Privacy Policy

Last updated: September 15, 2025

This Privacy Policy describes how Atlantic Sites LTD ("Company", "we", "us", or "our") collects, uses, and shares personal data when you ("you" or "user") use the EstateTrio website and services (the "Service"). It also explains your privacy rights and how the law protects you.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with initial capital letters have meanings defined below. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

  • Account means a unique account created for you to access our Service.

  • Company (controller) refers to Atlantic Sites LTD, Springbank House, Whitewell Road, Cow Ark, Clitheroe, England, BB7 3DG.

  • Cookies are small files placed on your device by a website, used for purposes such as session management and analytics.

  • Country refers to the United Kingdom.

  • Device means any device that can access the Service, such as a computer, mobile phone, or tablet.

  • Personal Data is any information related to an identified or identifiable individual.

  • Processor means a third party that processes Personal Data on behalf of the Company.

  • Service refers to the EstateTrio website and related applications.

  • Usage Data refers to data collected automatically, such as device identifiers, IP address, and interaction logs.

  • Website refers to EstateTrio, accessible from https://www.estatetrio.com.

  • You means the individual accessing or using the Service, or the company or other legal entity on whose behalf the Service is accessed.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

We may collect the following Personal Data when you use the Service:

  • Email address
  • First and last name
  • Phone number (if provided)
  • Organization/office and role (if provided)
  • Account credentials (hashed)
  • Content you upload to the Service (e.g., video files, documents, property listing media, attendee information for open houses)
  • Support communications and preferences (e.g., marketing opt-in)

Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include your IP address, browser type and version, the pages you visit, time and date of your visit, time spent on pages, referring URLs, device identifiers, and diagnostic data. When accessing via mobile, we may collect device type, OS, and mobile browser details.

Tracking Technologies and Cookies

We use Cookies and similar technologies (such as web beacons) to operate the Service, remember your preferences, and analyze usage. You can set your browser to refuse Cookies; if you do so, some parts of the Service may not function properly.

  • Necessary Cookies (session): required for authentication and security.
  • Preference/Functionality Cookies (persistent): remember settings like language or login state.
  • Analytics Cookies (persistent): help us understand how the Service is used.

For more details, see the "Use of Your Personal Data" and "Your Rights" sections. If we use non-essential Cookies, we will seek consent where required.

Use of Your Personal Data

We use Personal Data for the following purposes:

  • To provide and maintain the Service, including account creation, authentication, hosting listings and open houses, attendee sign-in, training content, and to monitor usage and security.

  • To manage your Account and provide customer support.

  • To perform a contract, including providing the features you or your organization have requested and handling billing/administration.

  • To communicate with you about updates, security notices, and service announcements.

  • To send marketing communications (only with your consent, where required) and allow you to opt out at any time.

  • To analyze and improve the Service, including troubleshooting, data analysis, testing, and product development.

  • To protect the Service, prevent fraud and misuse, and enforce our Terms.

  • For business transfers in the context of corporate transactions, as permitted by law.

Lawful Bases for Processing (GDPR/UK GDPR)

Our lawful bases include:

  • Performance of a contract (Article 6(1)(b)) – to provide the Service to you or your organization.
  • Legitimate interests (Article 6(1)(f)) – to secure and improve the Service, prevent abuse, and understand usage (balanced against your rights).
  • Consent (Article 6(1)(a)) – for optional marketing emails or non-essential Cookies (you may withdraw consent at any time).
  • Legal obligation (Article 6(1)(c)) – where we must retain or disclose data to comply with applicable laws.

Processors and Disclosures

We share Personal Data with trusted processors to help us operate the Service. These processors may change over time, but typically include:

  • Mux – video processing, streaming, and storage for training and media.
  • UploadThing – managed file uploads for user content.
  • Cloud infrastructure and hosting providers – to host our applications and databases.
  • Analytics and logging providers – to understand performance and usage.
  • Customer support tools – to handle inquiries.
  • Payment/collections providers – if and when we enable online payments.

We also disclose Personal Data where required by law, in connection with business transfers, or with your consent.

International Data Transfers

We operate globally and use processors and infrastructure located outside the UK/EU (including in the United States, e.g., US-west regions for media storage). Where Personal Data is transferred internationally, we implement appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, and employ technical and organizational measures to protect your data.

Retention of Your Personal Data

We retain Personal Data only as long as necessary for the purposes set out in this Policy:

  • Account and profile data: retained for the life of the account and deleted or anonymized within a reasonable period after closure.
  • Content (e.g., videos, documents, listings): retained until you or your organization delete it, or per your organization's retention settings.
  • Open house attendees and lead data: retained while your organization maintains the record for business purposes, or until deletion is requested and permitted.
  • Usage logs: typically retained for up to 12 months for security and diagnostics, unless legal obligations require longer retention.

Your Rights

Subject to applicable law (including GDPR/UK GDPR), you have the right to:

  • Access your Personal Data.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten").
  • Restrict processing in certain circumstances.
  • Object to processing based on legitimate interests or to direct marketing.
  • Data portability – receive your data in a usable format and transfer it to another controller.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with a supervisory authority (e.g., the UK ICO).

You can exercise these rights by contacting us at [email protected]. We may need to verify your identity and, where applicable, may refer you to your organization administrator if they control the data.

Delete Your Personal Data

You may delete certain information via your Account settings. You can also request deletion by contacting us. We may retain data where we have a legal obligation or compelling legitimate interest (e.g., security, dispute resolution).

Security of Your Personal Data

We use appropriate technical and organizational measures to protect Personal Data. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

Business Transfers and Legal Disclosures

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We may also disclose Personal Data to comply with legal obligations, protect our rights, investigate potential violations, and ensure the safety of users and the public.

Children's Privacy

Our Service is not directed to children under 13, and we do not knowingly collect Personal Data from them. If you believe a child has provided Personal Data, please contact us so we can delete it.

Links to Other Websites

Our Service may contain links to third-party websites. We are not responsible for their content or privacy practices. We encourage you to review the privacy policy of every site you visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Where required, we will provide additional notice (e.g., email or in-app notice).

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

  • By email: [email protected]
  • By post: Atlantic Sites LTD, Springbank House, Whitewell Road, Cow Ark, Clitheroe, England, BB7 3DG