Legal

Privacy Policy

Last updated: 31 October 2026 · Version: 2026-10

1. Who we are

Listing Desk is run by Jamie Harold, a sole trader trading as Listing Desk. We are not a limited company.

  • Address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA
  • Email: info@listingdesk.co.uk
  • ICO registration number: ZC283454

In this policy, "we", "us" and "our" mean Jamie Harold trading as Listing Desk. "You" means anyone whose information we handle: photographers who use Listing Desk, people who ask to join, editors, and the estate agents, clients and homeowners connected to a job.

We are not required to appoint a Data Protection Officer. Jamie handles all data protection and privacy enquiries directly.

2. The short version

  • We use your information to run your account, process your orders, deliver your photos and send your statements.
  • We use a few trusted suppliers to do this. They are all listed in section 7, including where they are based.
  • Our photo editor is based in Pakistan. We are putting a written data transfer agreement (the UK International Data Transfer Agreement) in place with our editor.
  • RAW files and floorplan sketches are permanently deleted 60 days after an order is completed. Edited photos, floorplans, gallery downloads and the small previews of your RAW files are removed 12 months after completion.
  • We don't sell your information, and we don't use it for advertising.
  • We don't send marketing emails. If that changes, we'll update this policy first and you'll always be able to opt out.

3. Our two roles

When we decide how information is used (we are the "controller"). This covers your account, your profile and bank details, our statements and payments, invite requests, messages you send us, booking texts you send us, and how people use our website.

When we handle information for you (we are your "processor"). When you give us details about your own clients and jobs, such as an estate agent's name and email address, a property address, appointment notes and the photos themselves, we handle them on your instructions so we can do the work you ask for. You are responsible for that information, and the terms in Schedule 1 of our Terms & Conditions apply.

Our own billing record. Separately, we keep limited details of each order (property address, products, dates and prices) as controller, for our own accounting and tax obligations. This is the record behind the statements we send you.

4. What we collect and why

This table covers information we are responsible for as controller.

WhatExamplesWhy we use itLawful basis
Account and profileName, business name, email, phone, address, website, logo, brand coloursTo set up and run your account and your branded galleriesContract
Bank and invoicing detailsAccount holder, bank name, sort code, account number, VAT and company number (for your own invoices)To show your payment details on invoices you send your clientsContract
Order billing recordProperty address, products, dates and prices for each orderTo work out what we charge you and keep our accountsContract, and legal obligation (tax records)
Booking textsYour phone number and the text of messages you send to our booking numberTo create orders from your textsContract
Statements and paymentsWhat we charged you, what you paid and whenTo bill you and keep our accountsContract, and legal obligation (tax records)
EditorsName, email, rate card, assigned jobs, payment recordsTo assign work to editors and pay themContract, and legal obligation for payment records
Invite requestsName, email, phone, messageTo decide whether to invite youLegitimate interests (deciding who joins)
Messages and supportOrder messages, bug reports, emails to info@To help you and fix problemsContract and legitimate interests
Activity recordsWhat happened to an order and when, for example "gallery viewed" or "files replaced"To support you, resolve disputes and keep the service secureLegitimate interests
Browser location for address searchYour device's location, only if you allow it when your browser asks. Used only to suggest nearby addresses while you type. We don't store it, but it is sent to Google with your search (see section 7)To make address search fasterConsent (you can say no, or turn it off in your browser at any time)

You don't have to give us any of this. Without the account and billing information, though, we can't provide the service.

Job content we handle for photographers. Your clients' details (agent or client name, company, email, phone, your rates for them), and the content of each job (photos, floorplan sketches, videos, appointment details and notes), are processed on the photographer's instructions, as explained in section 3. The photographer decides the lawful basis for this. Where a photographer trades through a company, our contract is with that company, and that company is the controller.

5. Booking by text, and AI

If you text or WhatsApp our booking number, an AI service (Anthropic's Claude) reads the message and pulls out the address, products, date and client so we can create the order. Under its commercial terms, Anthropic does not use our data to train its models. Anthropic's published policy is to delete messages within 30 days, unless it needs to keep them longer to enforce its usage policy or to comply with the law. Please check any order created from a text before the shoot.

Some edits, such as removing an object from a photo, may be made with AI-assisted tools. See our Terms & Conditions for what that means for your images.

We don't make any decisions about you using automated means alone.

6. Galleries and download links

Each order has its own unique, private link. Anyone with the link can view and download the photos, so please only share it with people who need it.

Gallery links stop working 12 months after the order is completed.

7. Who we share information with

We share information only with the suppliers below, only what they need, and only with suppliers who provide data processing terms, and for our editor as described in section 8. We never sell information or share it for marketing.

SupplierWhat they do for usWhat informationWhere
SupabaseDatabase, login and file storageEverything in your account, orders and filesIreland (EU)
VercelRuns our website and appAll information passing through the siteWebsite functions run in Ireland. Some routing happens at the nearest data centre worldwide. Vercel is a US company
RenderRuns background jobs: preparing downloads, archiving, sending emails and textsOrder details and photos while a job runsWestern Europe (EU). Render is a US company
Cloudflare R2Archive storage for RAW files until they are deletedRAW photos and floorplan sketchesStored in Western Europe. Cloudflare is a US company
ResendSends our emailsNames, email addresses, property addresses, gallery linksUSA
TwilioSends and receives texts and WhatsApp messagesPhone numbers and message textUSA
AnthropicReads booking texts to create orders (see section 5)Message textUSA
Google (Places)Suggests addresses as you typeWhat you type in the address box, and approximate location if you allow itUSA and worldwide
Google WorkspaceOur email inbox (info@)Anything you email usUSA and worldwide
Our photo editorEdits photos and draws floorplansPhotos, floorplan sketches, job notes and the order number. They do not see property addresses or client details.Pakistan

We may also share information if the law requires it, for example with HMRC or the police, or with professional advisers such as an accountant or solicitor.

8. Sending information outside the UK

Some of our suppliers are based outside the UK, mainly in the USA, and our editor is in Pakistan. When information leaves the UK, we protect it in one of these ways:

  • the country has been approved by the UK government (for example, Ireland and the rest of the EU, or US companies certified under the UK-US "data bridge"); or
  • we use the UK's approved contract clauses (the ICO's International Data Transfer Agreement or the UK Addendum). We are putting a written data transfer agreement (the UK International Data Transfer Agreement) in place with our editor.

You can ask us for a copy of the relevant safeguards by emailing info@listingdesk.co.uk.

9. Cookies and analytics

We only use cookies that are needed to keep you signed in. They are essential, so we don't ask for permission.

We don't currently use website analytics.

Our site also remembers a few settings in your browser, such as your last view, to make things quicker. Clearing your browser data removes them.

10. How long we keep information

InformationHow long
RAW photos and floorplan sketchesPermanently deleted 60 days after the order is completed, or 60 days after we last restored them, if later
Low-resolution previews and thumbnails of RAW filesKept after the RAW files are deleted, so you can still see what was shot. Deleted with the rest of the order's files 12 months after the order is completed
Edited photos, finished floorplans, videos and gallery downloadsRemoved 12 months after the order is completed. The gallery link stops working at the same time
Replaced files (older versions)Deleted 30 days after being replaced
Orders that are cancelled or never completedIf nothing was charged: deleted, along with their files, normally within 30 days. If any work was charged: the billing record is kept for the HMRC period, like any other charged order (see "Order details" below)
Order details (property address, products, dates, prices)Kept with our billing records for as long as we must keep financial records for HMRC: at least 5 years after the 31 January tax return deadline for the tax year the order falls in (about 6 to 7 years). Then deleted
Statements, payments and editor paymentsThe same period as order details, because tax law requires it
Booking textsDeleted after 12 months
Invite requestsDeleted after 12 months, or sooner if you ask
Activity records, bug reports and system logsDeleted after 12 months. Our hosting suppliers keep short-term technical logs on their own schedules
Your accountUntil you ask us to close it (see section 11)
Editor accountsUntil the editor relationship ends. Editor payment records are kept for the HMRC period above

Deletion is permanent. Once files are deleted, we can't get them back, so please download anything you want to keep.

11. Closing your account

Email info@listingdesk.co.uk to close your account. Within 30 days we will delete your account, profile, bank details, client list, files and messages. This is subject to finishing any order still in progress, and to keeping the records the law requires us to keep (below).

We keep only what the law requires: the statements we issued to you, your payments, and the order details those statements relate to (including property addresses), for the HMRC period in section 10. We also keep a short note that we deleted your account, so we can show we did it.

12. Your rights

You can ask us to:

  • give you a copy of your information
  • correct anything that is wrong
  • delete your information
  • restrict how we use it
  • give you your information in a format you can take elsewhere
  • stop using it where we rely on legitimate interests
  • withdraw your consent at any time, where we rely on it (for example, location for address search)

Email info@listingdesk.co.uk. We'll reply within one month. If a request is complex, we may need up to two more months, and we'll tell you if so. We may need to check who you are first.

13. If you are an estate agent, client or homeowner

If your details or your home appear in a job, the photographer who booked the job decides how that information is used. We work on their behalf.

  • Your first contact should be the photographer. They can access, correct or delete the order.
  • You can also contact us at info@listingdesk.co.uk. We'll pass your request to the photographer within 5 working days and help them deal with it. If it concerns something we decide ourselves, such as our emails to you, we'll handle it directly.
  • Gallery links. If you were sent a gallery and want it taken down, ask the photographer or email us.
  • Our billing record. If a request to delete a job is agreed, the photos and job details can be removed. We may still keep the limited billing record for that order (property address, products, dates and prices) as controller, for the HMRC period in section 10, because tax law requires it.

14. Keeping information safe

We use sign-in controls, database rules that limit each person to their own information, encrypted connections, and suppliers with recognised security standards. Editors can see only the jobs assigned to them.

If something goes wrong that puts your information at risk, we will tell you and, where required, the ICO.

15. Complaints

If you are unhappy with how we have handled your information, please email info@listingdesk.co.uk. It helps if you put "Privacy complaint" in the subject. We'll acknowledge your complaint within 30 days, keep you updated while we look into it, and tell you the outcome.

You also have the right to complain to the UK data protection regulator, the Information Commission (known as the ICO):

Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commission's Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL

16. Changes to this policy

If we make an important change, we'll email you about it and ask you to read it. You'll be asked to acknowledge this policy, not to accept it: it explains how we use information rather than being a contract.