Skip to main content
iDrone Property Services

Privacy Policy

Last updated: January 2026

This privacy policy explains how iDrone Property Services("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website and services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

iDrone Property Servicesis the data controller responsible for your personal data. We are registered with the Information Commissioner’s Office (ICO).

2. Data We Collect

We may collect and process the following categories of personal data:

Identity and Contact Data

  • Full name
  • Email address
  • Phone number
  • Postal address (property address for service delivery)
  • Company name (if applicable)

Financial and Transaction Data

  • Payment card details (processed securely by Stripe; we do not store card numbers)
  • Booking and transaction history
  • Invoice records

Technical Data

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on pages
  • Referring website

Communications Data

  • Messages sent via our contact form
  • Email correspondence
  • Booking notes and special instructions

3. Why We Collect Your Data

We use your personal data for the following purposes:

  • To process and fulfil your service bookings
  • To communicate with you about your bookings and our services
  • To process payments and issue invoices
  • To send booking confirmations, reminders, and updates via email
  • To respond to your enquiries and provide customer support
  • To comply with legal and regulatory obligations (e.g., tax records)
  • To improve our website and services
  • To prevent fraud and maintain security

4. Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR to process your personal data:

Lawful BasisPurpose
ContractProcessing bookings, delivering services, processing payments
Legitimate InterestImproving our services, website analytics, fraud prevention, business administration
Legal ObligationTax records, responding to law enforcement
ConsentMarketing communications (where applicable), analytics cookies

5. Who We Share Your Data With

We may share your personal data with the following third parties, only to the extent necessary to deliver our services:

  • Stripe— Our payment processor. Stripe handles all payment transactions securely. Your card details are processed directly by Stripe and never stored on our servers. See Stripe’s Privacy Policy.
  • Resend— Our email delivery service. We use Resend to send transactional emails such as booking confirmations and receipts. See Resend’s Privacy Policy.
  • Government bodies — Where legally required, such as providing records to HMRC.

We do not sell your personal data to any third party. We do not share your data with third parties for their marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Data TypeRetention Period
Booking and transaction records7 years (tax and legal requirements)
Contact form enquiries12 months
Property photographs and media12 months after delivery
Account dataDuration of account plus 12 months
Website analytics data26 months

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of Access — You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification — You have the right to request that we correct any inaccurate or incomplete personal data.
  • Right to Erasure — You have the right to request that we delete your personal data, subject to legal retention requirements.
  • Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Restrict Processing — You have the right to request that we limit how we use your data in certain circumstances.
  • Right to Object — You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent — Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at hello@idroneproperty.co.uk. We will respond to your request within one month.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Subject Access Requests

You have the right to make a Subject Access Request (SAR) to obtain a copy of the personal data we hold about you. To make a SAR:

  1. Email us at hello@idroneproperty.co.uk with the subject line "Subject Access Request".
  2. Include your full name and the email address associated with your account or bookings.
  3. We may ask you to verify your identity before processing your request.
  4. We will respond within one calendar month. If the request is complex, we may extend this by up to two additional months and will inform you of any extension.

There is no fee for a SAR unless the request is manifestly unfounded or excessive.

9. Cookies

Our website uses cookies and similar technologies to provide essential functionality and improve your experience. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

  • Essential cookies— Required for the website to function (e.g., authentication, session management)
  • Analytics cookies— Help us understand how visitors use our website (only with your consent)
  • Functional cookies— Remember your preferences to enhance your experience

For full details, please see our Cookie Policy.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/HTTPS), secure hosting infrastructure, access controls, and regular security reviews. Payment data is handled entirely by Stripe, which is PCI DSS Level 1 certified.

11. International Transfers

Some of our third-party service providers (such as Stripe and Resend) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision by the UK government, to protect your personal data in accordance with UK GDPR.

12. Children’s Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically. If we make material changes, we will notify you by email or by placing a prominent notice on our website.

14. Contact Us

If you have any questions about this privacy policy, your personal data, or wish to exercise any of your rights, please contact us:

Chat with us