Privacy policy

Who this policy applies to

This policy applies to visitors, buyers, business owners, brokers and administrators using BusinessSold.co.uk and BusinessSold.uk. BusinessSold is operated by TDF Consultancy Limited (company number 10248390), whose registered office is 111a George Lane, South Woodford, London, E18 1AN. TDF Consultancy Limited is the data controller for the information described here.

Information we collect

• Account details including name, email address, phone number, role and profile information.
• Business listing information, images, financial figures and seller or broker contact details.
• Buyer qualification details, enquiries and private messages, favourites, saved searches, notification preferences and in-app notification records.
• Confidentiality acceptances, agreement exports, deal-room access decisions, download audit records and private due-diligence documents supplied by sellers.
• Broker company profiles, team membership and approval records.
• Safety reports, moderation notes, audit history and account-access decisions.
• Technical and usage information needed for security and service analytics. Listing-view and abuse signals are irreversibly hashed where the service is designed not to retain raw network identifiers.

How we use information

We use information to provide accounts and listings, connect buyers with sellers or brokers, moderate content, prevent abuse, operate marketplace reporting, improve the service and comply with legal obligations.

Depending on the activity, processing is necessary to provide the service, based on legitimate interests in running a safe marketplace, required by law, or based on consent where consent is requested.

Sharing and processors

Listing information intended for publication is visible to marketplace visitors. Enquiry details are shared with the relevant seller and authorised brokerage. Deal-room documents are shared only with the listing owner, authorised representatives, administrators and buyers whose access has been approved. Service providers may process information for hosting, storage, authentication, security, email delivery and payment processing under appropriate contractual controls. When checkout is enabled, Stripe processes payment and billing details; BusinessSold records transaction references and status but does not receive or store complete card details. BusinessSold does not sell personal information.

Retention and security

Information is retained for as long as an account, listing or enquiry remains operational and afterwards where reasonably needed for safety, dispute resolution, accounting or legal compliance. Access controls, private object storage, server-side authorisation and audit records are used to protect marketplace data. Confidentiality acceptance and access-decision records may be retained where reasonably needed to establish or defend legal claims.

Your rights

UK data-protection law may give you rights to access, correct, erase or restrict your information, object to certain processing and receive portable information. You may also complain to the UK Information Commissioner’s Office. Requests can be sent to privacy@businesssold.co.uk.

Changes

Material changes will be reflected on this page with a new update date. Where appropriate, signed-in users will receive additional notice.