Last updated: 18 August 2026
Off-Market is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we may share it with, and the rights you have over it.
This policy applies when you visit off-market.com, join our waitlist, contact us, create or use an Off-Market account or membership, make payments to us, or otherwise interact with our services.
Off-Market is operated by OFF-MARKET DOTCOM LTD, a company registered in England and Wales.
Company number: 14983338
Registered office: 4 Yew Tree Court, Walnut Mews, Sutton, Surrey, SM2 5TL
Privacy contact: privacy@off-market.com
For the purposes of UK data protection law, OFF-MARKET DOTCOM LTD is the data controller for the personal information described in this policy.
We have submitted our registration with the Information Commissioner's Office (ICO). Our formal registration reference will be added once issued.
We only collect personal information that is reasonably necessary to operate, improve and provide our services.
Depending on how you interact with Off-Market, this may include:
Where you join our waitlist, we may also ask business-related questions such as which AML provider your agency currently uses and other information relevant to understanding your agency and potential use of Off-Market.
If you create an account or become a member, we may process information needed to create and administer that account, including your login details, membership status, organisation, subscription plan, account activity and access permissions.
Authentication, membership administration and related customer-management services may be provided using Outseta.
Where you purchase a subscription or other paid service, payment processing is provided by Stripe.
We do not normally receive or store your full payment-card details. Stripe processes payment information directly and may process personal information for payment, fraud-prevention, security and regulatory purposes. Depending on the particular processing activity, Stripe may act as a processor and/or as an independent controller.
We may retain transaction details such as the amount paid, billing status, invoice information, subscription status and payment reference.
If you contact us, we may retain the correspondence and related information so that we can respond to you, manage the relationship and maintain appropriate business records.
When you use our website or services, we may automatically receive technical information such as:
This information may be collected using cookies and similar technologies.
We do not intentionally ask users of our public website or waitlist to provide special-category personal data, such as health information, ethnicity, religious beliefs or political opinions.
We may use personal information to:
We do not sell personal information.
Under UK GDPR, we must have a lawful basis for processing personal information.
Depending on the activity, we rely on:
We process information where this is necessary to enter into or perform a contract with you, including creating and administering memberships, providing paid services and managing subscriptions.
We rely on consent where you have actively opted in, for example to receive certain marketing communications or to allow non-essential cookies.
You can withdraw consent at any time.
We may process information where this is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
This may include responding to business enquiries, developing and improving Off-Market, understanding interest in our services, maintaining security and communicating with business contacts.
We process personal information where necessary to comply with legal, regulatory, tax, accounting or other statutory obligations.
If you join our waitlist, request updates or otherwise consent to hear from us, we may send information about Off-Market, including launch updates, product information and relevant offers.
You can unsubscribe at any time using the unsubscribe link in our emails or by contacting privacy@off-market.com.
Withdrawing consent for marketing does not affect other processing we may need to carry out, such as administering an existing membership or retaining legally required records.
Our website may use cookies and similar technologies.
Some cookies are strictly necessary for the website and services to function. Other cookies may be used for functionality, analytics or performance.
Where consent is legally required before non-essential cookies are placed, we will ask for that consent.
Further details about the cookies we use and how to manage your preferences are available in our Cookie Policy.
We may share personal information with trusted third parties where necessary to operate our business and provide our services.
These may include:
Our current or planned service providers include:
Outseta describes itself as using service providers to process information in support of its services.
We may also use additional technology providers involved in operating the Off-Market platform. Where appropriate, we describe these by category rather than publishing our full technology architecture.
We do not share your information with third parties for their own unrelated marketing.
Some of our service providers may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that it receives protection consistent with UK data protection law.
Depending on the destination and provider, these safeguards may include:
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, regulatory and reporting requirements.
The exact retention period depends on the type of information and why we hold it. Where we do not use a fixed retention period, we consider factors including:
The ICO permits organisations to explain the criteria used to determine retention where a specific period is not available.
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.
These measures include access controls and the use of reputable service providers with appropriate security measures.
However, no method of transmitting or storing information electronically is completely secure, and we cannot guarantee absolute security.
Depending on the circumstances and the lawful basis we rely on, you may have rights including:
These rights are set out under UK data protection law and do not apply identically in every situation.
To exercise your rights, contact privacy@off-market.com.
We will respond in accordance with applicable data protection law.
You have the right to object at any time to the use of your personal information for direct marketing.
You may also have the right to object where we rely on legitimate interests, depending on the circumstances.
The ICO requires the right to object to be brought clearly and separately to people's attention.
If you have concerns about how we handle your personal information, please contact us first at privacy@off-market.com and we will try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator.
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or how we process personal information.
The latest version will always be published on this page, together with the date it was last updated.
The ICO recommends reviewing and updating privacy information when processing activities change.
For questions about this Privacy Policy or how we use your personal information, contact:
OFF-MARKET DOTCOM LTD
Company number: 14983338
4 Yew Tree Court
Walnut Mews
Sutton
Surrey
SM2 5TL
Email: privacy@off-market.com