Privacy at Yalla.House
Last updated: 17 April 2026
Data Controller
The data controller responsible for your personal data is:
Yalla.House Ltd (registration pending)
London, Redbridge (exact address pending)
Registered in England and Wales
Email: support@yalla.house
Legal enquiries: legal@yalla.house
What Data We Collect
Personal Data
When you register or create an account, we collect your name, email address, phone number, and contact information.
Listing Data
For property listings, we collect descriptions, photos, prices, location data, and other information you provide.
Usage Data
We collect information about your interactions with the platform, including IP addresses, browser information, and access patterns.
Cookies
We use cookies and similar technologies for authentication, session management, and analytics. Please refer to our Cookie Policy for more details.
Purpose of Processing
- •Account management: Account creation, magic link authentication, and management of your profile
- •Property listings: Publishing and syndicating listings on Rightmove and Zoopla
- •Communication: Contacting you, handling support requests, and sending notifications
- •Payment processing: Processing transactions via Stripe
- •Analytics: Anonymous usage statistics to improve our services
- •Legal obligations: Compliance with applicable laws, including the UK Data Protection Act 2018
Legal Basis (UK GDPR)
We process your data under Article 6 of the UK GDPR on the following grounds:
- Consent (Art. 6(1)(a)): Your explicit consent, e.g. for marketing emails
- Performance of contract (Art. 6(1)(b)): Necessary to fulfil our contract with you, e.g. account management and listing services
- Legitimate interests (Art. 6(1)(f)): Security, fraud prevention, and platform improvement
- Legal obligation (Art. 6(1)(c)): Compliance with legal requirements under UK law
Data Sharing with Third Parties
Your data is only shared with the following processors:
Supabase (PostgreSQL Hosting): EU region (France). Data processing agreement in place.
Stripe (Payment processing): UK-compliant. See Stripe's privacy policy for further details.
Rightmove & Zoopla: Your listing data is syndicated to publish your property on these portals.
Vercel (Hosting): Platform hosted via CDN in EU/UK regions.
We do not sell your data to marketing companies or any other commercial third parties.
Your Rights Under UK GDPR
You have the following rights under UK GDPR:
- •Right of access (Art. 15): You can request to know what data we hold about you at any time
- •Right to rectification (Art. 16): You can request correction of inaccurate or incomplete data
- •Right to erasure (Art. 17): You can request deletion of your data, subject to legal retention requirements
- •Right to restriction (Art. 18): You can request that we restrict processing of your data
- •Right to data portability (Art. 20): You can receive your data in a structured, machine-readable format
- •Right to object (Art. 21): You can object to the processing of your data in certain circumstances
To exercise your rights, contact us at support@yalla.house
International Data Transfers
Some of our service providers process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including adequacy decisions and standard contractual clauses.
Supabase hosts data in the EU (France), covered by a UK adequacy decision. Vercel uses CDN locations in the EU and UK. Stripe is UK-compliant with its own data protection policies.
Data Retention
We retain your personal data for as long as necessary to provide our services and fulfil legal obligations. Account data is kept for the duration of your active account.
After account deletion, your data will be removed within 90 days unless longer retention is required by law (e.g. tax or accounting obligations for up to 6 years).
Contact & Complaints
For questions about data protection or to exercise your rights, contact us:
Email: support@yalla.house
Legal enquiries: legal@yalla.house
Address: London, Redbridge (exact address pending)
You also have the right to lodge a complaint with the relevant supervisory authority. For the United Kingdom, this is the Information Commissioner's Office (ICO):
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Phone: 0303 123 1113