Deal Shield privacy notice

1. Who we are

Deal Shield is a browser extension published by Fundsure Ltd, registered in England and Wales (company number 12804657), registered address 3rd Floor, 45 Albemarle Street, Mayfair, London, W1S 4JL, trading as PRS Shield at prs-shield.co.uk. We are registered with the Information Commissioner's Office (ICO reference ZB012773) and are the data controller for any personal data processed through the extension.

Contact us at: support@prs-shield.co.uk

This notice covers the extension only. Use of the PRS Shield platform is covered by our main privacy notice.

2. What the extension stores, and where

The following is held only on your own computer, in the browser's extension storage. It is not transmitted to us and we cannot read it:

• Your appraisal assumptions: mortgage rate, cost percentages, legal fees, cash available, works budgets and saved scenario profiles.
• Your watchlist, including the asking prices you have seen for those listings.
• Any portfolio entries you type in.
• Your settings, including any business name and logo you add for branded deal sheets.

Removing the extension deletes all of it. Nothing in this list is backed up to us or to anyone else.

3. What leaves your browser

To build the appraisal, the extension calls the following services with the minimum data each one needs. None of these requests carries your identity or any account details.

• postcodes.io — the listing's postcode or coordinates, to identify the local authority so the right average-rent and price-growth figures are used. An open-data service.
• HM Land Registry — nearby postcodes, to retrieve registered sold prices and the local house price index. Open Government Licence data.
• planning.data.gov.uk — the listing's coordinates, to check for Article 4 directions and recent planning applications nearby. Open data.
• Our own server at prs-shield.co.uk — the listing's postcode, to look up Energy Performance Certificates on the government's open EPC register; and, only when you press “Read the certificate”, the EPC certificate image from the listing page so its rating can be read. These requests are rate-limited and are not logged against any user identity.
• rightmove.co.uk — for listings you have added to your watchlist, your own browser re-fetches the listing page once a day to read the current asking price and spot reductions. That check runs locally; we never receive the result.

We receive no account, no email address and no browsing history. We do not know which properties you look at.

4. Reading the page you are viewing

The extension reads the property listing you have opened — price, address, bedrooms, tenure, floor area and the EPC graphic — in order to do the one thing it exists to do: appraise that property. This happens entirely inside your browser, on pages you have chosen to visit. It is not transmitted to us, and nothing is stored beyond the asking price of listings you deliberately add to your watchlist.

5. AI processing

The “Read the certificate” feature sends the listing's public EPC certificate image to our server, which uses Anthropic's Claude API to read the energy rating from it. The image is a public document published with the property advertisement and contains no personal data. It is processed in the moment and is not retained by us, and it is not used to train any model.

6. Payments

Paid plans, when offered, are handled by ExtensionPay and Stripe. If you subscribe you give your email address and payment details directly to them on their own pages; we never see your card details. Their privacy notices apply to that data: extensionpay.com/privacy and stripe.com/privacy. The extension checks your subscription status using an anonymous installation identifier.

7. Lender introductions

If you ask us to introduce you to a lender, you complete a form on fundsure.co.uk. The details you enter there are held by Fundsure Ltd and shared with the panel lenders you are introduced to, as described on that page and with your consent. Nothing is sent to us unless you submit that form, and the extension never sends your appraisal figures with it.

8. Legal basis and your rights

Where the extension processes anything that could identify you, our lawful basis is our legitimate interest in providing the tool you have installed, or your consent where you have given it. In practice we hold almost nothing: unless you subscribe or submit an introduction request, we hold no personal data about you at all.

Under UK GDPR you have the right to access, correct, erase or restrict the use of personal data we hold about you, to object to processing, and to complain to the Information Commissioner's Office. To exercise any of these, contact support@prs-shield.co.uk.

9. What we never do

• We do not sell or rent your data to anyone.
• We do not transfer your data to third parties for purposes unrelated to the extension's single purpose.
• We do not use your data to determine creditworthiness or for lending decisions.
• We do not run advertising or tracking in the extension.

10. Changes

We will update this page if the extension's data handling changes, and material changes will be noted in the extension's update notes. The date at the top shows when it was last revised.