1. Who we are
Bloc CRM is a product of Percy Real Estate Ltd, trading as Matchouse, which also operates the Matchouse marketplace. In this policy, “we”, “us” and “our” mean that company.
We are registered in England and Wales under company number 15525233, and our registered office is 25 Cabot Square, London, England, E14 4QZ. You can reach us about anything in this policy at legal@matchouse.com.
This policy covers this website and the Bloc CRM application. Because Bloc CRM and Matchouse are run by the same company, the Matchouse privacy policy covers the marketplace side, and the two are written to be read together rather than to contradict each other.
2. Controller and processor
There are two distinct relationships here, and it matters which one applies to a given piece of data.
- We are the controller for personal data about you as our customer: your account, your billing details, your use of this website, and the messages you send us.
- We are a processor for the personal data you put into your workspace: your leads, contacts, deals, emails, notes and call recordings. That data is yours. You decide what goes in, what it is used for, and when it is deleted. We process it on your instructions and to provide the service.
Where we act as a processor, our data processing terms form part of your agreement with us and set out our obligations in detail.
3. What we collect
Information you give us. Your name, work email address, telephone number, business name and role when you create an account; billing details when you subscribe; and anything you write to us in support conversations.
Information created by using the service. Sign-in times, the workspace you are active in, actions taken within the application, device and browser type, and IP address. We use this to keep the service running, secure and diagnosable.
Information from this website. Pages viewed and approximate country. We only collect this where you have given consent for analytics. See the cookie policy.
Information you put into your workspace. Leads, contacts, deals, notes, emails, tasks, calendar entries and call recordings. We do not use this content to advertise to you, and we do not sell it.
4. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Provide the service you have signed up for | Performance of a contract |
| Take payment and keep accounting records | Contract, and legal obligation |
| Keep the service secure and prevent abuse | Legitimate interests |
| Diagnose faults and improve how the product works | Legitimate interests |
| Send service messages about your account | Contract |
| Send marketing about Bloc CRM | Consent, or soft opt-in where permitted |
| Measure website use through analytics | Consent |
| Meet legal, tax and regulatory obligations | Legal obligation |
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we can share that assessment on request.
5. Business contact data in your workspace
Bloc CRM finds business contact details from sources including the Matchouse directory, OpenStreetMap, Companies House and businesses’ own websites. These are details published so that businesses can be contacted about work.
Some of that data is still personal data, a named person’s work email address, for example. Where it lands in your workspace, you are the controller of it. That carries real obligations, and we build the product to help you meet them:
- Every record carries the source it came from and the date it was collected, so you can answer a question about provenance.
- Verification status is stored against each channel, so you can show that a detail was checked rather than guessed.
- Records can be deleted or exported individually or in bulk at any time.
Contacting those businesses remains subject to the UK GDPR and the Privacy and Electronic Communications Regulations. Marketing to an individual subscriber or a sole trader, in particular, generally needs consent. That responsibility sits with you as the sender, and we would strongly encourage you to take it seriously.
6. Calls, recordings and transcripts
Where you use call intelligence, calls made through a connected telephony provider may be recorded and transcribed, and a summary generated from the transcript.
- An announcement can be played at the start of every call telling the other party that it is being recorded. It is on by default, and we recommend leaving it on.
- Recordings and transcripts are stored inside your workspace and are visible only to members of that workspace.
- Retention is set by you per workspace and defaults to 90 days. When the period ends, the audio and the transcript are deleted together.
- The telephony provider you connect processes the call itself under its own terms; we receive the recording and the metadata.
Recording a call and then sharing it, including with colleagues, generally requires the other party to have been informed. As the person making the call, that is your responsibility.
7. Sharing within the Matchouse ecosystem
Matchouse and Bloc CRM are operated by the same company but are separate services with separate purposes, and data does not simply flow between them.
- Where you have listed your business on Matchouse and connected it to a Bloc CRM workspace, enquiries raised for your business are passed into that workspace as leads. That transfer happens because you asked for it.
- An enquiry passed to your workspace is visible only within your workspace. Other businesses in the ecosystem cannot see it.
- Outcomes you record, such as a job completed, may be reflected in your standing on Matchouse. The content of your pipeline is not.
- We do not use the contents of your Bloc CRM workspace to market to your customers.
9. International transfers
The service is hosted in the United Kingdom and the European Economic Area. Some of our providers process data outside those areas. Where that happens, the transfer is covered by UK adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards the transfer requires.
10. How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | While the account is open, then 12 months |
| Workspace content (leads, deals, email, notes) | Until you delete it, or 90 days after the workspace is closed |
| Call recordings and transcripts | The retention period you set, 90 days by default |
| Billing and tax records | 7 years, as required by law |
| Security and access logs | 12 months |
| Support conversations | 3 years |
| Website analytics | 14 months, and only with consent |
11. How we protect it
- Data is encrypted in transit and at rest.
- Each workspace is a hard isolation boundary. A signed-in session reaches only the workspace it is currently in, including in searches, exports, shared views and anything running in the background.
- Access by our own staff is restricted to what is needed to run and support the service, and is logged.
- Backups are taken regularly and restoration is tested.
- We will tell you and, where required, the Information Commissioner's Office without undue delay if a breach affects your data.
12. Your rights
Under the UK GDPR you have the right to:
- Be told what personal data we hold about you, and get a copy of it.
- Have inaccurate data corrected.
- Have data erased, where there is no overriding reason for us to keep it.
- Restrict or object to how we use it, including objecting to processing based on legitimate interests.
- Receive data you gave us in a portable format.
- Withdraw consent at any time, where we rely on consent, including for cookies, through the
You can change your cookie choices at any time on the cookie settings page, and withdraw marketing consent using the unsubscribe link in any marketing email.
To exercise any of these rights, write to legal@matchouse.com. We will respond within one month. Where the request concerns data held in a customer’s workspace, we will pass it to that customer, who is the controller of it.
13. Children
Bloc CRM is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have, tell us and we will delete it.
14. Changes to this policy
We update this policy when the service or the law changes. The review date at the top of this page always reflects the current version. Where a change materially affects how we use your data, we will tell you directly rather than relying on you noticing.
This version was last reviewed on 8 August 2026.
15. Contact and complaints
Write to legal@matchouse.com, or by post to Percy Real Estate Ltd, 25 Cabot Square, London, England, E14 4QZ.
If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first so we can put it right.