Last updated: 22 March 2026
Domovita LTD ("Domovita", "we", "us", "our") operates the website domovita.co.uk (the "Site"). This privacy policy explains how we collect, use, store, and protect your personal data when you use our property listing platform.
Domovita LTD is registered at Companies House in England and Wales (company number 17033259). We are registered with the Information Commissioner's Office (ICO) as a data controller (registration reference: ZC095542).
1. Who We Are
Domovita is a UK property listing portal that allows estate agents and private sellers to advertise residential properties for sale and to rent. We also provide tools such as stamp duty calculators, sold house price data, and property search alerts.
Data Controller: Domovita LTD
Registered Office: Suite A, 82 James Carter Road, Mildenhall, IP28 7DE
Company Number: 17033259
ICO Registration: ZC095542
Contact Email:
Website: https://domovita.co.uk
2. What Personal Data We Collect
We collect different types of personal data depending on how you interact with our Site:
2.1 Account Registration
When you create an account, we collect your name, email address, and password (stored in hashed form). If you register as an estate agent, we additionally collect your company name, Companies House registration number, company website, business email address, business phone number, branch address, and professional redress scheme membership details.
2.2 Property Listings
When you submit a property listing, we collect the property address, description, price, property features, and photographs you upload. For private sellers, your direct contact details are not displayed publicly — enquiries are handled through our on-site messaging system.
2.3 On-Site Messaging
If you send or receive messages through our enquiry system, we store the message content, timestamps, and the identities of the sender and recipient. Messages are retained to provide a record of communications and to help resolve any disputes.
2.3a Rental Enquiries and Tenant Data
When a prospective tenant submits an enquiry about a rental property through our on-site messaging system, we collect the message content, the sender's identity (name and account details), and the timestamp. This data is used to deliver the enquiry to the landlord or letting agent who listed the property.
For private seller/landlord listings, the enquirer's personal contact details (email address and phone number) are not disclosed to the landlord. The landlord receives the message through our internal messaging system and must respond through the same channel. The legal basis for processing this data is legitimate interests (facilitating a genuine property enquiry) and, where provided, the enquirer's consent (by submitting the enquiry form with the consent checkbox ticked).
For estate agent and letting agent listings, enquiries sent via the "Request Information" or "Arrange Viewing" email links will be handled directly between you and the agent using your email client. Domovita does not process or store these direct email communications.
Enquiry message data is retained for as long as both the sender and the property owner have an active account on the Site, or until either party deletes the conversation. When an account is deleted, messages sent by that user are removed in accordance with our data retention policy.
2.4 Saved Properties & Search Alerts
If you save properties to your favourites or set up search alerts, we store your preferences to provide these features. Search alerts include your chosen search criteria and email notification frequency.
2.5 Featured Listings & Payments
If you purchase a featured listing upgrade, payment is processed securely by Stripe. We do not store your full credit or debit card details on our servers. We retain a record of the transaction including the Stripe customer ID, payment amount, subscription status, and billing dates. Please refer to Stripe's Privacy Policy for details on how they handle your payment information.
2.6 Analytics Data
We use Google Analytics 4 (GA4) to understand how visitors use our Site. GA4 collects data such as pages visited, time spent on pages, referral sources, approximate geographic location (city level), device type, browser type, and screen resolution. Google Analytics uses cookies to distinguish unique users and sessions. Data is processed by Google and may be transferred outside the UK. For more information, see Google's Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
2.7 Technical & Log Data
When you visit the Site, our servers automatically record your IP address, browser type, operating system, referring URL, pages visited, and timestamps. This data is used for security monitoring, abuse prevention, and rate limiting.
2.8 Enquiry & Contact Forms
If you contact us directly via email, through the contact form on our Site, or via the embedded support widget, we collect the information you provide including your name, email address, enquiry category, and the content of your message. Enquiries submitted through the contact form or the embedded support widget are processed through Zoho Desk, our helpdesk platform, which creates a support ticket to manage your enquiry. Please refer to Zoho's Privacy Policy for details on how they handle data.
3. How We Use Your Data
We use your personal data for the following purposes:
To provide our services: displaying property listings, enabling on-site messaging between buyers and sellers, processing featured listing payments, delivering search alerts and favourite property notifications, and verifying estate agent registrations via the Companies House API.
To communicate with you: sending email notifications about your listings (such as approval confirmations), property enquiries, search alert matches, favourite property changes, and important service updates.
To improve our Site: analysing usage patterns through Google Analytics to understand how our Site is used and to improve user experience.
To ensure security: monitoring for fraudulent activity, enforcing rate limits, validating CSRF tokens, and protecting against spam and abuse.
To comply with legal obligations: retaining records as required by applicable UK law, responding to lawful requests from authorities, and maintaining records of consent.
4. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:
Contract: Processing necessary to provide the services you have requested, including account management, property listings, messaging, payments, and alerts.
Legitimate Interests: Processing necessary for our legitimate business interests, such as security monitoring, fraud prevention, service improvement, and analytics — where these interests do not override your fundamental rights and freedoms.
Consent: Where you have given specific consent, such as opting in to search alerts or accepting cookies. You may withdraw consent at any time.
Legal Obligation: Where processing is necessary to comply with UK law.
5. Cookies
Our Site uses cookies for the following purposes:
Essential cookies: Joomla session cookies that are necessary for the Site to function. These keep you logged in and enable security features such as CSRF protection. These cookies do not require consent as they are strictly necessary.
Analytics cookies: Google Analytics 4 sets cookies (such as _ga and _ga_*) to distinguish unique visitors and track sessions. These cookies are set only with your consent and expire after 2 years (_ga) or 24 hours (_ga_*).
Payment cookies: Stripe may set cookies during the checkout process to enable fraud detection and secure payment processing.
Support widget cookies: Our embedded support widget, powered by Zoho Desk (ASAP), may set cookies (such as session identifiers) to manage your help desk interaction, remember your identity across pages, and track the status of open conversations. These cookies are set by zoho.eu and are functional in nature — they enable the support widget to operate correctly. These cookies are set only when you interact with the support widget.
For full details of the cookies we use and how to manage them, see our Cookie Policy. You can manage your cookie preferences through our cookie consent banner. You can also control cookies through your browser settings. Disabling essential cookies may prevent parts of the Site from functioning correctly.
6. Data Sharing
We do not sell your personal data to third parties. We share data only in the following limited circumstances:
Stripe: Payment data is shared with Stripe to process featured listing payments. Stripe acts as an independent data controller for payment information.
Google: Analytics data is shared with Google through Google Analytics 4 to provide website usage statistics.
Cloudflare: Property images are stored on Cloudflare R2 cloud storage and delivered through Cloudflare's content delivery network.
Zoho Corporation: Contact form submissions and support widget interactions are processed through Zoho Desk, which acts as a data processor on our behalf. The embedded ASAP support widget may also transmit session data to Zoho to facilitate your help desk interaction. Zoho stores support ticket data on servers in the EU. See Zoho's Privacy Policy.
Companies House: When an estate agent applies for verification, we query the Companies House API with the company registration number provided. No personal data is sent — only the company number.
HM Land Registry: Our sold house prices feature queries publicly available data from HM Land Registry. No personal data is shared in these queries.
Law enforcement: We may disclose personal data if required to do so by law or in response to valid legal requests from UK authorities.
7. Data Storage & Security
Your data is stored on servers located in the United Kingdom. We implement appropriate technical and organisational security measures to protect your personal data, including encrypted connections (HTTPS/TLS), hashed passwords, prepared database statements to prevent SQL injection, CSRF token validation, rate limiting, and access control through Joomla's ACL system.
Property images stored on Cloudflare R2 may be cached and served from Cloudflare's global network of data centres, which may include locations outside the UK. Cloudflare operates under appropriate safeguards for international data transfers.
Google Analytics data is processed by Google and may be transferred to and stored on servers outside the UK. Google provides appropriate safeguards for such transfers in accordance with UK data protection law.
8. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy:
Account data: Retained for as long as your account is active. If you delete your account, your personal data is removed and your property listings enter a grace period (default 30 days) before permanent deletion.
Property listings: Retained for as long as the listing is active or until the property owner removes it. Unpublished or expired listings may be retained for a reasonable period for record-keeping purposes.
Messages: Retained for as long as at least one participant has not deleted the conversation from their inbox. Where both parties have deleted a conversation, messages are retained for a minimum of 90 days from the date they were sent to allow investigation of abuse reports and to comply with our legal obligations. After this retention period, fully deleted messages are permanently purged.
Payment records: Retained for 6 years in accordance with HMRC requirements.
Analytics data: Google Analytics data is retained according to Google's data retention settings. We have configured GA4 to retain user-level data for 14 months.
Server logs: Retained for up to 90 days for security and troubleshooting purposes.
9. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access: You can request a copy of the personal data we hold about you. You can submit a Subject Access Request through the privacy request form on our Site or by emailing us.
Right to rectification: You can ask us to correct any inaccurate or incomplete personal data. You can also update most of your information directly through your account settings.
Right to erasure: You can request that we delete your personal data ("right to be forgotten"). You can submit a deletion request through the privacy request form on our Site. Please note that we may need to retain certain data to comply with legal obligations.
Right to restrict processing: You can ask us to restrict the processing of your personal data in certain circumstances.
Right to data portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to object: You can object to processing based on legitimate interests. You can also opt out of Google Analytics tracking.
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time. This includes unsubscribing from search alerts (via the one-click unsubscribe link in alert emails) and managing your cookie preferences.
To exercise any of these rights, please email
10. Children's Privacy
Our Site is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to remove that information.
11. Email Communications
We send transactional and service emails related to your use of the platform, including property enquiry notifications, listing approval updates, search alert matches, and favourite property change alerts. All marketing-style alert emails include a one-click unsubscribe link. Transactional emails (such as payment confirmations or account notifications) cannot be unsubscribed from as they are necessary for the service.
12. Third-Party Links
Our Site may contain links to external websites, such as estate agent websites or property-related resources. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal data.
13. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last updated" date. If we make significant changes that affect how we process your personal data, we will notify you by email or through a notice on our Site.
14. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: https://ico.org.uk
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at
15. Contact Us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
Email:
Website: https://domovita.co.uk
16. Energy Performance Certificate (EPC) Data
16.1 What EPC Data We Collect and Display
We retrieve Energy Performance Certificate (EPC) data from the UK Government's public EPC register via their open API (epc.opendatacommunities.org). EPCs are public records required by law under the UK Energy Performance of Buildings Regulations to be freely accessible for transparency.
We use this data to provide energy efficiency information for properties listed on our site, helping visitors make informed decisions when buying or renting homes.
16.2 What Information EPCs Contain
EPC data includes:
- Property addresses
- Energy efficiency ratings (A-G scale)
- Estimated annual energy costs
- CO2 emissions data
- Property characteristics (size, construction type, heating system)
- Energy improvement recommendations
- Certificate dates and validity periods
EPCs do not contain personal contact information such as names, phone numbers, or email addresses of property owners or occupiers.
16.3 Our Legal Basis for Processing EPC Data
We process EPC data under Legitimate Interest (GDPR Article 6(1)(f)):
- EPCs are public records that the government must make publicly accessible
- Property portals have a legitimate interest in displaying publicly available energy efficiency data
- Homebuyers and renters need this information to make informed property decisions
- The UK Government provides the EPC API specifically to enable public access to this data
16.4 How We Store EPC Data
We cache EPC data in our database for 90 days to improve website performance and reduce unnecessary API requests to government servers. This is a reasonable retention period as EPCs are valid for 10 years and rarely change.
All EPC data is:
- Retrieved via secure HTTPS connections
- Stored on secure servers in the UK
- Automatically deleted after 90 days unless re-requested
- Never combined with personal contact information
- Never sold or shared with third parties
16.5 Your Rights Regarding EPC Data
As EPC data is publicly available information about properties (not individuals), it is exempt from certain data subject rights under GDPR. However:
- EPCs are created and managed by the UK Government's Department for Levelling Up, Housing & Communities
- To update or remove an EPC certificate, you must contact the EPC register directly at epc.opendatacommunities.org
- We do not create, modify, or delete EPC records - we only display what is already publicly available
If you have concerns about how we display EPC data on our website, please contact us at
16.6 Data Source Attribution
EPC data is provided by the Department for Levelling Up, Housing & Communities (DLUHC) and is licensed under the Open Government Licence v3.0.
Contains HM Land Registry data © Crown copyright and database right 2025.
Contains public sector information licensed under the Open Government Licence v3.0.