Legal
Privacy Policy
Last updated: 31 October 2026 · Version: 2026-10
1. Who we are
Listing Desk is run by Jamie Harold, a sole trader trading as Listing Desk. We are not a limited company.
- Address: Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA
- Email: info@listingdesk.co.uk
- ICO registration number: ZC283454
In this policy, "we", "us" and "our" mean Jamie Harold trading as Listing Desk. "You" means anyone whose information we handle: photographers who use Listing Desk, people who ask to join, editors, and the estate agents, clients and homeowners connected to a job.
We are not required to appoint a Data Protection Officer. Jamie handles all data protection and privacy enquiries directly.
2. The short version
- We use your information to run your account, process your orders, deliver your photos and send your statements.
- We use a few trusted suppliers to do this. They are all listed in section 7, including where they are based.
- Our photo editor is based in Pakistan. We are putting a written data transfer agreement (the UK International Data Transfer Agreement) in place with our editor.
- RAW files and floorplan sketches are permanently deleted 60 days after an order is completed. Edited photos, floorplans, gallery downloads and the small previews of your RAW files are removed 12 months after completion.
- We don't sell your information, and we don't use it for advertising.
- We don't send marketing emails. If that changes, we'll update this policy first and you'll always be able to opt out.
3. Our two roles
When we decide how information is used (we are the "controller"). This covers your account, your profile and bank details, our statements and payments, invite requests, messages you send us, booking texts you send us, and how people use our website.
When we handle information for you (we are your "processor"). When you give us details about your own clients and jobs, such as an estate agent's name and email address, a property address, appointment notes and the photos themselves, we handle them on your instructions so we can do the work you ask for. You are responsible for that information, and the terms in Schedule 1 of our Terms & Conditions apply.
Our own billing record. Separately, we keep limited details of each order (property address, products, dates and prices) as controller, for our own accounting and tax obligations. This is the record behind the statements we send you.
4. What we collect and why
This table covers information we are responsible for as controller.
| What | Examples | Why we use it | Lawful basis |
|---|---|---|---|
| Account and profile | Name, business name, email, phone, address, website, logo, brand colours | To set up and run your account and your branded galleries | Contract |
| Bank and invoicing details | Account holder, bank name, sort code, account number, VAT and company number (for your own invoices) | To show your payment details on invoices you send your clients | Contract |
| Order billing record | Property address, products, dates and prices for each order | To work out what we charge you and keep our accounts | Contract, and legal obligation (tax records) |
| Booking texts | Your phone number and the text of messages you send to our booking number | To create orders from your texts | Contract |
| Statements and payments | What we charged you, what you paid and when | To bill you and keep our accounts | Contract, and legal obligation (tax records) |
| Editors | Name, email, rate card, assigned jobs, payment records | To assign work to editors and pay them | Contract, and legal obligation for payment records |
| Invite requests | Name, email, phone, message | To decide whether to invite you | Legitimate interests (deciding who joins) |
| Messages and support | Order messages, bug reports, emails to info@ | To help you and fix problems | Contract and legitimate interests |
| Activity records | What happened to an order and when, for example "gallery viewed" or "files replaced" | To support you, resolve disputes and keep the service secure | Legitimate interests |
| Browser location for address search | Your device's location, only if you allow it when your browser asks. Used only to suggest nearby addresses while you type. We don't store it, but it is sent to Google with your search (see section 7) | To make address search faster | Consent (you can say no, or turn it off in your browser at any time) |
You don't have to give us any of this. Without the account and billing information, though, we can't provide the service.
Job content we handle for photographers. Your clients' details (agent or client name, company, email, phone, your rates for them), and the content of each job (photos, floorplan sketches, videos, appointment details and notes), are processed on the photographer's instructions, as explained in section 3. The photographer decides the lawful basis for this. Where a photographer trades through a company, our contract is with that company, and that company is the controller.
5. Booking by text, and AI
If you text or WhatsApp our booking number, an AI service (Anthropic's Claude) reads the message and pulls out the address, products, date and client so we can create the order. Under its commercial terms, Anthropic does not use our data to train its models. Anthropic's published policy is to delete messages within 30 days, unless it needs to keep them longer to enforce its usage policy or to comply with the law. Please check any order created from a text before the shoot.
Some edits, such as removing an object from a photo, may be made with AI-assisted tools. See our Terms & Conditions for what that means for your images.
We don't make any decisions about you using automated means alone.
6. Galleries and download links
Each order has its own unique, private link. Anyone with the link can view and download the photos, so please only share it with people who need it.
Gallery links stop working 12 months after the order is completed.
7. Who we share information with
We share information only with the suppliers below, only what they need, and only with suppliers who provide data processing terms, and for our editor as described in section 8. We never sell information or share it for marketing.
| Supplier | What they do for us | What information | Where |
|---|---|---|---|
| Supabase | Database, login and file storage | Everything in your account, orders and files | Ireland (EU) |
| Vercel | Runs our website and app | All information passing through the site | Website functions run in Ireland. Some routing happens at the nearest data centre worldwide. Vercel is a US company |
| Render | Runs background jobs: preparing downloads, archiving, sending emails and texts | Order details and photos while a job runs | Western Europe (EU). Render is a US company |
| Cloudflare R2 | Archive storage for RAW files until they are deleted | RAW photos and floorplan sketches | Stored in Western Europe. Cloudflare is a US company |
| Resend | Sends our emails | Names, email addresses, property addresses, gallery links | USA |
| Twilio | Sends and receives texts and WhatsApp messages | Phone numbers and message text | USA |
| Anthropic | Reads booking texts to create orders (see section 5) | Message text | USA |
| Google (Places) | Suggests addresses as you type | What you type in the address box, and approximate location if you allow it | USA and worldwide |
| Google Workspace | Our email inbox (info@) | Anything you email us | USA and worldwide |
| Our photo editor | Edits photos and draws floorplans | Photos, floorplan sketches, job notes and the order number. They do not see property addresses or client details. | Pakistan |
We may also share information if the law requires it, for example with HMRC or the police, or with professional advisers such as an accountant or solicitor.
8. Sending information outside the UK
Some of our suppliers are based outside the UK, mainly in the USA, and our editor is in Pakistan. When information leaves the UK, we protect it in one of these ways:
- the country has been approved by the UK government (for example, Ireland and the rest of the EU, or US companies certified under the UK-US "data bridge"); or
- we use the UK's approved contract clauses (the ICO's International Data Transfer Agreement or the UK Addendum). We are putting a written data transfer agreement (the UK International Data Transfer Agreement) in place with our editor.
You can ask us for a copy of the relevant safeguards by emailing info@listingdesk.co.uk.
9. Cookies and analytics
We only use cookies that are needed to keep you signed in. They are essential, so we don't ask for permission.
We don't currently use website analytics.
Our site also remembers a few settings in your browser, such as your last view, to make things quicker. Clearing your browser data removes them.
10. How long we keep information
| Information | How long |
|---|---|
| RAW photos and floorplan sketches | Permanently deleted 60 days after the order is completed, or 60 days after we last restored them, if later |
| Low-resolution previews and thumbnails of RAW files | Kept after the RAW files are deleted, so you can still see what was shot. Deleted with the rest of the order's files 12 months after the order is completed |
| Edited photos, finished floorplans, videos and gallery downloads | Removed 12 months after the order is completed. The gallery link stops working at the same time |
| Replaced files (older versions) | Deleted 30 days after being replaced |
| Orders that are cancelled or never completed | If nothing was charged: deleted, along with their files, normally within 30 days. If any work was charged: the billing record is kept for the HMRC period, like any other charged order (see "Order details" below) |
| Order details (property address, products, dates, prices) | Kept with our billing records for as long as we must keep financial records for HMRC: at least 5 years after the 31 January tax return deadline for the tax year the order falls in (about 6 to 7 years). Then deleted |
| Statements, payments and editor payments | The same period as order details, because tax law requires it |
| Booking texts | Deleted after 12 months |
| Invite requests | Deleted after 12 months, or sooner if you ask |
| Activity records, bug reports and system logs | Deleted after 12 months. Our hosting suppliers keep short-term technical logs on their own schedules |
| Your account | Until you ask us to close it (see section 11) |
| Editor accounts | Until the editor relationship ends. Editor payment records are kept for the HMRC period above |
Deletion is permanent. Once files are deleted, we can't get them back, so please download anything you want to keep.
11. Closing your account
Email info@listingdesk.co.uk to close your account. Within 30 days we will delete your account, profile, bank details, client list, files and messages. This is subject to finishing any order still in progress, and to keeping the records the law requires us to keep (below).
We keep only what the law requires: the statements we issued to you, your payments, and the order details those statements relate to (including property addresses), for the HMRC period in section 10. We also keep a short note that we deleted your account, so we can show we did it.
12. Your rights
You can ask us to:
- give you a copy of your information
- correct anything that is wrong
- delete your information
- restrict how we use it
- give you your information in a format you can take elsewhere
- stop using it where we rely on legitimate interests
- withdraw your consent at any time, where we rely on it (for example, location for address search)
Email info@listingdesk.co.uk. We'll reply within one month. If a request is complex, we may need up to two more months, and we'll tell you if so. We may need to check who you are first.
13. If you are an estate agent, client or homeowner
If your details or your home appear in a job, the photographer who booked the job decides how that information is used. We work on their behalf.
- Your first contact should be the photographer. They can access, correct or delete the order.
- You can also contact us at info@listingdesk.co.uk. We'll pass your request to the photographer within 5 working days and help them deal with it. If it concerns something we decide ourselves, such as our emails to you, we'll handle it directly.
- Gallery links. If you were sent a gallery and want it taken down, ask the photographer or email us.
- Our billing record. If a request to delete a job is agreed, the photos and job details can be removed. We may still keep the limited billing record for that order (property address, products, dates and prices) as controller, for the HMRC period in section 10, because tax law requires it.
14. Keeping information safe
We use sign-in controls, database rules that limit each person to their own information, encrypted connections, and suppliers with recognised security standards. Editors can see only the jobs assigned to them.
If something goes wrong that puts your information at risk, we will tell you and, where required, the ICO.
15. Complaints
If you are unhappy with how we have handled your information, please email info@listingdesk.co.uk. It helps if you put "Privacy complaint" in the subject. We'll acknowledge your complaint within 30 days, keep you updated while we look into it, and tell you the outcome.
You also have the right to complain to the UK data protection regulator, the Information Commission (known as the ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Information Commission's Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL
16. Changes to this policy
If we make an important change, we'll email you about it and ask you to read it. You'll be asked to acknowledge this policy, not to accept it: it explains how we use information rather than being a contract.