Privacy Policy

Data Controller: Listing Desk, United Kingdom.

Contact: info@listingdesk.co.uk

ICO Registration Number: [ICO Registration Number — to be added]

This Privacy Policy explains how Listing Desk collects, uses, stores, and shares personal data when you use our platform. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect and process the following categories of personal data:

• Photographer profiles: Full name, business name, email address, phone number, postal address, website URL, and bank details (account holder name, bank name, sort code, account number, payment reference) — used for account management and invoice generation.
• Client details: Client name, company name, email address, and phone number entered by photographers to manage their own clients within the platform.
• Order data: Property addresses, job notes, product types, appointment dates, and uploaded photographs and floorplans.
• Invite requests: Full name, email address, phone number, and a short message submitted by prospective users requesting access to the platform.
• Technical data: IP address, browser type, device information, and usage logs collected automatically when you access the platform.

We use your personal data to:

• Create and manage your Listing Desk account
• Process job orders, facilitate editing workflows, and deliver edited files
• Generate client galleries and invoices on your behalf
• Respond to support requests and complaints
• Review and process invite requests for new users
• Comply with our legal obligations
• Improve and maintain the security and performance of the platform

We rely on the following lawful bases under the UK GDPR:

• Contract performance: Processing necessary to provide the services you have signed up for (e.g. managing orders, delivering edited files).
• Legitimate interests: Improving platform security, communicating service updates, and reviewing invite requests.
• Legal obligation: Retaining records where required by applicable law.
• Consent: Where we have obtained your explicit consent for a specific purpose (e.g. optional communications). You may withdraw consent at any time.

Your data is stored securely using Supabase, a cloud database and storage provider. Supabase stores data within the European Economic Area (EEA) and employs industry-standard security measures.

File retention: 30 days. Raw uploaded photographs, edited deliverables, and client gallery assets may be automatically deleted 30 days after upload or delivery. You are responsible for downloading and retaining your own copies before this period expires.

Account profile data and order records are retained for as long as your account remains active and for a reasonable period thereafter to comply with legal obligations.

We do not sell your personal data. We share data only as follows:

• Editors: Editors assigned to your jobs can access the raw files and job details necessary to complete editing. They do not have access to your account, billing, or client data beyond what is required for editing.
• Supabase: Our database and file storage provider. Supabase processes data on our behalf under a data processing agreement.
• Vercel: Our hosting and deployment provider. Vercel processes request data on our behalf under a data processing agreement.
• Legal requirements: We may disclose data if required to do so by law, court order, or regulatory authority.

We do not share your personal data with advertisers, data brokers, or any third parties for marketing purposes.

Listing Desk uses essential cookies only. These are strictly necessary for the platform to function, including maintaining your authenticated session. We do not use tracking, advertising, or analytics cookies.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the platform.

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no legitimate reason for us to continue processing it.
• Right to restrict processing: Ask us to pause processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at info@listingdesk.co.uk. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted storage, access controls, and row-level security policies on our database.

However, no system is completely secure. If you believe your account has been compromised, please contact us immediately at info@listingdesk.co.uk.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via the platform. Continued use of Listing Desk after changes take effect constitutes your acceptance of the updated policy.

If you have a concern about how we handle your personal data, please contact us first at info@listingdesk.co.uk and we will do our best to resolve it.

You also have the right to lodge a complaint with the UK data protection supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF