Last updated: 19 October 2026
Who controls your data
Novagem Ltd (company number 02376089), Launchpad 1, Link Road, Northgate End, Bishops Stortford, CM23 2ES, is the data controller for PropertyAuctionAction.co.uk. Contact us about anything in this policy at [email protected].
What we collect and why
| What | When | Why | Lawful basis |
|---|---|---|---|
| Username, email address, password | You create an account | To provide the account | Performance of a contract |
| Favourites and saved searches | You save them while signed in | To show you your saved items and alert you to matching lots | Performance of a contract |
| Messages in your dashboard inbox | You send or receive one | To pass enquiries between users | Performance of a contract |
| Name, mobile, email, city, message | You use a contact form | To answer you | Legitimate interests — responding to an enquiry |
| IP address, browser, pages requested | Automatically | Security, diagnostics, preventing abuse | Legitimate interests — running a safe site |
We do not collect special category data, we do not carry out profiling that has a legal effect on you, and we do not sell personal data to anyone.
Emails we send you
When you register we email your account details. When you save a search we email you about new lots matching it, because you asked us to — you can stop these at any time by deleting the saved search in your dashboard. We will not send you marketing email unless you have asked for it separately.
Who else sees your data
The site runs on our own servers, and we send our own email. We use a small number of third parties:
- Cloudflare — security and performance in front of the website. Sees traffic including IP addresses.
- Google Maps — draws the maps on property and search pages. Loading a map involves your browser contacting Google.
Some of these are based outside the UK, so data may be transferred internationally under the safeguards those providers operate.
We will also disclose information where we are legally required to.
How long we keep it
- Account data — while your account is open, and for 12 months after you close it, then deleted.
- Contact form enquiries — 24 months from your last contact.
- Server logs — 6 months.
Your rights
You can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete your data, where we have no overriding reason to keep it
- restrict or object to what we do with it
- provide it in a portable form
Email [email protected] and we will respond within one month. There is no charge.
You can also delete your own account at any time from your dashboard, or by asking us.
Cookies
We use cookies that are necessary for the site to work, including keeping you signed in and remembering your cookie choice. Cloudflare, which sits in front of the site, may set a cookie to protect it from automated traffic.
We do not load Google Maps until you ask us to. The first time you visit we show you a choice: browse without maps, or turn maps on. Until you turn them on, no request is made to Google and your IP address is not sent to them. We record your choice in a cookie named paa_consent, which lasts six months.
You can change your mind at any time using the Cookie settings link in the footer. You can also block or delete cookies in your browser, though parts of the site may then not work.
Security
We take reasonable technical and organisational measures to protect your data. No website can promise perfect security. If a breach puts you at risk, we will tell you and the Information Commissioner’s Office as the law requires.
Changes
We will update this page when our practices change, and change the date at the top.
Complaints
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.