Privacy Policy

1. Who We Are

Anjio Property Portal is a trading style of Jason Barnaby Limited, registered in England and Wales.

• Company Registration: 17031354
• Registered Office: 124 City Road, London, EC1V 2NX
• ICO Registration Number: C1934896
• Data Controller Contact: customersupport@anjio.co.uk
• Tel:
• Website: www.anjio.co.uk

For the purposes of UK GDPR and the Data Protection Act 2018, Jason Barnaby Limited is the Data Controller for personal data collected through anjio.co.uk.

2. What Personal Data We Collect

2.1 From Investors (Anjio Members and Anjio Pro)

• Full name, title, date of birth and age bracket
• Email address, telephone number and preferred contact method
• Full postal address, region and postcode
• UK citizenship and domicile status; nationality if non-UK
• Company name and registration number (if buying via a company)
• Property investment experience, strategy preferences and goldmine areas
• Investment budget range and timeline
• Password (stored securely — never in plain text)
• Payment information processed via Stripe (we do not store card details)
• Deal access history, saved deals and credit usage
• Email marketing preferences and newsletter subscription status

2.2 From Deal Sourcers and Deal Providers

• Full name, company name, company registration number and VAT number
• Business address, email address and telephone number
• Compliance documentation: AML registration, Redress Scheme number, ICO number, PI insurance details
• Accreditation and industry membership details
• Deal listings submitted for publication on Anjio
• Payment information processed via Stripe

2.3 Technical and Usage Data

• IP address, browser type and version, device type and operating system
• Pages visited on anjio.co.uk, time spent and navigation patterns
• Cookies and similar tracking technologies (see our Cookie Policy)
• Referring website and search terms used to find Anjio

3. How We Use Your Personal Data

Purpose	Lawful Basis
Creating and managing your Anjio account	Contract performance
Processing membership payments (Anjio Member, Anjio Pro)	Contract performance
Issuing and tracking your monthly deal credits	Contract performance
Introducing investors to deal sourcers after credit use	Contract performance / Legitimate interests
Processing sourcer listing fees and success fees	Contract performance
Sending transactional emails (welcome, receipts, credit alerts)	Contract performance
Sending the Anjio Deal Digest newsletter	Consent (opt-in)
Verifying sourcer compliance credentials	Legal obligation / Legitimate interests
Complying with Anti-Money Laundering (AML) obligations	Legal obligation
Analysing platform usage to improve our service	Legitimate interests
Preventing fraud and ensuring platform security	Legitimate interests / Legal obligation
Responding to complaints and member services enquiries	Legitimate interests / Legal obligation

4. Who We Share Your Data With

We do not sell your personal data. We share data only where necessary to operate our service:

• Stripe Inc. — Payment processing. Stripe processes all card payments. Their privacy policy applies to payment data: stripe.com/privacy
• Mailchimp (Intuit Inc.) — Email newsletter distribution for the Anjio Deal Digest. Only email addresses of newsletter subscribers are shared.
• Google LLC — reCAPTCHA for form spam prevention. Google's privacy policy applies.
• Deal Sourcers — When an investor uses a credit to unlock a deal, their name and contact details are shared with the relevant deal sourcer to facilitate the introduction. Investors consent to this at registration.
• HMRC and Regulatory Bodies — Where required by law, including for AML reporting obligations.
• Legal and Professional Advisors — Where necessary to protect Anjio's legal interests.

All third-party processors are required to handle your data in accordance with UK GDPR and are subject to appropriate data processing agreements.

5. International Data Transfers

Some of our service providers (including Stripe and Mailchimp) operate servers in the United States. Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the ICO, or transfers to countries with an adequacy decision.

6. How Long We Keep Your Data

Data Type	Retention Period
Active investor account data	For the duration of your account plus 6 years after closure
Active sourcer account data	For the duration of the account plus 6 years after closure
Transaction records and payment data	7 years (HMRC requirement)
AML identification records	5 years from end of business relationship (legal requirement)
Email marketing data	Until you unsubscribe or withdraw consent
Website usage and analytics data	26 months
Enquiry and support correspondence	3 years

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access — You can request a copy of the personal data we hold about you (Subject Access Request).
• Right to Rectification — You can ask us to correct inaccurate or incomplete data.
• Right to Erasure — You can ask us to delete your data where there is no compelling reason for us to continue processing it.
• Right to Restrict Processing — You can ask us to limit how we use your data in certain circumstances.
• Right to Data Portability — You can ask us to provide your data in a structured, machine-readable format.
• Right to Object — You can object to processing based on legitimate interests, including direct marketing.
• Rights Related to Automated Decision-Making — You have rights where decisions are made about you solely by automated means.

To exercise any of your rights, please contact us at customersupport@anjio.co.uk or write to Jason Barnaby Limited, 124 City Road, London, EC1V 2NX. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

We use cookies and similar tracking technologies on anjio.co.uk. A cookie consent banner is displayed on your first visit. For full information on the cookies we use and how to control them, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• SSL/TLS encryption for all data transmitted to and from anjio.co.uk
• Passwords stored using industry-standard hashing
• Access to personal data restricted to authorised personnel only
• Payment card data handled exclusively by Stripe — we never store card numbers
• Regular security reviews of our platform and third-party processors

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.

10. Children's Data

Anjio is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at customersupport@anjio.co.uk.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered members by email. We encourage you to review this policy periodically.

12. Contact Us