Privacy Policy

First Door is a trading name of Fluid7 Ltd (company number 5826599), registered in England and Wales. Fluid7 Ltd is the data controller responsible for your personal data collected through the First Door website and platform ("we", "us", or "our" refers to Fluid7 Ltd trading as First Door).

Information We Collect

We may collect the following types of information:

• Contact information (name, email address, phone number)
• Account information (company name, subdomain, login credentials)
• Property-related information you enter into the platform (addresses, valuations, compliance records, tenancy details)
• Financial information for subscription payments processed via Stripe
• Usage data and analytics related to your use of the platform
• Technical data when you visit our website (IP address, browser type, device information)
• Information submitted via forms, quizzes, or assessments on our website

How We Use Your Information

We use your personal information to:

• Provide and maintain the First Door platform and services
• Create and manage your account and subscription
• Process payments through our payment provider, Stripe
• Send you service-related communications (account setup, password resets, billing)
• Send marketing communications where you have opted in (you can unsubscribe at any time)
• Improve our services, website, and user experience
• Comply with legal and regulatory requirements

Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: Processing necessary to provide our services to you
• Legitimate interest: Improving our services, fraud prevention, platform security, and collecting anonymised aggregate analytics to understand site usage
• Consent: Marketing emails, quiz/assessment data collection, and non-essential cookies (analytics and advertising)
• Legal obligation: Compliance with tax, accounting, and regulatory requirements

Data Sharing

We do not sell your personal information. We may share data with:

• Stripe: For payment processing (governed by Stripe's privacy policy)
• Kit (ConvertKit): For email marketing where you have opted in (data stored in the US under the UK-US Data Bridge)
• Meta Platforms: For advertising measurement and retargeting via the Meta Pixel (data transferred to the US under the UK-US Data Bridge)
• Xero: For accounting integration where you have connected your account
• Hosting providers: For infrastructure and data storage (EU/UK data centres)
• Legal authorities: Where required by law

International Data Transfers

Some of our third-party service providers are based outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place. Transfers to the United States (for Kit, Meta, and Stripe) are covered by the UK-US Data Bridge, which the UK government has recognised as providing an adequate level of data protection. All other data processing takes place within the UK.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you cancel your subscription, we will retain your data for a reasonable period to allow for reactivation, after which it will be securely deleted. Financial records are retained as required by UK tax law (typically 6 years).

Data Protection

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews. Your data is stored in secure, UK-based data centres. We isolate each customer's data within the platform to prevent cross-tenant access.

Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request that we limit how we use your data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, contact us at privacy@firstdoor.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Analytics and Advertising

We use Google Analytics 4 (via Google Tag Manager) and the Meta (Facebook) Pixel to understand how visitors use our website and to measure the effectiveness of our advertising.

These services load in a restricted mode when you first visit our site, before you make a cookie choice. In this restricted mode:

• Google Analytics sends anonymised, cookieless signals that contain no personal identifiers. Google uses these to produce modelled aggregate data about site usage.
• The Meta Pixel code loads but does not transmit any tracking data or set any cookies until you give consent.
• No advertising or analytics cookies are placed on your device.

If you accept cookies, these services are upgraded to full tracking mode. At that point they may collect:

• Pages you visit on our site and actions you take (e.g. completing a quiz)
• Technical data such as your IP address, browser type, and device information
• Cookie identifiers used for analytics and advertising attribution

Advertising data is sent to Meta Platforms, Inc. (based in the United States) and is processed under the UK-US Data Bridge, which provides an adequate level of data protection as recognised by the UK government. Meta may use this data to show you ads on Facebook and Instagram, and to provide us with aggregated analytics about ad performance.

You can opt out of Meta tracking at any time by adjusting your Facebook ad preferences or by using the cookie settings link in our website footer. If you withdraw consent, any existing tracking cookies are automatically deleted from your device.

Cookies

Our website uses cookies to improve your browsing experience. We categorise cookies as follows:

• Essential cookies: Required for basic site functionality (always active)
• Referral cookies: If you arrive via a partner referral link, we set a cookie (fd_ref) to attribute your visit to the referring partner. This cookie lasts 90 days and is only set with your consent.
• Analytics cookies: Used by Google Analytics to measure site usage and understand visitor behaviour (only with your consent)
• Advertising cookies: Used by the Meta Pixel for ad measurement and retargeting (only with your consent)

Non-essential cookies are only set after you give consent. If you withdraw your consent, any analytics and advertising cookies already on your device are automatically deleted. You can change your cookie preferences at any time using the cookie settings link in our website footer.

Data Controller

The data controller for the purposes of UK GDPR is:

Updates to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We will notify active account holders of significant changes via email.

Last updated: February 2026