Privacy and cookies
Cornerlot needs very little about you: an email address, a password and what you're looking for. This notice explains what we keep, why, who else handles it and how to have it deleted.
Who is responsible for your data
Origin Collective Limited (company number 16566341, registered office 124-128 City Road, London, EC1V 2NX) runs Cornerlot and is the controller of your personal data under the UK GDPR and the Data Protection Act 2018. Contact us about anything in this notice at hello@getcornerlot.com.
What we collect
- Your account: your email address and a securely hashed password. We never store the password itself.
- Your searches: the briefs you write, the filters we read from them, and the lots you save, track or add notes to.
- Your settings: whether the morning email is on, and your time zone so it arrives at 7am.
- Payments: when payments open, Stripe handles your card. We receive confirmation that you've paid, the amount and a reference, never your card number.
- Emails we send you: a copy of each email (sign-in links, confirmations, morning digests) so we can show what was sent and fix problems.
- Feedback: anything you send us through the feedback form, with the page you sent it from.
- Basic technical data: the minimum our server needs to run securely, such as IP addresses in error and security logs.
The auction lots on Cornerlot come from auction houses' public catalogues. They describe properties, not people, though a listing may name a seller, tenant or receiver as the auction house published it.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Run your account, match lots to your searches, send the morning email and sign-in links | Performing our contract with you |
| Take payment and keep records of it | Contract, and our legal obligations (tax and accounting records) |
| Keep the service secure, stop abuse, fix errors | Our legitimate interest in running a safe, working service |
| Read and reply to your feedback | Our legitimate interest in improving Cornerlot |
We don't sell your data, show you ads, or send marketing emails. The only emails you get are the ones the service itself needs.
Who else handles it
- Hetzner Online GmbH hosts our server and database in Finland, inside the EU.
- Cloudflare, Inc. runs our domain name and sends our emails. Cloudflare is in the US and is certified under the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as giving adequate protection.
- Anthropic provides the AI model that can read briefs and write lot summaries. When it's switched on, the text of your brief is sent to it to be read. Anthropic doesn't use this data to train its models. Lot summaries are written from the auction listing only, never from your data.
- Stripe will process payments once they open, under its own privacy notice.
Each of them handles data only on our instructions and under a data processing agreement.
How long we keep it
- Your account, searches and saved lots: for as long as you have an account. When you ask us to delete it, we delete it within 30 days.
- Copies of emails we've sent you: 12 months.
- Payment records: 6 years after the payment, because the law requires it.
- Database backups: 14 days, after which they're overwritten.
- Server logs: rotated automatically and kept only as long as needed to run and secure the service.
Cookies
We use one cookie, cornerlot_sid, which keeps you signed in. It's strictly necessary for the service to work, so it doesn't need your consent, and it's deleted when you sign out or after 30 days. We don't use analytics, advertising or tracking cookies, so there's no cookie banner.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Email hello@getcornerlot.com and we'll reply within one month. You can switch the morning email off at any time in Settings.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes to this notice
If we change how we use your data, we'll update this page and, for anything significant, email you before the change takes effect.