Privacy Policy

1. Who we are and how to contact us

Bloc is a property deal CRM platform for UK estate agencies, lettings agents, deal sourcers, and property professionals. We are the data controller for personal data processed through our website (bloc.matchouse.com) and our application platform.

2. What data we collect

We collect personal data in the following categories:

3. How and why we use your data

4. WhatsApp and communication integrations

Bloc supports WhatsApp Business messaging via the WhatsApp Business API. When you connect your WhatsApp number:

• Messages sent and received through Bloc are stored in your workspace to provide conversation history and activity tracking.
• Message content is accessible to all workspace members with the relevant permission level.
• You are responsible for ensuring that contacts whose numbers are stored in Bloc have consented to receive WhatsApp messages from your business.
• Bloc does not sell or share WhatsApp message content with any third party, except where required by law.
• WhatsApp message templates used on Bloc must comply with Meta's WhatsApp Business Policy.

5. Email and calendar integrations

When you connect Google Workspace, Microsoft 365, or another email or calendar provider, Bloc accesses only the scopes you explicitly authorise. We use these to sync calendar events, send emails on your behalf, and display inbox threads linked to CRM contacts. We do not scan your inbox for advertising purposes, share your email content with third parties, or retain email content beyond what is needed to populate your CRM activity feed.

You can revoke access to any connected account at any time from your workspace settings. Revoking access will stop future syncing but will not delete activity already recorded in the CRM.

6. AI features and automated processing

Bloc uses AI to power features including lead scoring, message drafting suggestions, and property-deal matching. These features process data you have entered into Bloc. Where AI processing produces a decision or recommendation that significantly affects a data subject, you can request human review of that decision.

AI features may rely on third-party providers (such as OpenAI or Anthropic). Data sent to these providers is processed under Data Processing Agreements and is not used to train their foundation models. No personal data is sent to AI providers unless it is directly required by a feature you have explicitly used.

7. The Matchouse ecosystem

Bloc is part of the Matchouse ecosystem. If you use both Matchouse and Bloc with the same account, certain profile data (such as your agency name, contact details, and listings) may be shared between the platforms to provide a connected experience. You can control data sharing between Matchouse and Bloc from your account settings.

Matchouse operates its own Privacy Policy governing data processed on the Matchouse marketplace. This Bloc Privacy Policy governs data processed specifically by the Bloc platform.

8. Who we share your data with

We do not sell your personal data. We share data with third parties only as described below:

9. International transfers

Bloc stores your data in UK-based data centres. Some third-party providers (such as OpenAI) are based in the United States. Where data is transferred outside the UK, we ensure appropriate safeguards are in place including UK-approved Standard Contractual Clauses or an adequacy decision by the UK Government.

10. How long we keep your data

11. Your rights under UK GDPR

You have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month.

12. Cookies

Bloc uses cookies and similar technologies on its website and application. For full details of the cookies we set, their purpose, duration, and how to manage your preferences, please see our Cookie Policy. You can also update your preferences at any time using the button below.

13. Data security

We use industry-standard security measures including AES-256 encryption at rest, TLS 1.3 for data in transit, bcrypt password hashing, role-based access controls, and regular third-party penetration testing. Despite these measures, no system is completely secure. In the unlikely event of a data breach that risks your rights and freedoms, we will notify you and the ICO within 72 hours as required by law.

14. Complaints

If you are unhappy with how we handle your personal data, please contact us first at [email protected] and we will do our best to resolve your concern.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by displaying a notice in the Bloc platform. The date at the top of this page indicates when the policy was last updated. Continued use of Bloc after notification of a material change constitutes acceptance of the updated policy.