Legal · 20 October 2026

Privacy notice

Template prepared by Sion's Tab agent.

  1. D.1Who we are. The data controller for app.bucklerfamily.estate (the Cedwyn Estate Case Office) is DATRO CONSORTIUM LIMITED, a private limited company registered in England and Wales, company number 13775817, registered office Unit 29 Highcroft Industrial Estate, Enterprise Road, Waterlooville, England, PO8 0BT (“DATRO”, “we”). Contact: privacy@bucklerfamily.estate. Our main privacy policy covers the other Cedwyn Estate sites.
  2. D.2What we collect and why.
    DataPurposeLawful basis (UK GDPR Art 6)Kept for
    Account: email, name, a salted one-way hash of your password (PBKDF2), sign-in sessionTo run your accountContract (6(1)(b))Until you close your account, then 30 days
    Live search enquiry: parcel or address, title number, your description, contact detailsTo run the search you paid for and reply to youContract (6(1)(b))6 years after the last payment (tax records); description deleted earlier on request
    Subscription: parcel name, location and its map positionTo build your base camp and carry out the serviceContract (6(1)(b))While subscribed, then 6 years for payment records
    Payment detailsTaken and held by Stripe; we see only the outcome, your email and the amountContract; legal obligation (6(1)(c))6 years
    IP addressAbuse prevention: turned into a salted one-way code for rate limitsLegitimate interests (6(1)(f))Up to 1 day
  3. D.3Special care. A description of what happened to your land may mention other people. Give only what the search needs. We do not publish anything you send us.
  4. D.4Who we share it with. Cloudflare (hosting, database, email delivery to our team), Stripe (payments), HubSpot (our customer records, to follow up your enquiry) and the OpenStreetMap Foundation's Nominatim service (the parcel location you type, to place it on a map). Public bodies receive a records request only when you ask us to send one in your name. Some processors are in the United States; transfers rely on the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum. We do not sell personal data.
  5. D.5Automated decisions. A simple scoring rule helps us order enquiries for review. A person always reviews each enquiry; no decision with legal or similar effect is made by automated means alone (Article 22 UK GDPR).
  6. D.6Cookies. One strictly necessary sign-in cookie (ca_s, HttpOnly, 30 days) and Cloudflare security cookies. No advertising or tracking cookies.
  7. D.7Your rights. Access, correction, erasure, restriction, objection and portability, and withdrawal of consent where we rely on it. Email privacy@bucklerfamily.estate. We answer within one month.
  8. D.8Complaints. Please tell us first. You may complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
  9. D.9Changes. We publish any change on this page with a new date.