Privacy Policy

1. Who we are

The data controller responsible for your personal data is Inhous Ltd, trading as INHOUS Private. If you have any questions about this policy or how we handle your data, contact our data protection team at privacy@inhous.com.

2. Data we collect

We collect the following categories of personal data:

Information you give us

• Identity and contact details — your name, email address, telephone number, and country or jurisdiction of residence.
• Membership profile — the membership type you apply for (principal, family office / advisor, vendor, or corporate partner), how you heard about us, and any referral or sponsor details.
• Corporate partner details — where applicable, your firm name, professional category, accreditations, client volumes, markets, and professional references.
• KYC and AML documentation — where you progress towards a transaction, identity documents (such as a passport), proof of funds, proof of ownership or authority to sell, and related compliance records.
• Property and mandate information — details of properties you wish to buy or sell, search criteria, and messages you exchange through the platform.

Information we collect automatically

• Technical data — IP address, browser type, device information, and authentication session data, collected via strictly necessary cookies (see our Cookie Policy).
• Usage data — how you interact with the platform, used to keep it secure and to improve the service.

3. How we use your data

• To review and process your membership application.
• To verify your identity and complete Know Your Customer (KYC) and Anti-Money Laundering (AML) checks.
• To operate the platform — presenting relevant off-market opportunities, facilitating introductions, and enabling secure messaging between vetted parties.
• To communicate with you about your account, applications, and transactions.
• To send you service updates and, only where you have opted in, marketing communications.
• To comply with our legal and regulatory obligations, and to prevent fraud and protect the security of the platform.

4. Legal basis for processing

Under the UK GDPR and EU GDPR, we rely on the following legal bases:

• Contract — to provide the membership services you have requested.
• Legal obligation — to meet our AML, KYC, and other statutory and regulatory duties as an estate agency business.
• Legitimate interests — to vet members, keep the platform secure, prevent fraud, and improve our service, balanced against your rights and freedoms.
• Consent — for optional marketing communications and non-essential cookies, which you may withdraw at any time.

5. Data retention

We keep your personal data only for as long as necessary for the purposes set out above:

• Membership and profile data — for the duration of your membership and for up to six years after it ends, to handle any post-transaction queries or disputes.
• KYC and AML records — retained for a minimum of five years after the end of a business relationship or completed transaction, as required by anti-money laundering law.
• Declined applications — retained for up to twelve months, then deleted.

When data is no longer required, it is securely deleted or anonymised.

6. Your rights

Under UK and EU GDPR

If you are in the UK or EEA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (the “right to be forgotten”), subject to our legal retention obligations.
• Restrict or object to certain processing.
• Request portability of the data you provided to us.
• Withdraw consent at any time where we rely on it.
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority.

Under the CCPA (California residents)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, the right to request deletion of your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights. INHOUS Private does not sell your personal information.

7. Cookies

We use strictly necessary cookies to keep you signed in and to secure the platform, and — only with your consent — a limited set of analytics cookies. You can accept or reject non-essential cookies via the banner shown on your first visit. Full detail is in our Cookie Policy.

8. Third-party processors

We share your data only with carefully selected service providers who process it on our behalf under strict contractual safeguards. We do not sell your personal data. Our key processors are:

Where a processor is located outside the UK or EEA, we ensure an adequate level of protection through approved transfer mechanisms such as Standard Contractual Clauses.

9. How we protect your data

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and vetting of everyone who handles member information. Sensitive KYC documentation is handled under heightened controls and on a strict need-to-know basis.

10. Changes to this policy

We may update this policy from time to time. Where changes are material, we will notify members directly. The “last updated” date above always reflects the current version.

11. Contact us for data requests

For any privacy question or to exercise your data rights, contact: