Privacy Policy

1. Introduction

Proximate Investment ('we', 'us', 'our') is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of personal information through our website:

Contact form data: First name, last name, email address, phone number, and your message when you submit an enquiry through our contact forms
Account information: Email address and encrypted password when you create an admin account
Marketing attribution data: UTM parameters (source, medium, campaign, term, content) and referral codes from the URL you use to visit our site
Preferences: Your selected currency (GBP, EUR, USD, TRY, AED) and measurement unit (square feet or square metres), stored locally on your device
reCAPTCHA data: Google reCAPTCHA v3 collects interaction data to distinguish human users from bots when you submit forms

3. How We Use Your Information

We use your personal data for the following purposes:

To respond to your property enquiries and investment consultation requests
To manage leads and track the status of your enquiry through our internal CRM system
To send password reset emails when requested via Amazon SES email service
To understand which marketing channels bring visitors to our website (UTM tracking)
To prevent spam and abuse through Google reCAPTCHA verification

4. Third-Party Services

We use the following third-party services that may process your data:

Google Maps API: Used to display property locations on maps. Subject to Google's Privacy Policy.
Google reCAPTCHA v3: Used to protect forms from spam. Subject to Google's Privacy Policy and Terms of Service.
Amazon SES: Used for sending transactional emails such as password reset links. Subject to Amazon SES's Privacy Policy.

5. Data Storage and Security

Your data is stored in a secure PostgreSQL database. Account passwords are protected using industry-standard bcrypt hashing with dual-salt encryption. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, or destruction.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you
Right to rectification: You can ask us to correct inaccurate data
Right to erasure: You can ask us to delete your personal data
Right to restrict processing: You can ask us to limit how we use your data
Right to object: You can object to our processing of your personal data

7. Data Retention

We retain your contact form submissions and lead data for as long as necessary to fulfil the purpose for which it was collected, typically for the duration of the business relationship plus any legal retention period. Password reset tokens expire after 1 hour and are automatically invalidated after use.

8. Contact Us

For any privacy-related enquiries or to exercise your data rights, please contact us at info@proximateinvestment.com or write to: Proximate Investment, 37th Floor, 1 Canada Square, Canary Wharf, London, E14 5AA.