Privacy policy

This policy explains what personal data Sales Progressor collects, why we collect it, how we use it, and what rights you have over it. It applies to our website at thesalesprogressor.co.uk, our software platform, and our outsourced progression service.

Sales Progressor is registered in England and Wales. The data controller for personal data we collect directly (for example, through our website contact and demo forms) is Sales Progressor. Where we process personal data about buyers, sellers, or solicitors on behalf of an estate agency using our platform, we act as a data processor and the agency is the data controller for that data.

If you have any questions, contact us at hello@thesalesprogressor.co.uk.

1. What information we collect

From estate agencies and their staff

• Name and job title of staff members who use the platform
• Work email address and phone number
• Agency name and office address
• Login credentials (passwords are hashed and never stored in plain text)
• Payment information processed through Stripe (we do not store card details)

From or about buyers and sellers (provided by the agency)

• Name, email address, and phone number
• Property address and transaction reference
• Solicitor contact details
• Progress information and correspondence logs

From website visitors

• Name, email, and phone number submitted via contact or demo request forms
• Basic analytics data (pages visited, referral source) — no individual-level tracking

2. Why we collect it and our legal basis

We process personal data for the following purposes and on the following legal bases under UK GDPR:

• To deliver the platform and progression service — basis: performance of a contract
• To send automated emails to buyers and sellers on milestone events — basis: legitimate interests of the agency as data controller; we act as their processor
• To process payments — basis: performance of a contract
• To respond to enquiries and demo requests — basis: legitimate interests (responding to a contact you initiated)
• To improve the service — basis: legitimate interests, using aggregated and anonymised data where possible
• To comply with legal obligations, such as financial record-keeping — basis: legal obligation

3. Who we share it with

We do not sell personal data. We share it only with:

• Stripe — for payment processing (PCI DSS Level 1 certified)
• Cloud hosting providers — infrastructure is hosted within the UK or EEA
• Email delivery providers — used solely to send transactional and milestone emails
• Professional advisers — accountants or lawyers, where necessary and under confidentiality obligations
• Law enforcement or regulators — where required by law

All third-party processors are bound by data processing agreements and may not use personal data for their own purposes.

4. How long we keep it

• Agency account data: retained for the duration of the relationship plus six years (for financial record-keeping purposes)
• Transaction data (buyers, sellers, solicitor contacts): retained for six years after the transaction completes or falls through
• Website enquiry data: retained for 12 months if no business relationship is established
• Payment records: retained for seven years as required by HMRC

Where we process data as a processor on behalf of an estate agency, retention is governed by the agency's own data retention policy.

5. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data, where we have no legal obligation to retain it
• Restrict how we process your data in certain circumstances
• Object to processing based on legitimate interests
• Data portability, where processing is based on consent or contract and carried out by automated means
• Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, contact us at hello@thesalesprogressor.co.uk. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by phone on 0303 123 1113.

6. Cookies

Our website uses only essential cookies required for the site to function. We do not use tracking cookies, advertising cookies, or third-party analytics that identify individuals. No cookie consent banner is required.

7. Data security

Data is encrypted in transit using TLS and at rest using AES-256. Access to personal data within our systems is role-based and limited to staff who need it to deliver the service. See our security page for further detail.

8. International transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. All infrastructure and processors operate within these territories.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Where changes are material, we will notify agency account holders by email. Continued use of the platform after notification constitutes acceptance of the updated policy.

10. Contact

For privacy enquiries: hello@thesalesprogressor.co.uk
For security concerns: security@thesalesprogressor.co.uk