1. Information We Collect

We collect information you provide directly and data generated by your use of our platform:

Category	Examples	Purpose
Identity	Full name, company name	Account creation & verification
Contact	Email, phone, address	Communication & notifications
Professional	SRA number, firm details, qualifications	Solicitor verification & listings
Transaction	Property address, sale/purchase price, mortgage details	Quote generation & matching
Technical	IP address, browser type, cookies, log data	Security, fraud prevention, analytics

2. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR Article 6:

• ContractProcessing necessary to fulfil your request for quotes or to operate your solicitor account.
• Legitimate InterestsImproving platform performance, preventing fraud, and maintaining platform security.
• Legal ObligationComplying with applicable UK law and regulatory requirements.
• ConsentMarketing communications — you may withdraw consent at any time by clicking "unsubscribe" in any email.

3. How We Use Your Information

• Match your property transaction with verified, regulated solicitors
• Display your solicitor firm profile and ratings to prospective clients
• Send transactional emails (quote notifications, account confirmations)
• Send marketing emails where you have opted in
• Detect, investigate, and prevent fraudulent or abusive activity
• Comply with legal and regulatory obligations including SRA requirements
• Analyse usage patterns to improve platform functionality

4. Data Sharing

We do not sell your personal data. We share data only in these limited circumstances:

• Solicitor firms: When you request quotes, your property details are shared with the solicitors you contact.
• Service providers: Hosting (server infrastructure), email delivery, analytics — each bound by data processing agreements.
• Regulators & law enforcement: Where required by law, court order, or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or asset sale, data may transfer to the successor entity.

5. Cookies

We use cookies and similar tracking technologies:

Type	Purpose	Can be disabled?
Essential	Login sessions, security tokens	No — platform requires them
Analytics	Page views, usage patterns (anonymised)	Yes — via cookie banner
Marketing	Retargeting, campaign measurement	Yes — via cookie banner

6. Data Retention

We retain personal data only as long as necessary. Account data is held for the duration of your account plus 6 years (in line with UK limitation periods). Transaction records may be retained for 7 years for tax and regulatory purposes. You may request deletion at any time (subject to legal obligations).

7. Your Rights

Under UK GDPR you have the following rights:

To exercise any right, email privacy@convygo.co.uk. We will respond within 30 days. If dissatisfied, you may complain to the Information Commissioner's Office (ICO).

8. Data Security

We implement appropriate technical and organisational measures including TLS encryption in transit, encrypted storage at rest, access controls, and regular security assessments. No system is completely secure; if you suspect a breach, notify us immediately at security@convygo.co.uk.

9. International Transfers

Our servers are located in the United Kingdom. Where we transfer data outside the UK, we ensure adequate protections are in place through UK adequacy regulations or standard contractual clauses approved by the ICO.

10. Children

Our platform is not directed at persons under the age of 18. We do not knowingly collect data from children. If you believe a child has provided data to us, contact us so we can delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email or a prominent notice on the platform. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us