Legal
Privacy Policy
Last updated: March 2026
1. Who we are
This website is operated by Harbourway Group Ltd (trading as Quote-to-Keys™), a company registered in England and Wales.
For data protection purposes, Harbourway Group Ltd is the data controller for personal data collected through this website.
Registered office: 86-90 Paul Street, London EC2A 4NE. Company no. 17093218.
Contact: privacy@quotetokeys.co.uk
2. What data we collect and why
Baseline Review applications (/apply)
When you submit a Baseline Review application, we collect:
- Your name, role, and firm name
- Your email address and phone number
- Your firm website
- Operational information about your conveyancing pipeline (volume, conversion tracking, case management system, follow-up processes)
Legal basis: Legitimate interests — processing your enquiry and assessing whether a Baseline Review is appropriate for your firm.
Used for: Responding to your application, conducting the Baseline Review if engaged, and internal operational records. We do not add you to a marketing list or share your data with third parties for marketing purposes.
Resource downloads (/resources)
When you download a resource, we log: the file downloaded, approximate geographic location (country only), device type (desktop/mobile/tablet), and timestamp. We do not collect your email address, name, or IP address for downloads.
Legal basis: Legitimate interests — understanding how our resources are used.
These logs contain no personal data and are retained indefinitely as anonymous usage records.
Ebook purchases (/resources → purchase)
If you purchase the digital ebook, payment is processed by Stripe. We receive confirmation that payment was successful, including your email address for delivery purposes. We do not store payment card details — these are held by Stripe under their own security and privacy obligations.
Legal basis: Performance of a contract (processing your purchase and delivering the product).
Email correspondence
If you contact us directly by email, we process your email address and the contents of your message in order to respond. No automated profiling or third-party sharing occurs.
3. Third-party processors
We use the following third-party services to operate this website:
| Processor | Purpose | Location |
|---|---|---|
| Resend | Transactional email delivery | EU / US |
| Amazon S3 (AWS) | Secure file storage and delivery | EU |
| Stripe | Payment processing | EU / US |
| OVH (VPS) | Website hosting and database | France (EU) |
Each processor operates under a data processing agreement and is subject to appropriate safeguards for any international transfers.
4. Data retention
- Application data — retained for 2 years from submission, then deleted.
- Purchase records — retained for 7 years in line with financial record-keeping obligations.
- Anonymous download logs — contain no personal data; retained indefinitely.
- Email correspondence — retained for as long as the business relationship is active, then deleted within 12 months.
5. Cookies
This website uses essential cookies only. No tracking, analytics, or advertising cookies are set.
During the ebook purchase flow, Stripe may set cookies required to process your payment securely. These are essential to the transaction and do not require separate consent under UK GDPR.
You can configure your browser to block or delete cookies, but doing so may prevent the purchase flow from completing.
6. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention obligations)
- Restrict or object to processing
- Receive your data in a portable format (where applicable)
- Withdraw consent where consent is the legal basis
To exercise any of these rights, contact us at privacy@quotetokeys.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner's Office: ico.org.uk
7. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the website after changes are published constitutes acceptance of the updated policy.