Last updated 9 November 2026

Privacy policy

What we collect, why, who we share it with and your rights. In plain English.

Who we are

Upstream is run by Peter Priest, a sole trader trading as Upstream, at Grove House, Lutyens Close, Chineham Court, Basingstoke, RG24 8AG. We're registered with the Information Commissioner's Office ([ICO registration number]). For anything about your data, email upstreamhomes@outlook.com.

Who this covers

  • People who use our website or sign up for our emails.
  • Our customers and their team members.
  • Investors our customers invite to view deals.
  • Business contacts we approach about Upstream.
  • Homeowners, whose property addresses appear in the public data we analyse.

Email sign-ups

When you sign up on our website we keep your email address, the area you asked about and how you found us (for example a search engine or an advert). We use them to send the figures and emails you asked for. Our lawful basis is your consent, which you can withdraw at any time with the unsubscribe link in every email. If you unsubscribe we keep a record of your address so we don't email you again.

Customers

We hold your name, email address, business details, the compliance numbers you add, and billing records. We use them to provide the service, support you and bill you. Our lawful basis is our contract with you. Card payments are handled by Stripe; we never see or store your full card number. We keep billing records for six years because the law requires it.

We also send you emails about your account, such as trial reminders. These are part of the service, not marketing.

Information our customers add

Customers can add details of property owners, phone numbers, notes, letters and investor contacts. For that information the customer is the controller and we process it on their behalf, under the data protection terms in our Terms. If you're one of those people and want to exercise your rights, contact the business that contacted you; we'll help them respond.

Property data and homeowners

Upstream analyses public data: HM Land Registry price paid data, the energy performance certificate register and the ONS postcode directory. This links property addresses to sale prices, dates and energy ratings. We don't take owners' names from these sources.

We use it to estimate which properties' owners may be open to selling, so that property businesses can write to them. Our lawful basis is legitimate interests: helping owners who may want a straightforward sale hear from buyers, using information already published. We've weighed this against owners' interests: we only use published data, we don't publish individual addresses on our website, and our customers must honour opt-outs.

If you own a property and don't want it included, email upstreamhomes@outlook.com with the address and we'll exclude it from scores and lists.

Business contacts

To tell property businesses about Upstream we use company and director details from Companies House and business contact details the business has published, such as on its website. Our lawful basis is legitimate interests. We check phone numbers against the Telephone Preference Service and Corporate TPS before calling, and we stop as soon as you ask.

Cookies

We use cookies that are needed for the site to work: to sign you in and keep your account secure, and one (up_consent) that remembers your cookie choice for a year.

If you click Accept on our cookie notice, we also set one first-party cookie (df_src) that records how you first arrived, such as the advert or website that referred you, for up to 90 days, so we know which of our marketing works. If you choose No thanks, we don't set it. To change your mind, clear this site's cookies in your browser and you'll be asked again.

We don't use advertising cookies, track you across other sites, or sell data.

Who we share data with

We use trusted suppliers to run Upstream, under contracts that protect your data: Supabase (database), Vercel (hosting), Resend (email), Stripe (payments) and Anthropic (drafting letters and summaries when a customer uses the AI features). Some are based in or use servers in the United States; where data leaves the UK it's protected by UK adequacy regulations or the UK's approved contract clauses. We don't sell personal data.

How long we keep it

  • Email sign-ups: until you unsubscribe, then just a record of your address so we don't email you again.
  • Customer accounts: while your account is open, then 90 days so you can come back, except billing records (six years).
  • Business contacts: up to two years from our last contact, unless you become a customer.
  • Exclusion requests from homeowners: for as long as we process property data.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, and ask for it in a portable format. You can object to direct marketing at any time and we'll stop. To use any of these rights, email us. You can also complain to the Information Commissioner's Office at ico.org.uk, though we'd like the chance to fix things first.

Changes

We'll update this page if anything changes and tell customers by email about important changes.