Privacy Policy

Digitsflow LTD is the data controller for personal information processed in connection with Postcodewise. We are a private limited company registered in England & Wales (Company No. 16330711) with our statutory registered office at Suite A, James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE.

• Account & workspace data: name, email address, identifiers for login, organisation or workspace memberships, invitations and feature flags aligned to personal vs business account features.
• Operational content you send us: optional profile fields you choose (for example telephone if offered), postcode intelligence you request, uploads you deliberately submit inside a workspace API or UI, voluntary survey payloads you configure plus structured answers (often including UK postcodes selected by respondents) and timestamps or IP logs needed for moderation and misuse prevention.
• Technical & telemetry data: IP addresses, coarse device or browser fingerprints, referrer paths, webhook or API request diagnostics and security logs.
• Payment and agreement data: invoice details, quotation references or billing contact details you provide for paid API or workspace agreements. If online card checkout is introduced later, the checkout screen will name the payment processor before purchase.
• Support & feedback: free-text messages, complaint threads and attachments emailed or submitted via our contact workflows.

The Postcodewise Property Report browser extension (Chrome, Edge, Firefox, Opera, Brave, Arc, and Safari) surfaces a Postcodewise report next to property listings you view. This section explains exactly what it reads, what "location data" means for the extension, what we send to our servers, what stays on your device, and how it's protected.

What the extension reads from a page

The extension only runs on property listing pages on Rightmove, Zoopla, OnTheMarket, PrimeLocation, and OpenRent, plus our own sign-in page at postcodewise.co.uk/extension/connect. On a listing page, it reads the property's address, postcode, and asking or rental price directly from that page's visible content — the same text you can already see in your browser.

"Location data" — what it is and isn't

The extension does not use your device's GPS, Wi-Fi positioning, or IP-based geolocation, and does not request browser geolocation permission. The only location-related data it handles is the property address and postcode of the listing you are viewing — information already displayed on the page, not your own physical whereabouts.

What we send to our servers

When you are signed in, the extension sends the postcode (and, for the "this property" sale-history feature, the scraped address text) to our own servers at postcodewise.co.uk over HTTPS, so we can return the area report or that property's Land Registry sale history. We never send this data to any third party, and the extension makes no network requests to any domain other than postcodewise.co.uk — its permissions are scoped to the five listing sites above purely so it can read the page content on them; it cannot see or access any other website you visit.

What's stored on your device

Signing in stores a short-lived sign-in token, your name and email, and your report quota in the browser's local extension storage on your own device. This never leaves your device except as the bearer token sent with requests to postcodewise.co.uk to authenticate them. It is removed automatically when the sign-in expires or you disconnect, and everything is deleted immediately if you uninstall the extension.

How it's protected

• All communication with our servers is HTTPS-only.
• Host permissions are limited to the five listing portals and postcodewise.co.uk — nothing broader.
• No third-party analytics, advertising, or tracking code is bundled in the extension.
• Address and postcode data read from a page is used solely to generate your report, never sold or shared.
• You can disconnect your account from the extension at any time, which clears the stored sign-in token.

We process your personal data only where we have a lawful basis under UK GDPR:

• Contract: to onboard you, authenticate access, fulfil API or workspace entitlements where agreed, provision workspace artefacts (such as branded survey links), and honour written project agreements.
• Legitimate Interests: to improve and secure Postcodewise, prevent fraud, and analyse aggregated usage.
• Legal Obligation: to meet accounting, tax, and regulatory requirements.
• Consent: to send you marketing emails (you can withdraw at any time).

We disclose data only to trusted processors who help us operate Postcodewise:

Amazon Web Services (AWS)

Cloud hosting within the UK/EU.

DigitalOcean

Cloud hosting within the UK/EU.

Hetzner

Cloud hosting within the EU.

Google Analytics 4

Web performance analytics (IP anonymisation applied where configured).

Cloudflare

Security and content-delivery network

Microsoft Clarity

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

We may also share data where required by law or to protect our legal rights. We do not sell or rent your personal data.

Where we transfer personal data outside the UK or European Economic Area, we rely on appropriate safeguards such as:

• UK adequacy regulations;
• International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses;
• Binding corporate rules of our processors.

Under UK GDPR you have rights to:

• Access – obtain a copy of your data.
• Rectification – correct inaccurate or incomplete data.
• Erasure – request deletion ("right to be forgotten").
• Restriction – limit processing.
• Portability – receive data in a machine‑readable format.
• Object – object to processing based on legitimate interests or direct marketing.
• Withdraw Consent – at any time where processing is based on consent.

To exercise any of these rights, email [email protected]. We will respond within one month.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy and meet legal obligations (typically up to 6 years for financial records). Technical and organisational measures—including encryption in transit and at rest, access controls and regular penetration testing—are in place to safeguard your information.

Postcodewise uses cookies to operate and improve the platform. Full details are provided in our Cookie Policy, where you can manage preferences where tooling offers controls.

Questions or requests? Contact our Privacy Team:

[email protected]

Digitsflow LTD – Postcodewise Product
Suite A, James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE

© 2026 Digitsflow LTD.