Privacy Notice
Last updated: 19 August 2026
This notice explains how FindTheSurveyor collects, uses and protects personal data. FindTheSurveyor is operated by FIND THE SURVEYOR LIMITED (company number 17398697, registered in England and Wales) — “we”, “us”. We are the data controller for the personal data described here.
What we collect from customers
When you post a surveying job, we collect:
- your name, email address and phone number;
- the full property address and postcode;
- the service requested, property information, timing, concerns and notes;
- the Privacy Notice and marketplace-terms versions you accepted and the acceptance timestamp; and
- your email-verification, job, quote, message, selection and introduction records.
When you compare quotes, we store the quotes you receive, your private messages with each surveyor, your decision to select or reject quotes, and any concern you report.
What we collect from surveyors
For surveyor applications, review, onboarding and quoting, we collect:
- identity, contact and contracting-firm details;
- qualifications and professional memberships, issuing bodies and evidence;
- declared services and relevant experience;
- professional indemnity insurance information;
- coverage and availability;
- private profile information shown only with that surveyor’s quote;
- billing legal name, billing address and VAT number where applicable;
- privacy-notice and marketplace-terms versions accepted and acceptance timestamps;
- application status, change-request or rejection reasons, private administrator review notes, availability and permitted-reapplication status; and
- invitation, quote, message, selection and introduction records.
FindTheSurveyor charges no customer or surveyor fee and does not take payment from either party, so no payment method, card detail or payment-processor record is created.
Technical, security and analytics information
We store security information needed for passwordless access, including one-time-token hashes, bounded and rotated surveyor-access token hashes, sessions, idempotency identifiers, timestamps, audit records and delivery attempts.
Cloudflare Turnstile is used to detect automated abuse and may process browser, device and network signals. Rate limiting uses a keyed, pseudonymised value derived from the connection address; the raw connection address is not stored in enquiry or funnel-analytics records.
We use cookie-free page and performance measurement. Our own form measurement uses a separate random flow identifier with the form step, service type, outward postcode and allowlisted traffic-source information. It does not contain a name, email address, phone number, full postcode, address, property details or notes, and it is not linked to a submitted job.
Why we use personal data
We use personal data:
- to create and verify a customer job, review it, invite suitable surveyors, provide private quote comparison and messaging, process selection and make the paid introduction requested by the customer;
- to onboard surveyors, check documentary evidence, and administer private profiles, invitations and quotes;
- to receive and review public surveyor applications, request changes, communicate approval or rejection, approve services and coverage, and suspend or restore eligibility;
- to prevent spam, fraud, misuse and attempts to bypass the protected introduction process;
- to keep audit records, deliver transactional messages, investigate concerns and administer the service;
- to understand demand, form drop-off and service performance using minimised or aggregated information; and
- to comply with legal, tax and accounting requirements and establish, exercise or defend legal claims.
Depending on the activity, our legal basis is taking steps at a person’s request before a contract, performing our platform contract, complying with a legal obligation, or our legitimate interests in operating a secure and trustworthy marketplace.
We do not sell personal data or use it for third-party advertising.
Who can see a customer enquiry
The FindTheSurveyor administrator is the only person with platform access to the complete enquiry before selection.
The administrator also receives one full-enquiry notification at alinari.ross@gmail.com. It includes the customer’s name, email address, phone number, complete property address and job details so the administrator can review spam and suitability. It has no CC or BCC recipient. That mailbox copy is retained for no longer than 12 months and is then deleted in line with the enquiry record.
An invited surveyor receives only a restricted, non-identifying brief before selection: the outward postcode, requested service, relevant property facts, timing and notes after names and contact details have been removed. They do not receive the customer’s name, email address, phone number, full postcode or full property address. Each surveyor sees only its own quote and conversation.
Only when the administrator makes an introduction does that surveyor receive the customer’s full name, email address, phone number, full postcode and full property address. The customer then receives that surveyor’s business contact details. Surveyors who are not introduced never receive the customer’s private details.
Customer quote notifications and surveyor invitation or selection notifications use secure links rather than placing protected job, quote or contact details in the email itself.
Service providers and other recipients
- Cloudflare provides the website, Worker, EU-jurisdiction databases, private EU evidence storage, Turnstile protection and transactional and administrative email through Cloudflare Email Service.
- Google provides the designated administrator mailbox used for full-enquiry notifications.
- Cloudflare Access provides the private-dashboard sign-in and access controls through a one-time passcode restricted to the approved administrator email. Google hosts the designated mailbox that receives that passcode; Google is not the configured identity provider.
- Professional advisers and public authorities may receive information where reasonably necessary for legal advice, a legal claim, fraud prevention or compliance with law.
These providers process information under their applicable contracts and data-protection terms.
International transfers
The marketplace and directory databases and private evidence bucket use Cloudflare’s EU jurisdiction controls. Email and anti-abuse providers may process data outside the UK. Where required, we rely on the provider’s applicable contractual safeguards and lawful transfer mechanisms.
How long we keep information
- Customer jobs, quotes, messages, selections, introductions, concerns and related administrative email, notification and audit records are deleted or irreversibly anonymised 12 months after the job closes.
- Anonymous incomplete-form events are deleted after 30 days and remain structurally separate from submitted jobs.
- Passwordless links, private sessions and rate-limit buckets expire sooner according to their security purpose.
- An unused onboarding invitation with no submission is deleted 30 days after it expires or is revoked.
- Surveyor applications, documentary and verification records are retained while the surveyor is active and for six years after closure. Rejected or withdrawn application records are retained only for the documented operational, fraud-prevention, legal-claim and audit purposes, then deleted or irreversibly anonymised under the same controlled retention process.
- No payment, refund, dispute, receipt, invoice or credit-note records are created, because FindTheSurveyor takes no payment from either party.
We may keep a specific record longer where required by law or for an active legal claim. At the end of the applicable period, information is deleted or irreversibly anonymised through the relevant process.
Your rights
You may ask us for a copy of your personal data, to correct or delete it, to restrict its use, or to provide it in a portable form where applicable. You may also object to processing based on legitimate interests. Email enquiries@findthesurveyor.co.uk. We normally respond within one month and may need to confirm your identity first.
If you are unhappy with how we handle personal data, you may complain to the Information Commissioner’s Office at ico.org.uk. Please contact us first if you would like us to try to resolve the issue.
Contact
FIND THE SURVEYOR LIMITED
Unit 3, Palace Court, 250 Finchley Road, London NW3 6DN