Privacy Policy
Last updated: 9 April 2026
1. Who we are
helloagent.com ("helloagent", "we", "us", "our") is an estate agent comparison platform operated by GreyTwo Ltd, a company registered in England and Wales (Company No. 12073471).
GreyTwo Ltd is the data controller for the personal data we process through helloagent. This means we are responsible for deciding how and why your personal data is used.
- Registered address: 8 Mathews Close, Swindon, SN25 2UA
- Email: [email protected]
- ICO registration: 0013574947 (GreyTwo Ltd)
2. What data we collect
a. Account data
When you create an account, we collect:
- Email address - required for account creation and authentication
- First name and last name - collected during profile completion or from Google sign-in
- Phone number - collected during profile completion (UK format)
b. Property data
When you use helloagent to compare estate agents, we collect information about your property:
- Property address - used to match you with local estate agents
- Number of bedrooms and bathrooms - used to provide relevant comparisons
- Expected property value - used to match agents with appropriate experience
- How soon you are looking to sell - used to assess your readiness and tailor the service
- Property selling points - used to help agents understand your property
Your property address and personal contact details are never shared with estate agents. However, some property characteristics (such as the general area, number of bedrooms, and expected value) may be shared with matched estate agents to help them respond to your enquiry. All communication happens through our anonymous messaging system.
c. Authentication data
helloagent uses passwordless authentication. We do not store passwords. Instead, we generate:
- One-time passcodes (OTP) - 6-digit codes sent to your email, valid for 15 minutes
- Magic link tokens - sign-in links sent to your email, valid for 7 days
These tokens are single-use and are deleted after verification or expiry.
d. Session data
When you visit helloagent, we automatically collect:
- IP address - for security and fraud prevention
- User agent - your browser and device information
- Session data - stored in our database for the duration of your session (120 minutes)
e. Terms acceptance records
We record which version of our terms of service you accepted and when. This is retained for compliance purposes.
f. Data from Google sign-in
If you choose to sign in with Google, we receive your email address and name from Google. We do not receive your Google password or access to your Google account.
g. Estate agent business data
We collect and display business information about estate agencies and their branches, including:
- Agency and branch names, addresses, and contact details - publicly available business information
- Sales performance data - including properties sold, average sale prices, time to sell, and pricing accuracy
- Market activity statistics - listings, coverage areas, and market share
This data is sourced from third-party data providers and publicly available records. It relates to businesses rather than individuals and is used to power our comparison service. This data is displayed publicly on helloagent regardless of whether the agent has an account.
If you are an estate agent with an account, your account data (email, name, phone) is treated the same as any other user account and is kept separate from the publicly displayed business data.
3. How we collect your data
- Directly from you - when you create an account, complete your profile, submit property details, or use our messaging system
- From Google - if you use Google sign-in (email and name only)
- From third-party data providers - estate agent business data (performance statistics, branch details, sales records) sourced from publicly available records and specialist property data providers
- Automatically - session data (IP address, user agent) and cookies when you visit our website
4. Legal basis for processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract - necessary to provide the service you requested |
| Matching you with local estate agents based on your property | Contract - necessary to provide the service you requested |
| Sending OTP codes and magic links | Contract - necessary for authentication |
| Sending welcome emails | Legitimate interests - keeping you informed about your account |
| Notifying estate agents about new enquiries and messages | Contract - necessary to provide the lead generation service |
| Displaying estate agent business data publicly | Legitimate interests - providing an independent comparison service using publicly available data |
| Recording terms acceptance | Legal obligation - maintaining compliance records |
| Platform security and fraud prevention | Legitimate interests - protecting our platform and users |
| Analytics (via Google Analytics) | Consent - via cookie preferences |
| Error tracking (via Sentry) | Legitimate interests - maintaining platform reliability |
5. How we use your data
We use your personal data to:
- Provide the estate agent comparison service
- Match homeowners with local estate agents based on property details and location
- Authenticate your identity when you sign in
- Send transactional emails (OTP codes, magic links, welcome messages)
- Send notification emails to estate agents about new enquiries and messages from homeowners
- Enable anonymous communication between homeowners and estate agents
- Display estate agent business data (performance statistics, branch details) on our comparison pages
- Protect the security of our platform and prevent fraud
- Monitor and improve the performance and reliability of our service
- Analyse how our platform is used (in anonymised or aggregated form)
How data flows between homeowners and agents
Our platform is designed to protect homeowner anonymity:
- Homeowner contact details (email, phone, property address) are never shared with estate agents. All communication happens through our anonymous messaging system.
- Estate agent business data (agency name, branch address, performance statistics) is displayed publicly to all visitors and homeowners as part of the comparison service.
- Agent account details (personal email, phone) are not shared with homeowners.
We do not sell personal data to any third party.
6. Third-party services
We use the following third-party services that may process your data:
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Sign-in with Google | Email address, name (received from Google) |
| Brevo (formerly Sendinblue) | Email delivery | Email address (to deliver OTPs, magic links, and welcome emails) |
| Sentry | Error tracking and performance monitoring | Technical data only (error logs, performance traces). Personally identifiable information is not sent. |
| Google Analytics (via Google Tag Manager) | Website analytics | Anonymised usage data, cookies (see our Cookie Policy) |
| Cloudflare | Content delivery, DDoS protection, and security | IP address, request data (processed at the network edge) |
Each of these services is bound by their own privacy policies. We only share the minimum data necessary for each service to fulfil its purpose.
7. Data retention
We retain your data for the following periods:
| Data type | Retention period |
|---|---|
| Account data (email, name, phone) | While your account is active, or until you delete your account |
| Property data (address, bedrooms, bathrooms, value, readiness) | While your account is active, or until you delete your account |
| Messages sent through the platform | While your account is active, or until you delete your account |
| Session data (IP, user agent) | 120 minutes (session lifetime) |
| OTP codes | 15 minutes (then automatically deleted) |
| Magic link tokens | 7 days (then automatically deleted), or immediately upon use |
| Terms acceptance records | Retained indefinitely for compliance purposes |
8. Account deletion and data anonymisation
You can delete your account at any time through your account settings. When you delete your account, we:
- Remove your first name, last name, and phone number
- Anonymise your email address (replaced with a non-identifiable placeholder)
- Remove your property data
- Delete all active sessions and authentication tokens
- Mark your account as deleted
After deletion, your account cannot be recovered. Anonymised records may be retained where we have a legitimate interest or legal obligation - for example, maintaining the integrity of our terms acceptance records.
9. Your rights under UK GDPR
Under the UK General Data Protection Regulation, you have the following rights:
- Right of access - you can request a copy of the personal data we hold about you
- Right to rectification - you can ask us to correct inaccurate or incomplete data
- Right to erasure - you can ask us to delete your personal data (you can also do this yourself via account settings)
- Right to restrict processing - you can ask us to limit how we use your data in certain circumstances
- Right to data portability - you can request your data in a commonly used, machine-readable format
- Right to object - you can object to processing based on legitimate interests
- Rights related to automated decision-making - we do not currently make automated decisions that have legal or similarly significant effects on you
To exercise any of these rights, email us at [email protected]. We will respond within one month.
If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
10. Cookies
We use cookies and similar technologies on helloagent. For full details about the cookies we use and how to manage them, please see our Cookie Policy.
11. International data transfers
Your data is primarily processed and stored in the United Kingdom. Some of our third-party service providers (such as Google and Sentry) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised by the UK government.
12. Children's privacy
helloagent is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will take steps to delete it promptly.
13. Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we may notify you by email or through the platform.
14. Contact us
If you have any questions about this privacy policy or how we handle your data, please contact us:
- Email: [email protected]
- Post: GreyTwo Ltd, 8 Mathews Close, Swindon, SN25 2UA