Hometrack Consumer – Privacy Notice

Hometrack Data Systems Limited and Hometrack MLS Limited (referred to as “Hometrack”, “we” or “us”) is committed to protecting and respecting your privacy.

This Privacy Notice applies to living individuals. You can find more information on how your personal data may be processed for business to business (B2B) purposes on our websites, platforms, applications and databases at https://www.hometrack.com/privacy/. You must refer to the B2B privacy notice and any more specific privacy notices for how your personal data is processed for business purposes.

For the purposes of UK data protection law and regulation, we are the data controller (where we determine or participate in determining the purposes and manner in which your personal data is processed). When we process identifiable personal data that relates to you as an individual, we are subject to data protection law and regulation including the UK General Data Protection Regulation (UK GDPR), the Data (Use and Access) Act 2025, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003. In some instances, we act as a Joint Controller with our business partners (such as mortgage lenders) where we jointly determine the purposes and means of processing data for valuation and risk analytics. In other instances, we act as a data processor on the instructions of a data controller. This privacy notice details how we comply with data protection law and regulation as a data controller.

For the purposes of data protection law and regulation, the data controller is either Hometrack Data Systems Limited or Hometrack MLS Limited of The Cooperage, 5 Copper Row, London SE1 2LH. Our ICO registration references are Z1592628 and ZA842139 respectively. Hometrack is part of the ZPG Limited group of companies, comprising ZPG Limited and its subsidiaries (the “ZPG Companies”).

There may be additional privacy notices that govern how we use your personal data provided, collected, hosted or otherwise processed by our products, services, platforms, applications and databases. You must refer to this privacy notice and any more specific privacy notices for how your personal data is processed by Hometrack. Ensure you check back regularly for any updates to how your personal data may be processed.

Personal Data We Collect From You

We may collect and process the following information about you:

Personal Data You Provide to Us

You may provide us with information in several ways, including by filling in forms on our website (https://www.hometrack.com/) or by corresponding with us such as by phone, email and live chat. This includes information you provide when you register for an account, subscribe to or buy any of our products or services, enter a competition, promotion or survey, provide feedback, correspond with our teams generally, or report a problem with our website.

This information may include your name, address, email address, phone number, partial payment details, property details (linked to you) and any other information you provide to us. We also process your account data such as a login name and password.

Personal Data You Provide to Us: In More Detail

Personal Data Collected From You	Why Your Personal Data Is Collected
Your full name, address, email address, mobile phone number and where required other contact details.	To provide you with access where applicable, and allow you to select and utilise our service and products. To process your request to be contacted about our products and services. To share with third parties for the purposes of facilitating or providing you with products, services and benefits. To enable us to contact you and send data, information or products that you have requested or are required for the delivering of your chosen product or service. To provide or process information where legally obligated such as financial crime, identity checks and other vetting or referencing. To enable us to engage in marketing and to data share (such as newsletters or marketing emails for products and services that we believe will be of interest to you). See “Who we share your personal data with”. We collect most of your personal data directly from you when you decide to utilise our products and/or services or make an enquiry on our website, and usually require it to perform our contract with you or on a legitimate interests basis.
The IP address or other device or user identifier you use to access our websites, applications, platforms and databases.	To make the websites, applications, platforms and databases function correctly. To improve the functionality and performance of our websites, applications, platforms and databases, and where relevant to gain data insights and help with personalisation. To allow us to understand your user journey and for us to know where you have taken an action such as making a payment or moving to a different website. For us to provide you with personalised content or targeted marketing. Here, we are using your consent or legitimate interests as our lawful bases. We collect most of your personal data from automatic recognition of your IP address or placement of cookies on your devices, only with your consent where required.
A record of any communication / correspondence you have with us (e.g. when you contact us by email, telephone or post).	To enable us and where applicable third parties to maintain records of our engagement with you. To respond to your queries and complaints and retain evidence of what has been communicated. We keep these records on a legitimate interests basis, to be able to deal efficiently with you as a customer, and sometimes where required by a legal obligation (for example, to keep certain customer records to comply with our accounting and HMRC requirements).
Your account data such as login name and password (where applicable) and other account identifiers and behaviours.	To allow you to create and securely access your account. To keep your account and contact personal data within your account secure. To allow us to monitor and understand the use of our websites, applications, platforms and databases. To allow us and third parties acting jointly for us to assess performance and behaviour of online activity and communications. Your account data is processed under performance of a contract in compliance with our terms and conditions. We also process account data under legitimate interests for security, insights, audit and monitoring.
Any personal data that you provide to us as part of a survey or feedback.	To improve our website, applications, platforms, databases, products and services. We may ask for your feedback and process your personal data under legitimate interests. We will only ever further use or make public personal data you have provided in your feedback with your consent.
Payment card or account details (where applicable)	We do not directly collect or store personal accounts or full payment card details, we use approved specialist payment card providers who hold and process the personal data on our behalf (for example, Stripe). We may retain some information to allow us to link the transaction to you, this information will never be your full account or card details. Account details related to transactions of a business is not personal data. We process personal data for payment purposes mostly for the performance of a contract when you choose to purchase or subscribe to our products and services.
Artificial Intelligence (AI) (where applicable)	Where we or a third party acting on our behalf may use artificial intelligence in any processing of personal data we will always robustly assess the risk to your personal data and will rely on legitimate interests, or ask for your consent where required under applicable laws. We will take reasonable steps to inform you where applicable of any use of AI or similar technology.

Personal Data We Collect About You

When you use our website, we automatically collect information about your device, including your IP address, information about your visit (including how you got to our websites) and how you use our services. We may combine this information with other information you have provided to us or which we have received from other sources. Where required we will ask for your consent to do so.

Personal Data We Receive From Other Sources

If you use any of the other websites or services provided by the ZPG Companies, we may receive information about you or your device in relation to that use, including your IP address, information about your visits how you use the services of the ZPG Companies.

We work closely with third parties (for example, business partners, advertising networks, analytics providers and search information providers) and may receive information about you from them. This could include socio-demographic information and information about your likely interests based on your previous web browsing and purchases. We may combine this information with other information you have provided to us or which we collected about you.

Consumer Information

Through Hometrack, you are able to download a property report relating to your property in a personal capacity.

Payment Card Details

We are committed to ensuring the protection of your payment card details and comply where required with the Payment Card Industry’s Data Security Standard (PCI-DSS). Payments made via our website are processed and managed by specialist payment card providers. The full payment card number is never stored by us and is only stored and processed by the specialist payment card provider approved by us. We may keep an encrypted authentication token to represent your card and this token is transmitted to the specialist payment card provider during the order or refund processing.

We may retain some information to allow us to link the transaction to you, this information will never be your full account or card details. We will retain your consent to our privacy notices and practices where needed to evidence you have agreed for a payment to be made. Your financial information will also be processed by our payment provider in order to generate any valid requested refund. Subscriptions and payments may be stopped or paused at our or our payment provider’s discretion, to comply with legal and regulatory obligations, or to prevent fraud.

How We Use Your Personal Information

We use your personal information for the following purposes:

Providing Our Services to You and Fulfilling Your Requests

Providing you with the information, products and services you request from us or another ZPG Company.
Completing any transaction you are undertaking with us or another ZPG Company.
Promotions or competitions that you enter with us or another ZPG Company.
Allowing you to participate in our interactive features when you choose to do so.

Marketing, Advertising and Monetisation

Providing you and others with information about goods and services that we, other ZPG Companies and selected third parties offer that may interest you or them, which may be based on inferences about your or their likely interests based on your activity on websites operated by ZPG Companies or third parties.
Customising or enhancing your experience of our services, which may use inferences about your likely interests based on your activity on websites operated by ZPG Companies or third parties.
Using historical valuation and transaction data to build predictive models (such as our Mover Flag product). We share these predictive insights with commercial partners to facilitate targeted marketing. These partners act as independent Controllers of the data we share with them.
Delivering relevant advertising to you on websites operated by ZPG Companies or third parties or in direct communications from us, which may use inferences about your likely interests based on your activity on websites operated by ZPG Companies or third parties.
Measuring and understanding the effectiveness of advertising we serve to you and others.

Service Improvement and Account Management

Ensuring that our content is presented in the most effective manner for you and your device.
Administering our websites and apps and for internal business administration (for example, troubleshooting, data analysis, testing, research, statistical and survey purposes).
Protecting our interests and those of third parties and as part of our efforts to keep our services safe and secure.
Managing and operating your account with us.
Using property data and transaction trends to build, calibrate, and improve our Automated Valuation Models (AVMs) and property risk analytics, and to identify properties with a high statistical probability of moving home for market analytics purposes.

Lawful Basis for Processing

Our legal basis for processing your personal information for the purposes described above will typically be one of the following:

Contract

It is necessary for us to process your personal information to perform a contract to which you are a party, or to take steps at your request prior to you entering into a contract.

Consent

You have consented to us using your personal information for this purpose (for example, when you create an account with us, agree to receive marketing emails from us or create an alert). You can withdraw your consent at any time by deleting the information from your account or updating your marketing preferences.

Legitimate Interests

It is in our legitimate interests to use your personal information to operate, improve and promote our services (for example, when we customise your experience of our services or use your information for analytics purposes) and to protect our business. Sometimes, we may process your personal information when it is in the legitimate interests of another company, such as another ZPG Company.

Further examples of legitimate interests, where relevant, may include but are not limited to:

Sharing data internally and with third parties, so you do not need to re-enter it.
Sharing data internally and with third parties to make available to you products or services to enhance our, or a third party product or service, or your client experience.
Sharing and receiving data from third parties to offer and provide you with benefits for choosing to use our or a third party product or service.
Providing emails concerning status, reminders and outcomes on your use of our, or a third party product or service.
Receiving data from third parties to speed up and improve the efficiency of our engagement and to keep all parties where required informed.
Receiving data from third parties to allow us to understand your engagement with them, and for them to share with us the status of that engagement, where applicable, to facilitate the accurate receipt of referral or other monies payable to us by third parties, or the payment of monies by us to others, for products and or services you may have chosen to use or are provided to you as a benefit.
Auditing and monitoring our processes, your engagement and feedback to help keep our high standards.
Market research, statistical analysis, management information, data aggregation and product development for own purposes, third party purposes or to assist the wider property management industry.
Training, communications and awareness.
Securing our services, ensuring data is up to date and accurate, and keeping our services online.
Preventing or prosecuting fraud and other criminal behaviour or activity.
Transfer personal data for the purposes of developing, migrating and maintaining IT infrastructure and services.
For direct marketing, electronic mail marketing, personalisation, targeting and data shares for the purposes of targeting or promotional activities where consent is not required.
Non targeted marketing on our websites, applications and platforms of either our products or services or products and services of third parties.
Recording where applicable of telephone calls and related usage, and performance activity.
For relevant processing by another company, such as another ZPG subsidiary, or the wider public good.

Legal Obligations

It is necessary for us to use your personal information for us or another ZPG Company to comply with a legal obligation.

Sharing Your Personal Information

We share IT infrastructure with other ZPG Companies, and so we may share your personal information with those ZPG Companies to help store your data efficiently and securely. Other ZPG Companies may access your personal information to help provide you with services that you request from those ZPG Companies (for example, to help you manage your home) and to provide you with relevant recommendations of other ZPG services and products. These recommendations may use inferences about your interests based on your activity on our websites and apps and on other websites and apps operated by other ZPG Companies.

We may also share your personal information with third parties in the following circumstances:

Our Service Providers: To Help Us Run Our Business and Perform Services You Request

We may provide your personal information to our business partners, suppliers and subcontractors who provide services to us or where necessary to perform a service that you have requested.

Advertisers and Advertising Networks: To Serve Relevant Adverts to You and Others

We may provide your personal information to our partner advertisers and advertising networks that require that information to select and serve relevant adverts to you and others.

Analytics and Search Engine Providers: To Help Us Improve Our Services

We may provide information about your visit to analytics and search engine providers to help us improve and optimise our services. We generally only share this information in a form that does not directly identify you.

We may also share your personal information with third parties for the following reasons:

If We Sell or Buy Any Business or Assets

If we sell or buy any business or assets, we may disclose your personal information to the prospective seller or buyer of that business or those assets, along with its professional advisers. If Hometrack (or substantially all of its assets) is acquired, personal information held by it about its users will be one of the transferred assets.

To Obtain Professional Advice

We may disclose your personal information to obtain professional advice (for example, from lawyers or financial advisors).

To Comply With a Disclosure Request

We may disclose your personal information if required to do so by law or in response to a request from law enforcement or another regulatory authority. We may disclose your personal information to enforce our agreements with you or to protect the rights, property or safety of Hometrack, its users or others. This includes sharing personal information with other organisations for fraud prevention purposes.

Other Data Shares

We may also disclose or share your personal data to third parties in the following circumstances:

If you request we do so.
Where you have provided your consent for us to market, introduce or promote a third party or partner product or service.
To a subsidiary of the ZPG Group, which means subsidiaries, our ultimate holding company and its subsidiaries as defined in section 1159 of the UK Companies Act 2006.
If we refinance, or sell any business or assets, we may disclose your personal data to the prospective seller, buyer or investor of such business or assets.
If we, a subsidiary or asset providing you with a product or service is merged, sold or otherwise acquired by a third party, personal data about you may be accessed and or transferred to the third party.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to protect our rights, property and safety, including that of our customers, or others. This includes exchanging data with third parties for the purposes of fraud and other criminal protection, and where needed to protect the vital interests of an individual.

Transferring Your Personal Data Out of the UK and EEA

While our data is predominantly hosted in the UK and the European Economic Area, we use certain third-party providers (such as analytics, marketing, and hosting services) that may transfer your personal data to countries outside the UK and EEA, primarily the United States.

Where we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information, specifically:

Reliance on Adequacy Decisions: We ensure the receiving party is in a country deemed adequate by the UK.
UK-US Data Privacy Framework (DPF): For service providers certified under the DPF, we rely on their certification. Examples of reliance on certification includes any processing by Google or Microsoft, such as for the processing of IP addresses by analytics cookies via Microsoft Clarity and/or Google Analytics.
Standard Contractual Clauses (SCCs) & UK Addendum/IDTA: Where the DPF does not apply or for specific infrastructure providers (such as Vercel), we rely on Standard Contractual Clauses, the UK Addendum to the EU SCCs, or the International Data Transfer Agreement (IDTA) to ensure your data receives a level of protection equivalent to UK law.

Hometrack’s website and the Hometrack portal are intended for use by UK citizens only and are not intended to be used by children.

How Long Your Personal Data Is Kept For

We only keep your personal data long enough to carry out tasks we collected it for. Different retention periods will apply depending on the type of personal data and which of our products or services you are using. After that time, we securely erase your personal data. Erasure may include anonymising data or where required, putting data beyond use.

Cookies

We use cookies and other similar technologies to distinguish you from other users of our websites and apps (including when you browse third party websites). This helps us to provide you with a good experience when you use our services (for example, to remember your login details and improve our services). We also use cookies and similar technologies to show you more personalised advertising, including Hometrack ads on other websites. You may adjust the settings on your browser to refuse cookies but some of our services may not work if you do so. For detailed information on the cookies we use and why we use them, please read our Cookie Policy.

Opting Out of Collection of Information by Third Party Advertisers

Our third party advertisers and advertising network providers (“Ad Providers”) may provide you with ads on our websites and apps or on other websites. To make those ads more relevant and help measure their effectiveness, the Ad Providers may use cookies and similar technologies. They record your activity (including pages visited) and estimate what information interests you most. They use this information in accordance with their own privacy policies. For a link to each of those policies and for information about how to opt out, please read our Cookie Policy.

Your Data Subject Rights

You have data subject rights which are granted to you under data protection law, which you can exercise at any time. We manage all rights requests raised to us as the law required. This means there may be legal reasons why we cannot complete all requests.

You have the following data subject rights concerning your personal data we control, which you can generally exercise free of charge (subject to certain limitations detailed below):

Right	Description
Right of Access	You have the right to obtain from us confirmation as to whether your personal data is being processed, and you may have the right to access such personal data. Personal data is only disclosable if it is your personal data. Where an exemption to the disclosure of data applies or the data does not relate to you, we will be unable to provide you with access to such data. We will provide you with information on any withheld or redacted data in writing.
Right to Rectification	We will use reasonable endeavours to ensure your personal data is accurate. In order to assist us with this, you should notify us of any changes to the personal data you have provided to us by sending us a request to rectify your personal data where you believe the personal data we have is inaccurate or incomplete. You can help us keep your personal data accurate by informing us when any changes occur.
Right to Erasure (Right to be Forgotten)	Asking us to delete your personal data will result in us erasing your personal data in line with data protection law time scales, unless there is a legitimate and legal reason why we are unable to delete certain or all of your personal data, in which case we will inform you of this in writing. Erasure may include anonymising data so you are no longer identifiable. If we are not able to meet your right to erasure we will inform you in writing. We will retain a copy of your erasure request to evidence receipt and response.
Right to Restriction	You may have the right to ask us to stop processing your personal data. We may be able to restrict the processing of your personal data where there is a valid reason to do so and the restriction is possible. Personal data is often restricted whilst an investigation or action is undertaken in response to your request on another data subject right, such as when your personal data is waiting to be deleted in line with a request for erasure. If we are not able to restrict the processing we will inform you in writing.
Right to Data Portability	Where it is technically feasible for us to do so, and within lawfully required collection of personal data parameters, you may have the right to request that we transmit your personal data to another data controller in a structured, commonly used and machine-readable format. The right to portability only applies in certain circumstances. We will always provide you with a reason in writing should we be unable to meet a portability request.
Right to Object	You may be able to object to our use of your personal data, when we use it based on our legitimate interests or those of a third party, unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims. If we are not able to meet your right to object we will inform you in writing. You have the right to object at any time to your personal data being processed for direct marketing purposes. If you wish to exercise this right, please contact us.
Automated Decision Making and Profiling	Where we or a third party acting on our behalf processes personal data via automated decision making or profiling to make a decision based solely on that automated processing or profiling, and that decision produces legal effects concerning you or similarly significantly affects you, you will be provided with a means for you to obtain human intervention to question the outcome. We act as Joint Controllers with our customers (such as mortgage lenders) to set and calibrate risk and valuation limits to facilitate automated decision making. Where we act as Joint Controllers, we have agreed on our respective responsibilities for complying with your data protection rights, and you may exercise your rights in respect of both parties. Where our models produce outcomes that significantly impact you, these outcomes are subject to human oversight or review by your mortgage lender prior to any final decision being made by them about you.
Right to Withdraw Consent	Where you have given us consent to use your personal data, you may withdraw this at any time subject to the consented processing not already having taken place. No further processing will take place as soon as reasonably possible and always within legally required time scales, once consent has been withdrawn. Withdrawing consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn.
Right to Be Informed	You have the right to know what personal data we hold on you, how we use that personal data, how long we hold it and who we share it with. This information is included in this Privacy Notice, together with any more specific notices given to you during your user journey.
Right to Complain	You have the right to lodge a complaint to a supervisory authority such as the Information Commissioner’s Office (ICO) in the UK (see www.ico.org.uk). Although we encourage our customers to engage with us and allow us the opportunity to first respond to any complaint. In the event you have any concerns or complaints about our privacy practices, please allow us an opportunity to help you by emailing customerservices@hometrack.com, or by completing our online complaints form below. You can also write to us. See Contact us below. See our Privacy Complaints Policy for how we handle data protection complaints.

For more information on each of those rights, including the circumstances in which they apply, please contact us. See Contact us below or see guidance from the UK Information Commissioner’s Office (ICO).

If you would like to exercise your data subject rights, please:

Email or write to us. See Contact us below;
Provide enough information to identify yourself, for example your full name and email address, and any additional identity information we may reasonably request from you; and
Let us know what right you want to exercise and the information to which your request relates.

Links to Third Party Websites

Our websites and apps may contain links to other websites. This privacy notice does not apply to those other websites and we do not accept liability for the content of any other website. Please check the privacy notice of any other website before submitting any personal information to it.

Contact Us

If you have questions about this privacy notice or the way in which Hometrack processes your personal information, you can contact us using the details below:

Post: Hometrack Data Protection Officer, The Cooperage, 5 Copper Row, London SE1 2LH
Email: customerservices@hometrack.com

We hope that we will be able to resolve any questions or concerns you have. However, you may at any time raise your concern with the UK Information Commissioner at:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

For how to raise a formal privacy complaint see Right to Complain.

Changes to This Privacy Notice

From time to time, we change this privacy notice. We will post any changes to this page, so please check it often. Where appropriate, we will notify you of the change, for example by email or by means of a notice on our websites, applications, systems or platforms. Your continued use of our relevant products and services, including use after the posting of any changes, will be deemed acceptance and acknowledgement by you of the information found within privacy notice. You are responsible for ensuring we have an up-to-date active and deliverable email address for you and that you regularly visit this privacy notice to check for any changes.

Last Updated: June 2026

Subscribe to our newsletter