Viven logoViven

Privacy Policy

Last updated: March 2026

1. Who we are

VivenUK LTD (trading as “Viven”, “we”, “us”, “our”) provides property reports and tools for homebuyers and renters in the United Kingdom. Our company is registered in England and Wales.

This policy explains how we collect, use, and protect your personal data when you use our website at vivenuk.co.uk and our services.

We are registered with the Information Commissioner’s Office (ICO). Our registration number is ZC096025.

2. What data we collect

Information you provide directly:

  • Postcode searches and property addresses you look up
  • Email address provided when purchasing a report (used for transactional purposes such as report delivery)
  • Email address and first name provided when subscribing to our newsletter (used for marketing communications)
  • Subscription source data (such as UTM parameters indicating how you found our website) collected alongside newsletter signups
  • Payment information (processed securely by Stripe — we never see or store your full card details)

Information collected automatically when you use our website:

  • Browser type, device type, operating system, and screen resolution
  • Pages visited, links and buttons clicked, and time spent on each page
  • Referring URL (how you arrived at our site)
  • IP address (anonymised)
  • Scroll behaviour and mouse movements (used to generate heatmaps for improving our website)
  • Session recordings — we record how visitors interact with our website (such as pages visited, clicks, and scrolling) to help us identify and fix usability issues. These recordings do not capture any text you type into form fields, passwords, or payment details.

3. Our legal basis for processing your data

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

  • Contractual necessity — to process your postcode search and deliver the property report you have requested and paid for.
  • Legitimate interests — to analyse how our website is used so we can improve our service, fix bugs, and ensure our site works properly. We have assessed that these interests do not override your rights and freedoms.
  • Legal obligation — to retain payment records as required by UK tax law.
  • Consent — when you sign up to our newsletter, you give us explicit consent to send you marketing communications. You can withdraw this consent at any time by clicking the unsubscribe link in any newsletter email or by contacting us at hello@vivenuk.com.

4. How we use your data

We use your data to:

  • Generate and deliver property reports you have requested
  • Process payments for reports
  • Improve our website and services by analysing how visitors use the site
  • Identify and fix technical issues and usability problems
  • Send you transactional emails related to your report purchase (such as delivery confirmation). These emails are sent on the basis of contractual necessity and do not require separate marketing consent
  • Send you marketing communications (such as our newsletter) if you have given us your explicit consent to do so by subscribing. You can unsubscribe at any time

We do not sell your personal data to any third party.

5. Cookies and tracking technologies

We use cookies and similar technologies on our website. Specifically:

  • PostHog — we use PostHog for website analytics, including tracking page views, clicks, heatmaps, and session recordings. PostHog sets a first-party cookie to distinguish unique visitors. No data is shared with third-party advertisers.
  • Stripe — may set cookies as part of the secure payment process.
  • Essential cookies — required for our website to function properly.

You can control cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

6. Data sharing

We share your data only with the following third parties, and only to the extent necessary to provide our services:

  • Stripe (stripe.com) — for secure payment processing. Stripe acts as an independent data controller for payment data. See Stripe’s privacy policy at stripe.com/privacy.
  • Vercel (vercel.com) — for website hosting and deployment.
  • PostHog (posthog.com) — for website analytics, session recordings, and heatmaps. Data is stored on PostHog’s servers within the European Union (Germany).
  • Government and public data APIs — we send postcodes and/or coordinates to publicly available data sources (including HM Land Registry, the Energy Performance Certificate register, Police UK, and others) to generate your property reports. This data is publicly available and no personal data beyond the postcode you searched is transmitted.
  • Street Data (streetdata.co.uk) — a commercial property data provider. We send property addresses and postcodes to Street Data to retrieve detailed property information for buyer reports.
  • Anthropic (Claude) (anthropic.com) — we use Anthropic’s Claude API to generate certain report insights and summaries. Property addresses and aggregated data points (not personal data) are sent to Anthropic for this purpose. Anthropic’s API terms govern data handling for these requests.
  • Mapbox (mapbox.com) — we use Mapbox to generate static map images for reports. Property coordinates are sent to Mapbox for this purpose.
  • Resend (resend.com) — we use Resend to deliver transactional report emails. Your email address and report link are shared with Resend for this purpose.
  • HubSpot (hubspot.com) — we use HubSpot as our customer relationship management (CRM) platform to manage newsletter subscriber contacts and send marketing communications. Email addresses, first names, and subscription source data are shared with HubSpot for this purpose. HubSpot processes data under its Data Processing Agreement with Standard Contractual Clauses. See HubSpot’s privacy policy at legal.hubspot.com/privacy-policy.

We do not share your data with any other third parties, and we do not sell or rent your data.

7. International data transfers

Your data is primarily processed and stored within the United Kingdom and the European Economic Area (EEA). PostHog stores analytics data on servers located in Germany (EU). Stripe may process payment data in accordance with its own privacy policy, which may involve transfers outside the UK under appropriate safeguards. HubSpot stores newsletter subscriber data on servers in the United States; this transfer is governed by HubSpot’s Data Processing Agreement, which includes Standard Contractual Clauses as approved by the UK Information Commissioner’s Office. We do not transfer your personal data outside the UK/EEA except where adequate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision.

8. Data retention

  • Property reports: stored for 30 days after generation, then automatically deleted.
  • Payment records: retained for 6 years as required by UK tax legislation (HMRC requirements).
  • Analytics data: retained by PostHog in accordance with their data retention policies. We periodically review and delete analytics data that is no longer needed.
  • Report purchase email addresses: retained for up to 30 days alongside your report, and up to 6 years where linked to payment records as required by UK tax legislation.
  • Newsletter subscriber data: retained in our CRM (HubSpot) until you unsubscribe or request deletion. When you unsubscribe, your contact record is marked inactive for suppression purposes (to ensure we do not re-subscribe you). You can request full deletion of your data at any time by contacting us.

9. Your rights

Under UK GDPR, you have the following rights:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct any inaccurate personal data.
  • Right to erasure — you can ask us to delete your personal data (subject to legal obligations we may have to retain certain records).
  • Right to restrict processing — you can ask us to limit how we use your data.
  • Right to data portability — you can request your data in a machine-readable format.
  • Right to object — you can object to our processing of your data where we rely on legitimate interests.
  • Right to withdraw consent — where we process your data based on consent (such as marketing emails), you can withdraw that consent at any time.

To exercise any of these rights, please email us at hello@vivenuk.com. We will respond to your request within one month.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

12. Contact us

For any questions about this privacy policy or how we handle your data, please contact us at:

Email: hello@vivenuk.com
Company: VivenUK LTD