Privacy Policy

Last updated: May 2026 · Fortuna Streams Ltd

This policy explains what personal data SourcerPack (operated by Fortuna Streams Ltd, Company No. 14965200, Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London, E14 9NN) collects, why we collect it, and how we use it. We are committed to handling your data lawfully and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

Fortuna Streams Ltd is registered with the Information Commissioner's Office (ICO), registration reference ZC137394, and is a member of The Property Redress Scheme (PRS058448). We operate as a property buying and sourcing business. We are not a regulated financial adviser — if you need advice on your mortgage, debt, or financial position, we will always point you towards the appropriate regulated professional.

1. Who this policy covers

This policy applies to two categories of user:

Sourcers — property professionals who register for a SourcerPack account to create and share deal packs.
Investors — individuals who view a shared deal pack and sign an NDA to access the full property address.

2. Data we collect from sourcers

Email address and password (hashed — we never store your plain-text password)
Company name, full name, phone number, website, and company registration number (provided voluntarily on the setup page)
Logo image and branding preferences
Sourcing fee and VAT registration status
Deal pack content (property details, financial figures, photos) that you enter into the platform

Legal basis: Performance of a contract — this data is necessary to provide the SourcerPack service to you.

3. Data we collect from investors

When an investor signs an NDA to access a deal pack, we collect:

Full name, email address, and company name (if provided)
IP address and browser/device information (user agent) at the time of signing
Timestamp of signing

The IP address and user agent are recorded to establish a verifiable audit trail of the NDA signature. This is necessary to give the NDA legal standing. This data is shared with the sourcer who created the pack.

Legal basis: Legitimate interest — creating an enforceable record of a non-disclosure agreement entered into voluntarily by the investor.

4. How we use your data

To operate your SourcerPack account and generate deal packs
To send transactional emails — NDA confirmation copies to both sourcer and investor
To pre-fill your branding and fee details across packs
To maintain an audit record of NDA signings

We do not use your data for marketing without your explicit consent. We do not sell your data to third parties.

5. Data sharing

We share data only where necessary:

Brevo (Sendinblue) — our email delivery provider, used to send NDA confirmation emails. Data is processed under their data processing agreement.
Stripe — our payment processor. Card data is handled entirely by Stripe and never stored on our servers.
DigitalOcean — our hosting provider. Your data is stored on servers located in the UK/EU.

6. Data retention

Sourcer account data is retained for as long as you hold an active account, plus 12 months after closure.
Deal pack data (including NDA records) is retained for 7 years to satisfy legal and contractual obligations.
If you request deletion, we will remove your personal data within 30 days, subject to any legal retention obligations.

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict processing
Receive your data in a portable format
Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at fortuna.streams@gmail.com. We will respond within 30 days.

8. Cookies

SourcerPack uses a strictly necessary session cookie to keep you logged in. We do not use advertising or analytics cookies. For full details see our Cookie Policy.

9. Security

Passwords are hashed using bcrypt before storage. All data is transmitted over HTTPS. Access to our server is restricted by SSH key authentication. We take reasonable technical and organisational measures to protect your data against unauthorised access.

10. Contact

Data controller: Fortuna Streams Ltd, Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London, E14 9NN
Email: fortuna.streams@gmail.com
Phone: 07760 255 378
ICO Registration: ZC137394 · PRS Membership: PRS058448

If you have a concern about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.