Privacy Policy
Last updated: March 2026
This Privacy Policy explains how Cairngorm Research Limited (a company incorporated in Scotland with company number SC877959 and having its registered office at Summit House, 4–5 Mitchell Street, Edinburgh, EH6 7BD) (trading as Locacity) (“we”, “us”, “our”) collects, uses and stores personal data when you use this website (the “Site”) or purchase a report from us.
We are registered with the Information Commissioner’s Office (ICO) as a data controller. Our ICO registration number is ZC110922.
1. What Personal Data We Collect
- Email address — collected when you purchase a report, via our payment provider Stripe. We use this to deliver your purchased report to you by email.
- Property address searched — the address or postcode you enter when purchasing a report. This is stored against your order record.
- Payment data — your payment card details are processed directly by Stripe. We do not receive or store your card details.
- Contact correspondence — if you contact us at contact@locacity.co.uk, we will receive and store any personal data you include in your message.
We do not collect your name, postal address or any other personal data unless you choose to provide it to us directly by email.
2. How We Use Your Personal Data
| Purpose | Data used | Lawful basis |
|---|---|---|
| To deliver your purchased report | Email address | Performance of a contract |
| To process and record your payment | Email address, property address | Performance of a contract |
| To respond to enquiries | Any data you send us | Legitimate interests |
| To monitor and fix technical errors on the Site | Technical data (which may incidentally include order data) | Legitimate interests |
3. How Long We Keep Your Data
- Order records (including email address and property address) — retained for 7 years for accounting and legal compliance purposes, after which they are deleted.
- Contact correspondence — retained for up to 6 years, after which it is deleted.
- Audit logs — server logs recording payment events are retained for 12 months, after which they are deleted.
4. Who We Share Your Data With
We do not sell or rent your personal data to any third party. We share your data only with the following third-party service providers who process it on our behalf:
- Stripe — payment processing. Stripe receives your email address and payment details to process your purchase. Stripe is certified to PCI-DSS standards. See Stripe’s privacy policy for further information.
- Our email delivery provider — receives your email address to deliver your purchased report.
- Our error monitoring provider — may incidentally receive personal data (such as email address or property address) if a technical error occurs during processing of your order.
- Our cloud hosting provider — our database, which contains order records including email addresses and property addresses, is hosted on third-party cloud infrastructure.
5. International Transfers
Some of our third-party service providers may be based outside the United Kingdom and may process your personal data outside the UK. We take reasonable steps to use providers who maintain appropriate data protection standards, but we cannot guarantee the data protection laws or practices of any third-party provider or the countries in which they operate. By using the Site and purchasing reports, you acknowledge this position.
6. Your Rights
Under UK GDPR you have the following rights in relation to your personal data:
- Right of access — you may request a copy of the personal data we hold about you.
- Right to rectification — you may ask us to correct inaccurate personal data.
- Right to erasure — you may ask us to delete your personal data in certain circumstances.
- Right to restriction — you may ask us to restrict processing of your personal data in certain circumstances.
- Right to object — you may object to processing based on legitimate interests.
- Right to portability — you may request a copy of your data in a portable format.
To exercise any of these rights, please contact us at contact@locacity.co.uk. We will respond within one month.
You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
7. Cookies
Our use of cookies is governed by our Cookie Policy.
8. Changes to This Policy
We may change, update, add to or delete from this Privacy Policy from time to time without prior notice. Changes take effect when posted to the Site.
9. Governing Law
This Privacy Policy is governed by the law of Scotland. Any disputes arising in connection with it shall be subject to the exclusive jurisdiction of the courts of Scotland.