Privacy policy
Last updated 5 October 2026
Draft. Lawful Let is still being built. This page will be reviewed by a solicitor before launch.
Who we are
Lawful Let is run by [business name], [business address]. We are the controller of the personal information described here. Contact us at [contact email].
What we collect
- Your account: your email address, and your choices in Settings.
- Your landlord details: your name, contact address and phone number, if you give them. These are used on your documents and for reminders.
- Your properties: addresses, rent, dates, and your tenants' names.
- Payments: which plan you are on and whether it is paid. Your card details go straight to Stripe. We never see them.
- Security: when you sign in, sign up or reset a password, we keep a scrambled record of your internet address for up to an hour. It is used only to stop robots guessing passwords.
- Activity: a simple log of actions, such as "added a property", and any messages you send us.
Why we use it, and our lawful basis
- To provide the service you signed up for. This is needed for our contract with you.
- To take payment and keep records of it. This is needed for our contract with you and to meet legal duties.
- To keep the service secure and working, and to answer your messages. We have a legitimate interest in running the service properly.
- To understand how the site is used, only if you allow optional cookies. This is based on your consent.
Your tenants' details
You decide which tenant details to enter and why. For that information you are the controller and we act on your instructions. We only use it to provide the service to you.
Who we share it with
We use these companies to run Lawful Let. They only handle information as needed to provide their service:
- Cloudflare: hosts the website and its database.
- Stripe: takes payments.
- Resend: sends emails, once email is switched on.
- Twilio: sends text reminders, if you choose them, once they are switched on.
We do not sell your information. We will share it if the law requires us to.
Some of these companies may handle information outside the UK. Where they do, they use safeguards recognised under UK data protection law.
How long we keep it
We keep your information for as long as you have an account. When you delete your account, your information is deleted from our database. Payment records are kept by Stripe for as long as the law requires.
Cookies
- Necessary: one cookie keeps you signed in. The site cannot work without it, so it is always on. It is set only when you sign in.
- Optional: cookies that measure how the site is used. These are off unless you allow them. You can change your choice at any time in Settings. Lawful Let does not use any optional cookies at present.
Your rights
You have the right to ask for a copy of your information, to have mistakes put right, to have it deleted, to limit or object to how we use it, and to have it moved to another service. You can delete your account yourself in Settings. For anything else, contact us.
We do not make decisions about you by computer alone.
How to complain
Please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.