Encryption
Data encrypted in transit using modern TLS and protected at rest within managed infrastructure.
Privacy, trust and resilience
A clear view of how ExpressMyInterest is designed to protect personal information, support UK GDPR obligations and give people meaningful control over their property journey.
We aim to request only information needed to match, verify and progress a property conversation.
Identity, address and sensitive documents stay restricted until the right permission or journey stage exists.
Plain-language privacy settings make it clear what is shared, with whom and for what purpose.
Enterprise-grade security model
Security is treated as an ongoing operational discipline, not a badge. Controls are designed around confidentiality, integrity, availability and accountability.
Open security controlsData encrypted in transit using modern TLS and protected at rest within managed infrastructure.
Role-based permissions, least-privilege access and explicit homeowner sharing controls.
Verification signals help reduce impersonation, spam and speculative buyer activity.
Sensitive access, consent changes and key journey events can be recorded for review.
Backups, monitoring and tested recovery procedures support service continuity.
Dependency review, change controls and vulnerability management form part of release practice.
UK privacy notice
Last reviewed 19 August 2026 · This product page explains the intended privacy framework. Formal launch should include legal review, named controller details and confirmed suppliers.
Account and contact details; property preferences and profiles; verification outcomes; messages, expressions of interest and transaction activity; device, security and support records.
To provide matching and communication services, protect users, prevent fraud, fulfil contracts, comply with legal duties and improve the service with appropriate safeguards.
Performance of a contract, legitimate interests, legal obligation and consent where required. Consent can be withdrawn without affecting earlier lawful processing.
Only authorised participants and vetted service providers needed to operate the platform. We do not sell personal data. Sharing settings remain subject to legal and safety requirements.
Records should be held only as long as necessary for the stated purpose, legal obligations, dispute handling and fraud prevention, then securely deleted or anonymised.
Where data leaves the UK, appropriate safeguards should be used, such as UK adequacy regulations or approved contractual protections.
Your data rights
Depending on the circumstances, UK GDPR gives you rights to access, correct, erase, restrict, object to or port your information, and to challenge solely automated decisions with significant effects.
Send suspected vulnerabilities or account-security concerns to our dedicated team. Do not include passwords or full identity documents.
Create a private buyer profile and discover homes before they reach the portals.
Create my buyer profileList privately for free and explore genuine demand without committing to a sale.
List privately for free