Privacy Notice

Who we are

AutoAcquisitions is a trading name of Reay Smith Property Ltd (Company No. 08774232), which is the data controller for the personal information described here. If you have any question about this notice or your data, get in touch via our contact form.

What we collect

• Contact details - your name, email address and (optionally) phone number, collected through the criteria form on this site, through Stripe when you pay, or through Calendly when you book a call.
• Acquisition criteria - the sectors, size ranges, regions, deal preferences and exclusions you give us so we can match listings to you, plus any listings or businesses you tell us you have already seen or own.
• Payment records - payments are handled entirely by Stripe. We never see or store your card details; we receive only confirmation of payment, the product purchased and your billing contact details.

This website sets no cookies and runs no analytics or tracking of any kind.

Why we use it

We use this information to deliver the service you have bought - matching business-for-sale listings to your criteria, sending you your reports, taking payment and arranging any calls you book. The lawful basis is performance of a contract with you. Where we keep records after the service ends (for example invoicing records), the basis is our legal obligations and legitimate interests in running the business properly.

We do not sell your data, share it with third parties for marketing, or use it for any purpose beyond delivering the service.

If we have contacted you

If you are a business buyer we have approached on LinkedIn or by email, we hold your name, your role and company, your public LinkedIn profile address, any email address you have published or given us, what we have sent you, and anything you tell us in reply, such as your acquisition criteria. We took these from your public LinkedIn profile or from your messages to us.

We use them to tell you about the service and, if you ask, to send you a sample or a free report on your criteria. The lawful basis is our legitimate interests in telling people who are publicly looking to buy a business about a service built for that. We only email you unprompted at a company address, and every such email tells you how to stop them.

You can ask us to stop at any time, by replying to any message or through our contact form. We will stop straight away and keep only your name and how we contacted you on a do-not-contact list, so that we never contact you again.

Who processes it for us

• Netlify - hosts this website and stores criteria form submissions.
• Stripe - processes payments. Stripe is a data controller in its own right for payment data; see the Stripe privacy policy.
• Calendly - handles call bookings if you choose to book one; see the Calendly privacy policy.
• Google Workspace - email and file storage used to prepare and send your reports and our messages to you.

Some of these providers store data outside the UK. Where they do, transfers are covered by their standard safeguards (UK adequacy decisions or standard contractual clauses).

How long we keep it

• Criteria and report history - kept while you are a client, and deleted within 12 months of your subscription ending (we keep them briefly in case you return, so your dedup history isn't lost).
• Contact and billing records - kept for 6 years after the transaction, as required for tax and accounting purposes.
• Form submissions in Netlify - deleted once transferred into your client file.
• Records of people we have contacted - deleted within 12 months of our last contact if you do not become a client. Do-not-contact entries are kept for as long as we market the service, so that we can honour them.

Your rights

Under UK GDPR you have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to our use of it, and to receive it in a portable format. Contact us via our contact form and we will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.