing. Paddle collects your payment details directly; we never see or store your card number.
• —Professional advisers — accountants and lawyers, where needed.
• —Authorities — where we are required to disclose by law or to protect legal rights.

Our providers may process data outside your country, including in the United States. Where data is transferred out of the UK or EEA, it is protected by an adequacy decision or by Standard Contractual Clauses together with appropriate technical safeguards.

• —Enquiries that do not lead to an application: up to 24 months, then deleted.
• —Application and tenancy-related records: for the duration of the relationship and up to 6 years afterwards, to meet legal and tax obligations.
• —Payment and order records: 7 years, as required for accounting.
• —Technical and security logs: up to 12 months.

When data is no longer needed for these purposes it is deleted or irreversibly anonymised.

Depending on where you live, you have the right to access a copy of your data, correct it, have it deleted, restrict or object to how we use it, receive it in a portable format, and withdraw consent where we relied on it. If you are in the UK or EEA you can also complain to your data protection supervisory authority.

To exercise any of these rights, email us using the details above. We will respond within one month, and we will not charge you or treat you differently for asking.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls limiting enquiry and payment records to authenticated administrators, and row-level security on our database. No system is completely secure, but we review our controls regularly and will notify you and the relevant authority if a breach affects your rights.

We use only essential cookies and similar storage — those needed to keep your session secure, remember your form progress, protect our contact form from bots, and complete a checkout. We do not use advertising cookies, and we do not track you across other websites. Because these are strictly necessary to deliver the site you asked for, we do not need consent for them; you can still block or delete cookies in your browser settings, though parts of the site may then stop working.

During checkout, our reseller Paddle sets its own cookies to process your payment and prevent fraud. Their handling of that data is described in their own privacy notice.

We will update this notice when our practices change. The "last updated" date at the top shows the current version, and we will tell you directly about any significant change that affects you.