Last updated: 12 November 2026
1. Who we are and how to contact us
FIND THE POTENTIAL LTD is responsible for deciding how and why personal information is used by this service.
For privacy questions or to exercise your rights, email contact@findthepotential.co.uk.
2. Information we collect
- Account information: your email address, account identifier and, where supplied by the sign-in service, your name.
- Saved searches: the locations, radius, price range, property criteria and alert preferences you choose to save.
- Search and report activity: search terms, daily search-area allowance records, selected properties and the requests needed to produce results and Underwrite reports.
- Payment and access records: the checkout reference, Stripe session, customer, payment or subscription reference, amount, currency, payment or subscription status, email used for the transaction and the property to which free or paid Underwrite access is applied. Stripe collects and processes the card or other payment-method details; FIND THE POTENTIAL does not receive or store full card details.
- Using the site without an account: a random browser identifier, held in a strictly necessary cookie, that links your searches, free reports and purchases to that browser; and daily fair-use counts for the network connection you use, kept under a coded key derived from your IP address with a secret key (the IP address itself is not stored in these counts). If you buy without an account, the payment and access records above are linked to that browser identifier instead of an account, and we create a private link that reopens the report.
- Technical and security information: account or network identifiers, IP address, browser or device information and operational request logs used to keep the service reliable and prevent abuse.
- Correspondence: information you include when you contact us or report a property, image, data or payment concern.
The selected opportunity and return-to-results state are stored temporarily in your browser session.
Planning information: we show facts from public planning registers (application reference, address, type, decision and date) with a link to the council’s official record. We do not show applicants’ names, plans or documents. To ask us to correct or remove an entry, use the Property and image rights page.
3. How we use information and our lawful basis
Requested property alerts are service messages. We do not currently use account or payment details for unrelated marketing. Opportunity Scores analyse properties, not people, and do not make legal or similarly significant decisions about users.
4. Service providers, cookies and international processing
We use service providers only where needed to operate the site. These currently include the ChatGPT/OpenAI sign-in and site platform; Cloudflare hosting and storage; Stripe for payment processing; and search, location and property-research services including Serper, postcodes.io and OCR.space. A query or property detail may be sent to the relevant provider so it can return the requested result. Where the payment form is shown within our site, it is provided by Stripe in a secure frame and Stripe receives the details you enter in it directly.
Original property-listing sites receive information from your browser when a listing image is displayed or you choose to open the original listing. Google Maps receives information when you open its external Street View link. If Street View card imagery is enabled, your browser also requests the visible card image from Google Maps automatically; this may disclose your IP address and browser or device information to Google. The relevant provider’s privacy terms then apply.
If you use the built-in Share control, your browser passes the photo-free share link and short property snapshot to the sharing service you choose, such as your device share sheet, WhatsApp or email; that service’s privacy terms then apply.
We do not currently run advertising or audience-analytics cookies. When you use the site without an account, we set one strictly necessary cookie to recognise your browser. Cloudflare, which hosts the site, may also set a short-lived security cookie to protect it from automated abuse. The sign-in and payment services may use technologies strictly necessary for authentication, fraud prevention and checkout. See our Cookies page for details.
Some providers operate internationally. Where we make a restricted transfer of personal information, we use an applicable UK adequacy regulation or approved contractual safeguard as required.
5. How long we keep information
- Temporary search-run data expires after approximately 10 minutes.
- The selected property held in browser session storage normally disappears when that browser session ends.
- Free, purchased and subscription Underwrite access records, including those linked to a browser identifier, are retained while needed to provide access and handle account or payment issues.
- The browser identifier cookie expires about 13 months after it is set, or sooner if you delete it.
- Daily fair-use counts are used only for the UK day they cover and are deleted within 90 days.
- Payment and accounting records are normally retained for up to six years after the relevant accounting period, or longer where law or an unresolved dispute requires it.
- Saved-search records are kept while you use the service, until you ask us to delete them, or until the service closes.
- Enquiry and complaint records are kept only as long as needed to answer the matter, protect legal rights or meet a legal obligation.
- Technical security logs are kept for the period reasonably needed to protect and troubleshoot the service, subject to the relevant provider’s operational retention schedule.
We delete or anonymise personal information when it is no longer needed for these purposes.
6. Your rights
Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, portability or an objection to how it is used. You may also complain about how we handle your information.
If you use the site without an account, we do not know who you are, so we may ask for details we can match to your records, such as the email address and approximate time of a payment.
Contact us using the email above first so we can investigate. You can also complain to the Information Commissioner’s Office.