L&M Property Sourcing · Legal

Privacy Notice

This notice explains how L&M Property Sourcing Ltd (“L&M”, “we”, “us”) collects, uses, and protects personal data. It applies to visitors to lmpropertysourcing.co.uk, anyone joining our founding waitlist, and anyone who buys L&M Academy.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

L&M Property Sourcing Ltd is a UK limited company.

• Registered in England & Wales
• Company number: 17199111
• Registered office: 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB
• Contact: info@lmpropertysourcing.co.uk
• ICO registration: in progress

2. What personal data we collect

2.1 From you, when you submit a form

• Name
• Email address
• Phone or WhatsApp number (optional)
• Investor track preference (Investor / Sourcer-Partner / Seller)
• For investors: budget range, preferred strategy, target areas
• For sellers: property address (held confidentially), tenure, target completion timeline
• For partners: nature of your business, network size, referral commercials of interest
• Anything you write in a free-text field

2.2 From you, when you purchase L&M Academy

• Name and email address (via Stripe checkout)
• Billing address and payment-method last four digits (held by Stripe, not by us)
• Course progress, downloads, and login timestamps (within the members area)

2.3 Automatically, when you visit the site

• IP address (anonymised after 30 days)
• Browser type and version, operating system
• Pages visited, time on page, referring URL
• Cookie identifiers (see our Cookies Policy)

3. Lawful basis for processing

We process personal data under the following UK GDPR Article 6 lawful bases:

• Consent (Art. 6(1)(a)): when you opt in to the waitlist or marketing emails. You can withdraw consent at any time.
• Contract (Art. 6(1)(b)): when processing is necessary to deliver L&M Academy after purchase, or to take steps at your request before entering a contract.
• Legal obligation (Art. 6(1)(c)): when we must retain records under HMRC Money Laundering Regulations 2017, Companies Act 2006, or tax law.
• Legitimate interests (Art. 6(1)(f)): for analytics, fraud prevention, and improving our service. We balance these against your rights.

4. How we use your personal data

• To respond to your waitlist registration and contact you when seats open
• To deliver L&M Academy and related course materials
• To send transactional emails (receipts, password recovery, access notifications)
• To send marketing emails, if you have opted in (you can unsubscribe at any time)
• To meet legal and regulatory obligations (record-keeping, tax, AML)
• To improve the website and our services through aggregated analytics

5. Who we share data with

We do not sell personal data to third parties. We share data only with the processors required to run the business:

• Stripe — payment processing for L&M Academy (PCI-DSS Level 1 certified)
• Google Workspace — email hosting and inbox infrastructure
• Netlify — website hosting and form submissions
• GoHighLevel — CRM and marketing email delivery
• HMRC — tax filings, on a statutory basis
• Companies House — on a statutory basis

Where any of these are located outside the UK, transfers rely on UK adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses.

6. How long we keep data

• Waitlist registrations: until you ask us to delete, or for 24 months after your last engagement, whichever is sooner.
• Academy customer records: 7 years after your last purchase, in line with HMRC record-keeping requirements.
• Marketing email lists: until you unsubscribe, then 30 days for the suppression list.
• Website analytics: 26 months in aggregated form. IP addresses anonymised after 30 days.
• Source-of-funds and CDD records (for sourcing service buyers, once active): 5 years from end of business relationship, per MLR 2017.

7. Your rights

Under UK GDPR you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate or incomplete data
• Erasure: ask us to delete data, where we no longer need it
• Restriction: ask us to pause processing while a query is resolved
• Portability: receive your data in a machine-readable format
• Object: to processing based on legitimate interests or direct marketing
• Withdraw consent: at any time, for consent-based processing
• Not be subject to solely automated decision-making (we don't do this)

To exercise any of these rights, email info@lmpropertysourcing.co.uk. We'll respond within one calendar month.

8. Complaints

If you believe we've handled your data badly, please tell us first — we'll work to resolve it. You also have the right to complain to the Information Commissioner's Office:

• ico.org.uk/concerns
• Helpline: 0303 123 1113

9. Cookies

See our separate Cookies Policy for details on what cookies the site uses and how to control them.

10. Children's data

L&M's services are intended for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has provided personal data to us, please contact us and we'll delete it.

11. Changes to this notice

We may update this notice from time to time. Material changes will be notified by email to anyone on the waitlist or who has purchased L&M Academy. The version date at the top of this page reflects the most recent revision.

L&M Property Sourcing Ltd · Registered in England & Wales · Co. 17199111 · 4th Floor, Silverstream House, 45 Fitzroy Street, London W1T 6EB · Last updated 19 May 2026.