Mullion
Privacy policy
Last updated: 3 October 2026
Who we are
Mullion (“we”, “us”) is an AI-assisted property search service operated by [legal name / company name and number], [registered address]. We are the data controller for the personal information described in this policy. You can contact us through our contact page.
What information we collect
Information you give us
- Account details: your name, email address, password (stored encrypted) and contact preferences.
- Search preferences: your property requirements, such as location, budget, number of bedrooms and must-have features, plus your saved searches and shortlists.
- Subscription and billing details: your billing name, billing address, subscription plan and payment history. Card payments are handled by our payment provider, [Stripe]. We never see or store your full card details.
- Messages: anything you send us, including support requests and feedback.
Information collected automatically
- Usage data: pages visited, features used, searches made, and device and browser type.
- Technical data: IP address, log data, and the cookies described below.
Sensitive information
Some property requirements, such as step-free access or adaptations, may reveal information about your health. You don’t have to give us this information. If you do, we only use it to match you with suitable properties, and we will ask for your explicit consent first.
How we use your information
| Purpose | Lawful basis |
|---|---|
| Creating and running your account | Contract |
| Searching for and shortlisting properties for you | Contract |
| AI analysis of listings you have shortlisted | Contract |
| Processing subscription payments | Contract |
| Keeping financial records | Legal obligation |
| Keeping the service secure and preventing fraud | Legitimate interests |
| Improving our service and fixing problems | Legitimate interests |
| Sending service messages (for example, billing or account changes) | Contract |
| Sending marketing emails or property alerts you have opted into | Consent (you can withdraw it at any time) |
AI processing
Mullion uses artificial intelligence to review property listings against your stated requirements and to suggest a shortlist. These suggestions are for guidance only. They do not make legal or similarly significant decisions about you. We do not use your personal data to train AI models. Where a third-party AI provider processes your data for us, they are contractually prohibited from using it for their own purposes.
Who we share your information with
We do not sell your personal information. We share it only with trusted service providers who help us run Mullion:
- Hosting and database: [Supabase]
- Payment processing: [Stripe]
- AI analysis: [Google (Gemini)]
- Email delivery: [provider]
- Analytics: [provider]
We may also disclose information if the law requires us to, or to protect our rights or the safety of our users. We will never pass your details to estate agents unless you ask us to, for example when you request a viewing.
International transfers
Some of our providers may process data outside the UK. When they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep your information
- Account and preference data: for as long as your account is active, then deleted within [90 days] of closure.
- Billing and transaction records: 6 years, to meet UK tax and accounting requirements.
- Support messages: [2 years].
- Technical logs: [up to 12 months].
Cookies
We use essential cookies to keep you signed in and keep the site secure. We use analytics cookies only with your consent, and you can change your choice at any time in our cookie policy.
Your rights
Under UK data protection law, you have the right to:
- access a copy of your personal information
- correct inaccurate information
- have your information deleted
- restrict or object to how we use it
- move your data to another service (data portability)
- withdraw your consent at any time
To use any of these rights, get in touch through our contact page. We will respond within one month.
Security
We protect your information with encryption in transit and at rest, access controls, and secure third-party providers. No online service is completely risk-free, so please keep your password secure.
Children
Mullion is not intended for anyone under 18, and we do not knowingly collect their data.
Complaints
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. If we make significant changes, we will tell you by email or through a notice on the site.