Privacy Policy

This policy explains how personal data is processed when you use this website (the Site), operated by an estate agency or property business (the agent). Midtide Ltd, a company registered in the United Kingdom (Midtide, we, us), hosts the Site and provides the underlying software on the agent's instructions. For that hosting and delivery, Midtide acts as a data processor; the agent is the data controller for personal data you submit through the Site.

This policy is designed to meet the standards of the world's leading privacy frameworks, including the EU General Data Protection Regulation (EU GDPR), the UK GDPR, Brazil's LGPD, and equivalent laws globally. Where you have additional rights under local law (for example, California residents under CCPA/CPRA), those are set out at the end of this policy.

Who is who

Data controller (the agent)

  • Business / trading name: $0
  • Contact email: $1

The agent decides why and how your personal data is used once it reaches them. For questions about what the agent does with your data, contact them directly at the email above.

Data processor (Midtide)

  • Midtide Ltd (registered in the United Kingdom)
  • Privacy / platform contact: $3

Midtide processes personal data only on documented instructions from the agent, except where required by law to act independently.

What we collect and why

Contact form

If you submit the contact form, we process:

  • Name
  • Email address
  • Your message

Purpose: To forward your enquiry to the agent so they can respond to you.

Legal basis: Legitimate interests in handling your enquiry and taking steps at your request before a possible contract (EU/UK GDPR Art. 6(1)(f) and Art. 6(1)(b) where applicable). Under equivalent laws globally, the same processing is justified on substantially identical grounds.

Who receives it: The agent receives your submission. Midtide relays it as part of delivering the Site and does not retain contact form content as a long-term archive.

Retention: The agent is responsible for their own retention and further use of your data once received.

Analytics

We measure general page views and property detail views so the agent and Midtide can understand how the Site is used.

  • Cookies: analytics is configured without analytics cookies.
  • Device storage: we do not use local storage, session storage, or similar mechanisms for analytics.
  • Visitor identifier: a one-way hash is generated server-side, rotates daily, and cannot identify you on its own.

Purpose: Measuring product usage and improving reliability.

Legal basis: Legitimate interests (EU/UK GDPR Art. 6(1)(f)) and equivalent grounds under applicable law.

Processor: Mixpanel, using EU infrastructure. See: https://mixpanel.com/legal/privacy-policy/

Maps

Property pages may display an interactive map. Map tiles are loaded from MapTiler, which may process technical data (such as IP address) when tiles load. See: https://www.maptiler.com/privacy-policy/

WhatsApp button (if shown)

If the Site includes a WhatsApp button or link, tapping it opens WhatsApp, a Meta Platforms service. Processing after that point is governed by WhatsApp/Meta's own privacy policy: https://www.whatsapp.com/legal/privacy-policy

Sub-processors and infrastructure

Midtide uses vetted sub-processors, including:

  • Mixpanel — analytics — EU infrastructure (see above)
  • MapTiler — map tiles — see MapTiler's policy above
  • Supabase — hosting, authentication, and database — EU/US (see https://supabase.com/privacy)

This list may evolve; Midtide remains responsible for its own compliance obligations.

Your rights

Depending on where you are located, you may have rights regarding your personal data, including:

  • Access — obtain a copy of your data
  • Rectification — correct inaccurate data
  • Erasure — request deletion
  • Restriction — limit how data is used
  • Objection — object to processing based on legitimate interests
  • Data portability — receive data in a portable format (where applicable)
  • Withdraw consent — where processing is consent-based

To exercise rights relating to personal data the agent (data controller) holds about you, contact: $1.

To exercise rights relating to personal data Midtide processes as data processor / platform provider, contact: $3.

You also have the right to lodge a complaint with your local data protection authority. Examples include:

  • UK: Information Commissioner's Office (ICO) — https://ico.org.uk
  • EU: Your national supervisory authority — https://edpb.europa.eu/about-edpb/about-edpb/members_en
  • Other jurisdictions: The relevant data protection regulator in your country

Additional rights for California residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Know what personal information is collected about you and how it is used
  • Delete personal information we hold about you (subject to certain exceptions)
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information — Midtide does not sell or share personal information as defined under CCPA/CPRA
  • Non-discrimination — you will not be treated differently for exercising your privacy rights

For CCPA/CPRA requests relating to Midtide's processing as processor, contact $3.

For requests relating to the agent's processing as controller (collection, use or sharing of personal information outside the relay described here), contact $1.

International data transfers

Midtide and its sub-processors may process data in the UK, EU, or US. Where data is transferred outside your home jurisdiction, Midtide takes steps to ensure appropriate safeguards are in place (such as Standard Contractual Clauses for EU/UK transfers), in line with applicable law.

Last updated: 11 June 2026

Platform provider

This Site is hosted and delivered by Midtide Ltd (Midtide), a company registered in the United Kingdom. Midtide provides the website platform on Your business / trading name's instructions and acts as a data processor for the processing described in this section.

For Midtide's own privacy practices as a company, see our platform privacy policy.

Midtide processes personal data only on documented instructions from the agent, except where required by law to act independently.

Processing carried out by Midtide

Contact and property enquiry forms

When you submit a contact or property enquiry form, Midtide receives your name, email address, phone number (if provided), message, and any property reference to deliver your enquiry to Your business / trading name and store it in the Midtide platform on Your business / trading name's instructions. Stored enquiries are accessible to Your business / trading name and their authorised users in the Midtide dashboard for follow-up and record keeping. Midtide also sends Your business / trading name an email notification. Midtide does not use your enquiry data for its own marketing.

Analytics

Midtide measures general page views and property detail views so Your business / trading name and Midtide can understand how the Site is used.

  • Cookies: analytics is configured without analytics cookies
  • Device storage: we do not use local storage, session storage, or similar mechanisms for analytics
  • Visitor identifier: a one-way hash is generated server-side, rotates daily, and cannot identify you on its own

Purpose: Measuring product usage and improving reliability.

Legal basis: Legitimate interests (EU/UK GDPR Art. 6(1)(f)) and equivalent grounds under applicable law.

Processor: Mixpanel, using EU infrastructure. See: https://mixpanel.com/legal/privacy-policy/

Hosting and infrastructure

The Site, contact form submissions, and related data are hosted using Supabase (EU/US). See: https://supabase.com/privacy

Map tiles on property pages may be loaded from MapTiler, which may process technical data (such as IP address). See: https://www.maptiler.com/privacy-policy/

Sub-processors

Midtide uses vetted sub-processors, including:

  • Mixpanel — analytics — EU infrastructure
  • Resend, enquiry email notifications
  • MapTiler — map tiles
  • Supabase — hosting, authentication, and database — EU/US

This list may evolve; Midtide remains responsible for its compliance obligations as processor.

Your rights (Midtide as processor)

To exercise rights relating to personal data Midtide processes on Your business / trading name's behalf, contact hello@midtide.co.

If you are a California resident, Midtide does not sell or share personal information as defined under CCPA/CPRA. For CCPA/CPRA requests relating to Midtide's processing as processor, contact hello@midtide.co.

International data transfers

Midtide and its sub-processors may process data in the UK, EU, or US. Where data is transferred outside your home jurisdiction, Midtide takes steps to ensure appropriate safeguards are in place (such as Standard Contractual Clauses for EU/UK transfers), in line with applicable law.