Privacy Policy

Who we are

AYG Property Investment Ltd, trading as AYG Property (“AYG Property”, “we”, “us”, “our”), is registered in England and Wales under company number 14971526, with its registered office at 11 Old Bond Street, London W1S 4PN. We sell and market residential property in the United Kingdom and the UAE. We operate this website and are the data controller for the personal information described in this policy.

If you have any question about this policy, or you want to exercise any of your rights, contact us at hello@aygproperty.co.uk, call +44 (0)20 3883 5498, or write to us at our London office (visits by appointment only).

The information we collect

We collect the information you give us, a small amount of technical data our hosting provider records automatically and — depending on your cookie choices — information about how you arrived at and use the site. Specifically:

• Enquiry details — your first and last name, email address, phone number, the type of interest you select (for example buying for yourself, investment or mortgage advice), your preferred location, and anything you write in the message field.
• Contact history — notes about our conversations with you by phone, email or WhatsApp, and records of the properties or events you have asked about.
• Email engagement — whether our emails to you were delivered, opened, clicked, bounced or unsubscribed.
• Technical data — IP address, browser type, referring page and the pages you visited, recorded in our hosting provider's server logs.
• Language preference — stored in a cookie so the site remembers whether you prefer English or Turkish. See our Cookie Policy for details.
• Campaign data — the campaign tags (UTM parameters) and ad click IDs (gclid, gbraid, wbraid, fbclid) in the link you arrived from, your landing page and the referring site. These are held in your browser for the session and saved with your enquiry, so we know which campaign brought it.
• Advertising identifiers — if you allow marketing cookies, the Meta browser and click identifiers (_fbp and _fbc) are saved with your enquiry on our client record.
• Analytics and advertising data — if you allow them, Google Analytics, Google Ads and Meta Pixel cookies collect information about your visit. See our Cookie Policy for details.

How we use your information

We use your personal information to:

• Respond to your enquiry and arrange viewings, calls or appointments.
• Send you information about properties, developments and events that match what you told us you are looking for.
• Keep records of our dealings with you in our client management system, so any member of our team can pick up your enquiry.
• Send service messages such as confirmations and appointment reminders.
• Keep the website secure, prevent abuse of our enquiry form, and diagnose technical problems.
• Meet our legal, accounting and regulatory obligations.
• With your consent, understand how visitors use the site (analytics), and measure and optimise our advertising on Google and Meta, including building advertising audiences. See “Advertising and the Meta Conversions API” below.

Our lawful basis for using it

Under the UK GDPR we must have a lawful basis for each use of your information. We rely on:

• Your consent (UK GDPR Article 6(1)(a)) — when you submit an enquiry, contact or event registration form and agree to be contacted, when you opt in to marketing emails, and when you allow analytics or marketing cookies (which also require your consent under regulation 6 of the Privacy and Electronic Communications Regulations, PECR). Sharing information with Meta through the Meta Conversions API relies on your marketing consent. You can withdraw consent at any time.
• Legitimate interests — to run and promote our property business, keep records of client relationships, and protect our website from misuse. We balance those interests against your rights.
• Legal obligation — where we must keep records or disclose information to comply with the law.

If you are in Türkiye, we rely on your explicit consent (açık rıza) under the Turkish Personal Data Protection Law No. 6698 (KVKK) for analytics and marketing cookies and for sharing information with Meta.

Who we share it with

We do not sell your personal information. We share it with service providers who process it on our instructions, with professional advisers or partners where that is necessary to progress your enquiry, and — only with your consent — with Google and Meta for analytics and advertising:

• Supabase — hosts our database and file storage.
• Vercel — hosts this website and records server logs.
• Brevo — sends our transactional and marketing emails and records engagement.
• Cloudinary — delivers and optimises the images on this site.
• Property developers, mortgage advisers, solicitors and surveyors — where you ask us to progress a purchase and it is necessary to introduce you.
• Professional advisers, and law enforcement or regulators where we are legally required to disclose.
• Google — Google Analytics 4 (with analytics consent), and Google Ads through Google Tag Manager (with marketing consent).
• Meta Platforms Ireland Ltd — the Meta Pixel and the Meta Conversions API (with marketing consent). See the next section.

Advertising and the Meta Conversions API

If you allow marketing cookies, we share certain information with Meta Platforms Ireland Ltd (“Meta”), which runs Facebook and Instagram, so we can measure and optimise our advertising and build advertising audiences. As well as the Meta Pixel in your browser, our server sends this information to Meta directly through the Meta Conversions API. If you have not given marketing consent, we send nothing to Meta.

We send Meta an event when you view pages, submit a project enquiry, contact form or event registration, or tap a phone, WhatsApp or email link. Each event can include:

• Hashed with SHA-256 before it leaves our server: your email address, phone number, first name, last name, city and country, and our internal client record ID.
• Not hashed: your IP address, your browser's user agent, the _fbp and _fbc cookie values, and the address (URL) of the page.

If your enquiry progresses and our team marks you as “interested” or “serious” in our client management system, we send Meta a further event for your record using the same hashed identifiers. This helps our campaigns reach people who are genuinely interested.

We never send Meta the free-text message you write or exact budget amounts. For event registrations we send only a budget band code.

Hashing turns your details into a code before they leave our server, so Meta can match them to its accounts without receiving them in readable form. You can withdraw marketing consent at any time from “Cookie settings” in the footer, and from then on we stop sharing new information with Meta.

International transfers

Our website and database are hosted in the United Kingdom (London region). Some of our service providers process data outside the UK. Where that happens, we rely on UK adequacy regulations or on standard contractual clauses together with the UK International Data Transfer Addendum, so your information keeps an equivalent level of protection.

We also operate in the UAE. If your enquiry concerns a UAE property, your details may be shared with our team or partners there for that purpose.

Google and Meta may transfer the information they receive from us outside the UK, the EEA and Türkiye — for example to the United States — under their own standard safeguards for international transfers.

How long we keep it

We keep enquiry and client records for as long as we have an active relationship with you, and for up to six years after our last contact, so we can deal with any question or claim that arises and meet our record-keeping obligations. Marketing contacts are reviewed periodically and removed if you unsubscribe or are no longer engaged. Server logs are retained for a short period by our hosting provider.

Campaign data saved with your enquiry, and — if you allowed marketing cookies — the Meta identifiers (_fbp and _fbc), are kept on your client record for the same period as the record itself. Your cookie choice (ayg_consent) is kept for 180 days, and campaign data in your browser's session storage is cleared when your browsing session ends. Cookie durations are listed in our Cookie Policy.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to erase your information where there is no good reason for us to keep it.
• Object to, or ask us to restrict, our use of your information.
• Ask us to transfer your information to you or another provider in a portable format.
• Withdraw your consent at any time — for cookies and sharing with Meta, from “Cookie settings” in the footer; for marketing emails, using the unsubscribe link in any email.

To exercise any of these rights, email hello@aygproperty.co.uk. We will respond within one month. You will not normally have to pay a fee.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

How we protect your information

This website is served over HTTPS, and our client management system is access-controlled so only authorised AYG Property staff can view your details. Our database enforces row-level access controls and passwords are stored hashed, never in plain text. No system can be completely secure, but we take these measures seriously and review them regularly.

Children

This website is not directed at children, and we do not knowingly collect information about anyone under 18. If you believe a child has given us their details, contact us and we will delete them.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. If we make a significant change we will make that clear on the site.