1.Who We Are
RentersRightsAct.info is operated as an independent information hub providing guidance on the Renters' Rights Act 2025 in England. We are the data controller responsible for your personal data collected through this website.
Website: www.rentersrightsact.info
Email: support@rentersrightsact.info
Data Controller: RentersRightsAct.info
We are registered with the Information Commissioner's Office (ICO) as a data controller. ICO registration reference: ZC113761. If you have any questions about how we handle your personal data, please contact us at support@rentersrightsact.info.
2.What Personal Data We Collect
2.1 Data You Provide During Registration
When you create a free account on RentersRightsAct.info we collect the following information:
- Full name
- Home address (street address, town/city, postcode)
- Email address (verified via one-time passcode)
- Telephone number (optional, not verified)
- Registration date and time
- Unique member number
2.2 Data Collected Automatically
When you visit our website we may automatically collect certain technical information including:
- IP address
- Browser type and version
- Device type (desktop, mobile, tablet)
- Pages visited and time spent on each page
- Referring website or search term
- Cookies and similar tracking technologies (see Section 8)
2.3 Data From Your Use of Our Services
When you use our tools and services we may collect:
- Compliance checklist progress and completion status
- AI Comply conversation history (stored locally in your browser) and daily usage count (stored on our servers per user)
- Compliance checklist progress (stored on our servers per user)
- Billing address and phone number (collected via Stripe during Landlord Pro checkout, stored in our database)
- Podcast notification preferences
- Email notification preferences
- Blog and content interaction data
3.How We Use Your Personal Data
We use your personal data only for the purposes described below. We will never use your data in a way that is incompatible with these purposes without first obtaining your consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and verification | Name, email, address, phone (optional) | Contract performance |
| Sending verification codes | Email address | Contract performance |
| Sending law update alerts and newsletters | Email address, preferences | Legitimate interests / Consent |
| Personalising your experience | Name, checklist progress | Contract performance |
| Improving our website and services | Usage data, analytics | Legitimate interests |
| Complying with legal obligations | All data as required | Legal obligation |
| Sending podcast notifications | Email address | Consent |
| Future subscription billing | Email, name, payment data | Contract performance |
4.Who We Share Your Data With
We do not sell, rent or trade your personal data with any third party. We only share your data with the following trusted service providers who help us operate the website, and only to the extent necessary:
Vercel Inc — Website hosting and deployment (servers based in the EU/US)
Resend Inc — Transactional email delivery (verification codes and account emails)
Anthropic PBC — AI Comply responses — your questions are processed by Anthropic's Claude API as a data sub-processor. Anthropic does not use API inputs to train its models and retains data for a maximum of 30 days for safety monitoring purposes only. You should not include personal information about third parties (such as tenant names, addresses or financial details) in your questions. For more information see Anthropic's privacy policy at anthropic.com/privacy.
Supabase Inc — Database storage (when implemented for user data storage)
Stripe Inc — Payment processing, billing address collection and phone number collection for Landlord Pro subscriptions
The platform's document generators require you to enter tenancy details such as names, addresses and financial information. This information is sent to Anthropic's API solely to generate your document and is not stored in our database. Anthropic processes this data as a sub-processor under our Data Processing Agreement and does not retain it beyond 30 days. You should only enter data for which you have a lawful basis to process under UK GDPR.
All third party processors are contractually bound to handle your data securely and only for the purposes we specify. We require all processors to maintain appropriate technical and organisational security measures.
5.How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes described in this policy:
When your account is deleted we will remove or anonymise your personal data within 30 days, except where we are required to retain it by law.
6.Your Rights Under UK GDPR
Under UK GDPR you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@rentersrightsact.info:
Right of access — You can request a copy of all personal data we hold about you.
Right to rectification — You can ask us to correct any inaccurate data we hold about you.
Right to erasure — You can ask us to delete your personal data in certain circumstances.
Right to restrict processing — You can ask us to limit how we use your data.
Right to data portability — You can request your data in a structured, machine-readable format.
Right to object — You can object to processing based on legitimate interests.
Right to withdraw consent — Where processing is based on consent you can withdraw it at any time.
Right to complain — You have the right to lodge a complaint with the ICO at ico.org.uk.
We will respond to all data subject requests within 30 days. There is no charge for making a request.
7.How We Protect Your Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction. These measures include:
- All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
- Verification codes are signed using HMAC-SHA256 and expire after 10 minutes
- Passwords (when implemented) will be hashed using industry standard algorithms
- Access to personal data is restricted to authorised personnel only
- Regular security reviews of our systems and processes
- All third party processors are required to maintain appropriate security standards
8.Cookies
Our website uses only essential cookies required for the site to function. We do not use analytics cookies, advertising cookies or tracking pixels. No cookie consent banner is required as we only set strictly necessary cookies under UK GDPR.
Essential cookies
Supabase authentication session cookies — required for login, registration, and access to protected features. These are set automatically when you log in and removed when you log out.
We also use browser localStorage to cache your AI Comply conversation history, checklist progress and display preferences. This data stays in your browser and is not sent to our servers (except where explicitly noted, such as checklist progress and AI usage tracking for logged-in users).
9.Children's Privacy
RentersRightsAct.info is not intended for use by children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child please contact us immediately at support@rentersrightsact.info and we will delete it promptly.
10.International Data Transfers
Some of our third party service providers are based outside the UK and European Economic Area. Where we transfer your data internationally we ensure appropriate safeguards are in place including:
- Standard Contractual Clauses approved by the ICO
- Transfers to countries with UK adequacy decisions
- Binding Corporate Rules where applicable
11.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify registered users of any significant changes by email. The date at the top of this policy indicates when it was last updated.
Your continued use of our website after any changes constitutes your acceptance of the updated policy.
12.Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data please contact us:
Information Commissioner's Office
Websiteico.org.uk
Telephone0303 123 1113
AddressWycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF