Privacy Policy

Lovinabargain Ltd (trading as lovinahome) ("we", "us", "our") operates lovinahome.com (the "Service"). This Privacy Policy explains how we collect, use, disclose and safeguard personal data when you use our Service. It is drafted to comply with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018, and the ePrivacy Directive.

1. Data Controller

The data controller for personal data processed via the Service is Lovinabargain Ltd, a company registered in Ireland under company number CRO 656000, with VAT number IE3672167TH, and registered office at Unit 4 Ballinahinch Upper, Newtownmountkennedy, Co. Wicklow, Ireland. For data-protection queries contact privacy@lovinahome.com.

2. Personal data we collect

• Account data: name, email address, hashed password, role (buyer/seller/agent), subscription tier, optional EU VAT number for business customers.
• Listing data: property details, photographs and contact preferences you submit.
• Billing data: processed by Stripe Payments Europe, Ltd.; we retain only non-sensitive metadata (last 4 digits, plan, renewal date, VAT invoice references).
• Usage data: pages viewed, property searches, saved listings, device and browser metadata.
• Cookies: see our Cookie Policy for full detail.

3. Legal bases

We rely on the following Article 6 GDPR legal bases:

• Contract (Art. 6(1)(b)): to provide the Service you have signed up for.
• Legitimate interests (Art. 6(1)(f)): to secure our platform, prevent fraud, and improve product features.
• Legal obligation (Art. 6(1)(c)): to retain transactional records for tax and accounting (Irish Revenue requires 7-year retention of VAT-bearing transactions).
• Consent (Art. 6(1)(a)): for non-essential cookies and marketing communications; you may withdraw consent at any time.

4. Sub-processors

We share the minimum necessary data with the following sub-processors:

• Stripe Payments Europe, Ltd. — payments processing and VAT-invoice generation (Ireland).
• Resend, Inc. — transactional email delivery (United States, Standard Contractual Clauses in place).
• MongoDB Atlas — database hosting (EU region where available).
• OpenAI / Emergent — AI property assistant; prompts are processed transiently and not used for model training.

5. Data retention

• Account data: retained while your account is active; deleted within 30 days of account closure.
• Listing data: retained for up to 12 months after expiry for analytics.
• Billing records: retained for 7 years as required by Irish Revenue.
• Server logs: retained for up to 90 days.

6. Your rights under GDPR

You have the right to:

• Access your personal data (Art. 15).
• Rectify inaccurate data (Art. 16).
• Erase your data ("right to be forgotten", Art. 17).
• Restrict or object to processing (Art. 18 & 21).
• Data portability in machine-readable format (Art. 20).
• Withdraw consent at any time where consent is the legal basis.
• Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

To exercise any of these rights email privacy@lovinahome.com. We respond within 30 days.

7. International transfers

Where data is transferred outside the EEA (for example to our US sub-processors) we rely on the European Commission's Standard Contractual Clauses and, where relevant, supplementary technical and organisational measures.

8. Security

We use industry-standard technical and organisational measures, including TLS encryption in transit, encryption at rest, bcrypt password hashing, least-privilege access controls and regular security reviews. No system is perfectly secure; please report concerns to security@lovinahome.com.

9. Children

The Service is not directed at children under 16. We do not knowingly collect their personal data.

10. Changes to this policy

We may update this Policy from time to time. Material changes will be notified via email and/or a prominent notice on the Service. Continued use constitutes acceptance of the updated Policy.