Privacy Policy

1. Who we are

Phantom Finance Ltd (company number 16874799, registered in England & Wales; registered office 94 Ystrad Road, Pentre, Wales, CF41 7PW) runs Phantom Finance. We are the controller of the personal information described here, which means we decide how and why it is used. Contact us at info@phantom-finance.co.uk.

2. What we collect, and why

• Enquiries and contact forms (name, email, phone, your message, the finance you are asking about): to reply and, if you tick the box, to keep you informed. Our basis is your consent and our legitimate interest in answering you.
• Accounts, purchases and reports (name, email, what you bought, payment confirmation from Stripe, the deals and properties you analyse): to provide the service you asked for. Our basis is the contract with you, and legal obligations to keep accounting records.
• Information about other people in your deals (for example a tenant, vendor or investor you type in): you are responsible for having a good reason to give it to us. We use it only to build your report.
• Partner enquiries (agents, brokers, investors, developers asking about white label): to reply and to set up the partnership.
• Website use: analytics and advertising cookies, only if you accept them (see section 7).
• Security and service records (your IP address and browser details when you submit a form): to prevent abuse and to prove consent. Our basis is our legitimate interest.

We do not sell your personal information. We do not use it to make decisions about you by automated means that have legal or similarly significant effects.

3. People who are not our customers

To research properties and to publish a directory of property events, we also use publicly available information: company records and officers (Companies House), property and sale records (HM Land Registry, council registers) and the public contact details that event organisers publish. This can include the names of company directors, the organisers of events, and business contact details. Our basis is legitimate interest in helping property investors check facts and find events. We keep it to what is needed, we do not use Land Registry company-ownership data to market to anyone, and we do not publish home addresses of private individuals. If you appear in our records and want to see it, correct it or have it removed, email us and we will act within one month.

4. Who we share it with

We use these companies to run the service. They act on our instructions and may only use your information for that purpose:

If you ask us to arrange finance, we may share your enquiry with a lender or an authorised adviser we work with, with your knowledge. We may also share information where the law requires it, or to protect our rights.

5. Transfers outside the UK

Some providers above (for example Google, Meta, Stripe, Mailchimp, Resend, Sentry and Clerk) are based in, or process information in, the United States or elsewhere outside the UK. Where they do, we rely on the UK data bridge for certified providers or on the UK International Data Transfer Agreement or Addendum, so your information keeps equivalent protection.

6. How long we keep it

• Enquiries and leads who do not become customers: up to 24 months after our last contact, then deleted.
• Purchase and payment records: 6 years, as the law and our accountants require.
• Accounts, deals and reports: until you ask us to delete them or close your account, then removed within 30 days (purchase records excepted).
• Report share links stop working after 30 days; the report itself stays in your account.
• Marketing contacts: until you unsubscribe, after which we keep only your email on a suppression list so we never email you again.
• Information from public registers: refreshed from the source and deleted when no longer needed, or when you ask.
• Analytics and advertising cookies: for the lifetimes in section 7.

7. Cookies & advertising

We use Google Analytics and Google Tag Manager to understand how visitors use our website, and the Meta (Facebook/Instagram) Pixel to measure the effectiveness of our advertising and to show our ads to people who have previously visited pages such as our homepage ("retargeting"). These stay switched off until you press Accept on our cookie banner; if you press Reject, or ignore the banner, none of them loads and no analytics or advertising cookie is set. You can change your choice at any time with Cookie settings (also in the page footer).

If you accept, the cookies are: _ga and _ga_<id> (Google Analytics, up to 2 years) and _fbp (Meta Pixel, up to 90 days), set by Google and Meta, who receive your IP address and the pages you view. We do not use them to identify you personally unless you separately submit an enquiry, in which case your enquiry may additionally be used to build advertising audiences and to exclude you from future ads for the same opportunity once you have already enquired. Your choice is remembered in your browser (phantom_cookie_consent, local storage). Cookies strictly necessary to run the site need no consent.

You can opt out of Meta's use of this data for advertising via your Facebook ad preferences, and out of Google's advertising cookies via Google Ads Settings. Most browsers also let you block or delete cookies directly.

8. Your rights

You can ask us to: give you a copy of your information; correct it; delete it; restrict or stop (object to) how we use it; and move it to another provider. Where we rely on your consent, you can withdraw it at any time (for marketing, use the unsubscribe link in any email). Email info@phantom-finance.co.uk and we will answer within one month. We may need to confirm who you are first.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

9. Security and changes

We protect your information with access controls, encrypted connections and by limiting who can see it. No system is perfectly secure; if a breach puts your rights at risk we will tell you and the regulator as the law requires. We will update this notice when our practices change and show the date at the top.