Privacy Policy

1. Who We Are

Amberalis ("Amberalis", "we", "our", or "us") operates the Amberalis platform, providing real estate data intelligence and property valuation services. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

For the purposes of applicable data protection legislation, Amberalis is the data controller responsible for your personal data.

2. Data We Collect

Depending on how you interact with our platform, we may collect and process the following categories of personal data:

• Identity data — first name, last name, username or similar identifier.
• Contact data — email address, telephone number, billing address.
• Account credentials — encrypted password and authentication tokens.
• Usage data — information about how you use our website and services, including pages visited, features used, and search queries submitted.
• Technical data — IP address, browser type and version, time zone, browser plug-in types, operating system and platform, and other technology identifiers on the devices you use to access our platform.
• Transaction data — details of any licences or services you have purchased, including billing records.
• Communications data — messages or enquiries you send to us via email or support channels.

We do not collect any special categories of personal data (such as data about race, religion, health, or biometric data), nor do we collect any data about criminal convictions or offences.

3. How We Collect Your Data

We collect data through the following means:

• Direct interactions — when you register for an account, fill in forms, submit property queries, purchase a licence, or contact us directly.
• Automated technologies — as you use our platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies.
• Third parties — we may receive data from analytics providers, payment processors, and authentication services we rely on to operate the platform.

4. How We Use Your Data

We use your personal data for the following purposes:

• To register and manage your account on our platform.
• To provide and deliver the services you have requested, including property valuations.
• To process payments and manage your licence subscription.
• To communicate with you regarding your account, service updates, and support requests.
• To improve and personalise your experience on our platform.
• To monitor and analyse usage patterns and ensure the technical performance of our services.
• To detect, prevent, and address fraud, abuse, security incidents, or other harmful activity.
• To comply with legal obligations and enforce our terms of service.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance — processing necessary to provide our services to you under the terms you agreed to upon registration.
• Legitimate interests — processing necessary for our legitimate business interests, such as improving our platform, preventing fraud, and ensuring security, provided those interests are not overridden by your rights.
• Legal obligation — processing necessary to comply with applicable law, regulation, or court order.
• Consent — where we have asked for and you have given explicit consent, such as for optional marketing communications. You may withdraw consent at any time.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your data with trusted third parties only in the following circumstances:

• Service providers — companies that provide services on our behalf, such as hosting, payment processing, analytics, and customer support, who are contractually bound to protect your data.
• Legal requirements — where we are required to disclose data by law, regulation, legal process, or enforceable governmental request.
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy.
• Protection of rights — where disclosure is necessary to protect the rights, property, or safety of Amberalis, our users, or the public.

All third-party service providers are required to handle your data securely and in accordance with applicable data protection laws.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations.

Account data is retained for the duration of your active account. Following account deletion, we may retain certain data for up to 90 days to allow for account recovery, after which it is permanently deleted or anonymised. Transaction and billing records may be retained for up to 7 years to comply with financial and tax regulations.

Usage and technical data collected for analytics purposes is typically retained in aggregate, anonymised form after 12 months.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include encryption of data in transit and at rest, access controls, and regular security assessments.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you share data with us at your own risk. If you suspect a security breach, please contact us immediately.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data where there is no legitimate reason for us to continue processing it.
• Right to restriction — request that we suspend processing of your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format and transfer it to another controller.
• Right to object — object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us using the details in the Contact section below. We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data in accordance with applicable law.

10. Cookies

We use cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files placed on your device when you visit our website.

We use the following types of cookies:

• Strictly necessary cookies — required for the platform to function, including session authentication. These cannot be disabled.
• Analytics cookies — help us understand how users interact with the platform so we can improve it. These are only set with your consent.
• Preference cookies — remember your settings and preferences to improve your experience.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform.

11. Children's Privacy

Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their personal data, please contact us and we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or via a notice on our platform.

We encourage you to review this policy periodically. Your continued use of our platform after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: