Last updated 7 September 2026 · IGA Group Ltd
We do not sell your data, we do not run advertising trackers, and the only cookie the site sets is the one that keeps you signed in.
1. Who is responsible
IGA Group Ltd, is the controller of the personal data described here. For anything about your data, write to deals@igadeals.com.
2. What we collect
| Category | What it includes |
|---|---|
| Account | Name, email, password hash, role, sign-in times, email preferences |
| Business identity | Company name, company number, VAT or tax number, registered address, city, country, phone, website, authorised signatory and title |
| Verification | Proof of funds documents and the source you declare, and any identity or corporate documents you upload |
| Transactions | Listings you post, access requests, messages, buying briefs, valuations, documents generated and signed |
| Payments | Payment references you quote, transaction hashes, the amounts and dates we confirm, and payout account or wallet details you enter. We do not store card numbers |
| Signature records | For each document you sign: typed name, account email, IP address, approximate country, browser string and timestamp |
| Security | IP addresses and timestamps for sign-ins, failed sign-in attempts, and administrative actions in our audit log |
We do not ask for special category data. Please do not upload documents containing health information, biometric data or anything else of that kind.
3. Why we hold it, and on what legal basis
| Purpose | Basis |
|---|---|
| Running your account and the marketplace | Performance of our contract with you |
| Verifying buyers and holding escrow funds | Contract, and legal obligation under anti-money-laundering and escrow licensing rules |
| Generating and signing transaction documents | Contract, and our legitimate interest in an evidentially sound signature record |
| Fraud prevention, security and our audit log | Legitimate interest in protecting users and client funds, and legal obligation |
| Deal notifications about your own transactions | Contract. These are part of the service and are not marketing |
| Newsletters and new listing alerts | Consent, or legitimate interest where you are an existing user. Withdraw at any time |
| Meeting regulator, tax and accounting requirements | Legal obligation |
4. Who sees it
Other users, only when you choose. A seller sees your name and verification status when you request access, and your full company details appear on documents you both sign. Your brand, domain and operating entity stay hidden from buyers until you approve them.
Appointed brokers. Where a broker is appointed to a listing, they see that listing's confidential material and the parties involved in it. They cannot see other listings, and they cannot see any user's proof of funds or identity documents.
Our service providers. Our hosting provider, the bank or payment infrastructure that holds escrow funds, and the mail provider that delivers our email. They act on our instructions.
Authorities. Regulators, law enforcement, auditors and tax authorities where we are legally required to disclose, including suspicious activity reporting, which we may be prohibited from telling you about.
We do not sell personal data and we do not share it for anyone else's marketing.
5. How long we keep it
| What | Retention |
|---|---|
| Verification records, escrow records and completed transaction documents | 5 years after the relationship ends, as anti-money-laundering rules require |
| Account and profile data | While the account is open, then deleted or anonymised unless retention above applies |
| Signature audit trails on signed documents | Kept with the document, since deleting them would destroy its evidential value |
| Security and administrative audit log | Rolling window of recent events |
| Files you remove from your account or a data room | Hidden from view immediately, retained on file for the audit trail, then deleted with the record they belong to |
| Newsletter records | Until you unsubscribe, plus a record of the unsubscribe so we honour it |
6. Your rights
Where the UK or EU regime applies, you may ask for a copy of your data, correct it, ask us to delete it, object to processing based on legitimate interests, ask us to restrict processing, and receive your data in a portable form.
Two honest limits. We cannot delete records we are legally required to keep for anti-money-laundering purposes until that period expires. And we cannot remove your details or signature record from a document another party has signed, because it forms part of their contract as well as yours.
You can update most of your details yourself under Profile in your account, and change email preferences there or through the unsubscribe link in any newsletter. For anything else write to deals@igadeals.com. We reply within one month.
You may also complain to your local data protection authority.
7. Cookies
The site sets one cookie, a session cookie that keeps you signed in and protects forms against cross-site request forgery. It is strictly necessary, so we do not ask for consent to it, and it expires when your session ends. We run no analytics, advertising or third party tracking scripts.
8. Security
Passwords are stored as hashes, never in readable form. Session cookies are restricted to this site and marked secure over HTTPS. Uploaded documents are stored outside the public web root and are served only to people entitled to see them. Sign-in attempts are rate limited, and administrative actions are recorded in an audit log with the account and IP behind them.
No system is perfectly secure. If a breach affects your data and presents a real risk to you, we will tell you and the relevant authority within the time the law requires.
9. International transfers
Our providers may process data outside your country. Where data leaves the UK or EEA we rely on an adequacy decision or standard contractual clauses.
10. Children
igadeals is for people over 18 conducting business transactions. We do not knowingly collect data about children.
11. Changes
We will post any update here and change the date at the top. Material changes will be emailed to account holders.