Privacy policy
Last updated 27 September 2026
This notice explains what personal data SuriHousing processes, why, on what legal basis, and for how long. It is written to be read, not clicked past: where something matters to you, it's stated in plain language.
Who processes your data
SuriHousing is a trade name of BlueOceanSolutions B.V., Dutch Chamber of Commerce (KvK) no. 92101550, registered at Duintopstraat 11, 1361 BJ Almere, the Netherlands. BlueOceanSolutions B.V. is the data controller for the data collected through this website: we decide what it's used for and how.
Questions about your data or this notice? Get in touch via the contact option on this site. You'll get a reply within a month.
Browsing listings
You don't need an account to view or search listings. Our server logs technical data that any web server logs, including your IP address, to keep the site running and secure.
Maps are provided by Mapbox, which receives the technical data needed to render the map.
Creating an account
Sign-in runs through Microsoft Entra External ID, using your first name, last name, email address and a password, or a federated sign-in option. At registration you confirm your email address with a one-time code. We do not store passwords ourselves — those are managed by Microsoft Entra.
Enquiring about a property
When you send a message about a property we process your name, email address, phone number (if you give one) and your message, and pass them to the agent or advertiser for that property so they can respond.
We also store your IP address. That is not additional profiling but a measure against abuse of the contact form.
Listings compiled from public sources
Some of the supply on SuriHousing is compiled from publicly available sources, including estate agents' own websites and advertising platforms, without the agent having done anything to be included. This concerns factual information about the property and the contact details that were public in that advertisement.
Contact details of sole traders and small firms are treated as personal data. The basis is legitimate interest: an overview of available housing is only useful if it is complete. We do not copy third parties' photographs or descriptive text.
Want a listing corrected or removed, or want to take it over and manage it yourself? You can — see the two sections below.
Claiming a listing
When you claim a listing we process your name, your role, your email address, your phone number and the company name. We send a one-time code to a contact detail already held against that listing, to check you really are responsible for it; of that contact detail and of the code we keep only a hashed form, not the value itself.
If that isn't possible, you can instead upload supporting evidence — a registration extract or an instruction letter, say — along with a registration number and an explanation. That file is stored encrypted and used only to assess the claim.
For every attempt we record when it happened, through which channel and with what outcome, including your IP address. That is necessary to prevent abuse: a claim gives someone control over another party's listing.
Requesting removal of a listing
When you request removal of a listing we process your email address and your explanation, and verify it with a one-time code as with a claim. We record when the request arrived and when it was resolved, so we can demonstrate that we met the agreed deadline.
Agents: business account and subscription
From agents and advertisers we process: company name, contact person, email address, phone number, registration number, address, website, a logo and a business description. Most of this appears on your public profile — that is its purpose.
Subscription payments are handled by Stripe. We do not store card details ourselves — Stripe processes and stores those. What we do store: your Stripe customer ID, which subscription you hold and its status.
Photographs you upload for a property are converted to a web format by us and kept in our storage.
Chatbot
Your question to the chatbot is sent to our search-and-answer service so it can respond. If you're signed in, we also send your name and email address. Don't type anything into it you don't want to share; a chat window invites sharing more than is needed.
On what legal basis
Consent (Art. 6(1)(a) GDPR) — for analytics cookies. You may withdraw consent at any time.
Performance of a contract (sub b) — for your account and, for agents, the subscription.
Legitimate interest (sub f) — for security and abuse prevention, for compiling the housing overview from public sources, and for logging claim and removal attempts.
Legal obligation (sub c) — where the law requires us to retain something, for example for payment-related bookkeeping.
Transfers outside the EEA
Our servers are located in the European Union. Some suppliers are based outside the European Economic Area, for example in the United States. For those transfers we rely on Standard Contractual Clauses (SCCs) and assess whether they provide sufficient protection in practice.
Your rights
You have the right to access, correct and delete your data, to restrict or object to certain processing, and to receive a copy of data you provided yourself. Data held against a resolved claim is redacted after a period; what remains is the fact that the claim happened, not who made it.
To exercise any of these rights, get in touch; you'll get a reply within a month. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes to this notice
We may update this notice, for example when we add a feature that processes personal data. The date at the top of this page shows when it was last updated.