Privacy Policy

Last updated: 28 April 2026

Dealium ("we", "us", "our") is a UK property intelligence platform operated by Yeema Holdings LTD (Companies House 15809333), a company registered in England & Wales at 128 City Road, London EC1V 2NX. Yeema Holdings LTD is the data controller for personal data collected through our website, mobile app, and platform (collectively, the "Service"). Dealium is a product of Yeema Holdings LTD.

This policy explains what data we collect, why, how we use it, and the rights you have under the UK GDPR and Data Protection Act 2018.

1. Data we collect

Account data

  • Email address, name, profile picture (provided by you or your identity provider)
  • Authentication identifiers issued by our authentication provider
  • Hashed passwords are never stored by us. They are handled by our authentication provider.

Usage data

  • Searches, saved deals, calculator inputs, watchlists
  • Device type, browser, operating system, approximate location (city level via IP)
  • Pages visited, features used, timestamps

Payment data

  • Subscription status, plan tier, billing cycle
  • Card details for web subscriptions are processed by our payment processor. iOS subscriptions are processed by the App Store. We never see or store card details.

Communications

  • Support emails, in app messages, survey responses

2. How we use your data

  • Provide the Service. Account creation, deal sourcing, calculations, alerts.
  • Billing. Process subscriptions and prevent fraud.
  • Improve the Service. Aggregate analytics on feature usage.
  • Communicate. Service updates, security notices, billing receipts.
  • Legal compliance. Respond to lawful requests and enforce terms.

3. Legal bases (UK GDPR Article 6)

  • Contract. Providing the Service you signed up for.
  • Legitimate interests. Security, fraud prevention, analytics.
  • Consent. Marketing emails, optional analytics cookies.
  • Legal obligation. Tax records, lawful disclosures.

4. Sub-processors

We share data with these categories of sub-processors strictly to operate the Service:

  • Authentication provider (USA, EU SCCs in place)
  • Application database provider (USA, EU SCCs in place)
  • Hosting and CDN provider (global edge, UK and EU regions where possible)
  • Payment processor (Ireland and USA)
  • App store payment processor (subject to its own privacy policy)
  • Analytics database provider (USA, EU SCCs in place)

We do not sell your personal data. We do not share it with advertisers.

5. Data sources

Property listings, comparable sales, EPC ratings, and Land Registry data are obtained from public records and third party feeds (HM Land Registry, gov.uk EPC API, Rightmove, OpenRent, ONS). These contain no information about you.

6. International transfers

Some sub-processors are based in the USA. Where data leaves the UK or EEA we rely on Standard Contractual Clauses or UK Addendum equivalents to ensure equivalent protection.

7. Retention

  • Account data. Until you delete your account, plus 30 days for backups.
  • Billing records. 7 years (UK tax requirement).
  • Server logs. 90 days.
  • Anonymised analytics. Indefinitely.

8. Your rights

Under UK GDPR you have the right to:

  • Access. Request a copy of your data.
  • Rectification. Correct inaccurate data.
  • Erasure. Delete your account and data.
  • Portability. Receive your data in machine readable form.
  • Object. To processing based on legitimate interests.
  • Withdraw consent. For marketing or optional features.

You can delete your account directly from Settings, Account, Delete Account in the web app or iOS app. Other requests: [email protected].

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising cookies. Optional analytics cookies are off by default and require consent.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children.

11. Security

Data is encrypted in transit (TLS 1.2 or higher) and at rest. Authentication uses industry standard OAuth and OIDC. We follow least privilege access and audit logs for sensitive operations.

12. Changes to this policy

We will post material changes here and notify active users by email at least 30 days before they take effect.

13. Contact

Yeema Holdings LTD
128 City Road, London EC1V 2NX
Companies House 15809333
Email: [email protected]