Privacy Policy
Last updated: 25 May 2026
This Privacy Policy explains how Land Registry Hub ("we", "us", "our") collects, uses, and protects your personal data when you use our website at landregistryhub.org.uk to order copies of Land Registry documents. We are committed to handling your data lawfully, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Land Registry Hub is a private document retrieval service. We are not affiliated with, owned by, or endorsed by HM Land Registry, Registers of Scotland, or Land & Property Services Northern Ireland. We retrieve official documents on your behalf from publicly accessible registers and deliver them to you.
For privacy queries you can contact us at [email protected].
2. What data we collect
When you use our service we collect:
- Property and order details — the postcode you search, the property you select, the tenure information you provide, the title number (if known), and which documents you order.
- Contact details — your email address so we can send your documents and order receipts.
- Delivery address — if you choose paper copies, the postal address you give us for delivery.
- Payment information — payments are processed entirely by Stripe; we do not see or store your card details. We retain the Stripe payment reference, the amount paid, and the payment status.
- Technical data — your IP address, browser type, device information, and pages visited, collected via our analytics provider (see Cookies Policy).
3. Why we use your data (lawful basis)
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Process your order and deliver documents | Contract (Article 6(1)(b)) |
| Take payment via Stripe | Contract (Article 6(1)(b)) |
| Send order confirmations and receipts | Contract (Article 6(1)(b)) |
| Handle customer support and price-match claims | Legitimate interests (Article 6(1)(f)) |
| Detect and prevent fraud or abuse | Legitimate interests (Article 6(1)(f)) |
| Analytics and improving the site | Legitimate interests (Article 6(1)(f)) |
| Comply with legal and tax obligations | Legal obligation (Article 6(1)(c)) |
4. Who we share your data with
We share your data only with the service providers we need to operate. These include:
- Stripe Payments Europe Ltd — to process card and wallet payments. See Stripe's privacy policy.
- Supabase Inc. — to store order records securely. Supabase's privacy policy.
- Postmark (ActiveCampaign LLC) — to send transactional emails (order confirmations, receipts). Postmark's privacy policy.
- Ideal Postcodes — for UK address lookup. Ideal Postcodes' privacy policy.
- PostHog Inc. — for product analytics. PostHog's privacy policy.
- Cloudflare Inc. — for hosting, CDN, and DDoS protection. Cloudflare's privacy policy.
- HM Land Registry, Registers of Scotland, Land & Property Services NI — to retrieve the official documents you order.
We will only disclose your data to other parties where required by law (for example, in response to a valid legal request), to enforce our terms, or to protect our rights, property, or the safety of others.
5. International transfers
Some of our service providers (such as Stripe, PostHog, and Postmark) may process data outside the UK or EEA. Where this happens, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or the UK–US Data Bridge to ensure your data receives an equivalent level of protection.
6. How long we keep your data
- Order records — retained for 7 years from the date of purchase to meet UK tax and accounting requirements (HMRC obligation).
- Transactional emails — retained by Postmark for 45 days, after which they are automatically deleted.
- Analytics data — retained by PostHog according to their default retention policy.
- Support correspondence — retained for 2 years from the last contact.
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data (subject to our legal retention obligations).
- Restriction — limit how we process your data.
- Portability — receive your data in a portable, machine-readable format.
- Object — object to processing based on legitimate interests, including for marketing or analytics.
- Withdraw consent — where we rely on consent, withdraw it at any time.
To exercise any of these rights, email [email protected]. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
8. Security
We take reasonable steps to protect your data, including HTTPS encryption across the site, encrypted payment processing through Stripe, restricted database access, and regular security updates. No system is perfectly secure, but we will notify the ICO and affected users without undue delay if we ever become aware of a personal data breach affecting your information.
9. Children
Our service is intended for adults purchasing property records. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent change. Material changes will be notified by a notice on the website.
11. Contact us
Privacy queries: [email protected]
General queries: [email protected]