Privacy policy

1. Who is responsible

Oltinmulk is operated by Origin Collective Limited (company no. 16566341, registered in England and Wales), 124-128 City Road, London, England, EC1V 2NX. We are the controller of the personal data described here under the UK GDPR and the Data Protection Act 2018. Contact: hello@oltinmulk.com.

2. What we collect

Account: your email address, a scrambled (hashed) version of your password, your language and email-time preferences.

Use of the service: the requests you write and their filters, the properties matched to them, and the statuses, stars and notes you add; projects you create or join, and the email addresses of people you invite.

Messages: feedback you send us, cancellation reasons you give, and copies of the emails we send you.

Payments: handled by Stripe. We receive your subscription status, the amount and dates, never your full card number.

Technical: one essential sign-in cookie, and short-lived server logs (including IP address) used for security.

Visit statistics: Cloudflare Web Analytics counts page views, the page you came from, your browser type and your country. It sets no cookies, does not store your IP address and does not follow you across other sites.

Listings: the public listings we collect can contain names or phone numbers that sellers chose to publish. We show them as published, link to the source and remove them on request.

3. Why we use it, and on what basis

To provide the service you signed up for: your account, matching, emails, projects and payments (contract).

To keep the service secure, prevent abuse and improve it, including reading feedback and cancellation reasons (our legitimate interests).

To keep tax and accounting records (legal obligation). We do not sell your data and we do not use advertising or tracking cookies.

4. Who processes it for us

Hetzner Online (servers in Finland, EU) hosts the service and database. Resend delivers our emails. Stripe processes payments. Cloudflare provides the domain's DNS. Each acts on our instructions under a data processing agreement.

Some of these providers are based in, or may access data from, the United States. Such transfers are protected by the UK–US data bridge or by the UK International Data Transfer Addendum and standard contractual clauses.

5. How long we keep it

Account and request data: while your account is open, and deleted within 30 days after you ask us to close it. Copies of emails we send: up to 12 months. Server logs: up to 30 days. Billing records: 6 years, as tax law requires.

6. Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to hello@oltinmulk.com; we reply within one month.

You can also complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to sort it out first.

7. Cookies

We use a single essential cookie that keeps you signed in. It is strictly necessary, so it does not need consent, and we use no advertising or tracking cookies. Our visit statistics (Cloudflare Web Analytics) use no cookies at all.

8. Children

The service is not for anyone under 18, and we do not knowingly collect their data.

9. Changes

If we change this policy in a way that matters, we will tell you by email or in the service before the change takes effect.