Privacy & your data
How we look after your information, and the rights you have over it under UK GDPR.
What we collect
To run a tenancy we hold: your account details (email, name), the tenancy records you create (property, tenants, rents, what’s due), and the documents we generate for you. We do not sell your data or use it for advertising.
Where it lives
Your data stays in the United Kingdom. Our servers and database run in London. Signed documents are kept; every action is written down so there is a record of what was done, when, and by whom.
How it is protected
One landlord (or tenant) can never see another’s figures or documents. Passwords are stored only as salted hashes; sessions expire and are purged. Payment card details are never held by LetRight — they are processed by our regulated payment provider. We never hold client money.
Your rights (UK GDPR)
You can export everything we hold about you at any time (Article 15) and request erasure of your personal data (Article 17). Erasure scrubs your identifying information; records we are legally required to keep — the action log, signed documents, and payment records — are retained under the legal-obligation grounds in Article 17(3), and we tell you exactly what was kept and why. Signed-in users can trigger both from their account; we action requests without undue delay.
Contact
For any data question, or to exercise a right by email, contact the account owner at the address on file.
LetRight fills forms and keeps dates. It is not legal advice.