Compliance & GDPR
OffMarketLeads uses publicly available data and licensed data sources. This page explains our approach to compliance and your responsibilities as a user.
Data sources
- HM Land Registry — Public register of property ownership and transactions. Available under Open Government Licence.
- EPC Register — Energy Performance Certificate data. Published by DLUHC under Open Government Licence.
- Companies House — Company registrations, directors, and filings. Public data via Companies House API.
- Skip-trace providers — Licensed data partners who process personal data under legitimate interest for business-to-business contact.
Your responsibilities
When you use skip-traced contact details to reach individuals, you must comply with GDPR:
- Legitimate interest — You need a lawful basis. Property acquisition is generally accepted as legitimate interest, but you should document your assessment.
- Right to opt out — If someone asks you not to contact them, stop immediately and record the opt-out.
- Data minimisation — Only retain contact data you're actively using. Delete skip-trace results you no longer need.
- No spam — Bulk unsolicited email may violate PECR (Privacy and Electronic Communications Regulations). Letters are generally lower risk than email.
ICO registration
If you're processing personal data as part of a property business, you likely need to register with the ICO (Information Commissioner's Office). Annual registration costs £40-£2,900 depending on your organisation size.
Our processing
OffMarketLeads (Mike Bells Ltd) is ICO-registered. We process property data as a legitimate business service. We don't sell personal data to third parties. See our Privacy Policy for full details.