What is collected, and how to make it stop.

Who the controller is

Cash Gap Ltd, trading as CashGap, company number 17207385, registered office Crossways, Manor Road, Reading, RG8 9DT. Our ICO registration is in progress and its reference will be published here once granted. Contact: hello@cashgap.co.uk.

What is collected, and why

• Your buy box. Capital band, funding routes, buying structure, strategies, geography, return floor, ticket range, horizon, condition and planning-risk appetite, deployment timing and your deal breakers. This exists so that only property clearing it is ever put in front of you.
• Your contact details. Name, email address, phone number if you give one, and how you would like to be reached.
• Anything you type into the free-text fields. Please do not put anything in them you would not want held.

The lawful basis is your consent, given by the two confirmations at the end of the buy box form. Where an engagement proceeds, the basis for the material required by anti-money-laundering law is legal obligation rather than consent, and that material cannot be deleted on request for as long as the five-year retention duty runs.

What is not done with it

• It is never sold.
• It is never shared with a lender, agent or third-party sourcer without asking you first.
• It is not used to build an advertising profile of you.
• No automated decision with a legal or similarly significant effect is made about you.

Where it goes

A submitted buy box is delivered by email to CashGap and held in that mailbox. This website is served by Vercel Inc., which processes request metadata (including IP address) in order to serve pages and defend against abuse. Email delivery is handled by Resend. Where you have accepted advertising cookies, Meta Platforms Ireland Limited receives the hashed conversion data described below. All act as processors or controllers under written terms.

How long it is kept

A buy box is held for as long as it is live, and for twelve months after the last contact with you, after which it is deleted. Material collected for anti-money-laundering purposes is kept for five years from the end of the business relationship, as the regulations require.

Your rights

You can ask for a copy of what is held, ask for it to be corrected, ask for it to be deleted, ask for it to be restricted, or object to it being used — and you can withdraw consent at any time. Email hello@cashgap.co.uk and it will be actioned within one month. An objection to being contacted is honoured absolutely and permanently.

If you are not satisfied with how a request was handled you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and advertising

This site sets no cookie of any kind unless you agree to it. There is no analytics, no session recording and no third-party script running on this site by default.

If you press Accept on the banner, we load the Meta (Facebook) pixel, which lets us see which advertising campaigns bring investors here. If you press Decline, the pixel is never loaded at all — it is not merely switched off. You can change your mind by clearing this site’s data in your browser, and the site behaves identically either way.

Where you arrive from one of our adverts and go on to submit a buy box, we may send Meta a hashed record of that — your email address and name are converted into an irreversible fingerprint before they leave us, so Meta can match the conversion to the advert without receiving your details in readable form. This only happens if you accepted the banner.

We also record which campaign a visit came from in your browser’s session storage, so that a buy box submitted at the end of a seven-step form can still be credited to the right advert. That is first-party, is cleared when you close the tab, and is not used to follow you across other websites.