Privacy Policy

Rent a Place (“we”, “our”, “us”) is a rental property platform connecting renters, landlords, and estate agents in the United Kingdom. Our website is rentaplace.io.

For questions about this policy or your data, contact us at: privacy@rentaplace.io

We collect information you provide directly:

• Account information — name, email address, password (hashed)
• Profile information — phone number, profile photo, role (renter/landlord)
• Property listings — address, photos, description, pricing
• Messages — conversations between renters and landlords
• Documents — tenancy-related files you upload
• Tenancy profile — employment status, income range, right-to-rent details (renters only)

We also collect data automatically:

• Log data — IP address, browser type, pages visited, timestamps
• Usage data — property views, search queries, session duration

• To provide and operate the platform
• To connect renters with landlords
• To send transactional emails (booking confirmations, messages)
• To verify user identity and prevent fraud
• To improve the platform through anonymised analytics
• To comply with legal obligations

We process your data under the following lawful bases:

• Contract — processing necessary to provide the service you signed up for
• Legitimate interests — fraud prevention, platform security, analytics
• Consent — marketing communications (where opted in)
• Legal obligation — compliance with UK law

We do not sell your personal data. We share data only with:

• Cloudinary — image and document hosting
• SendGrid / AWS SES — transactional email delivery
• Vercel — frontend hosting (no personal data stored)
• Law enforcement or regulators, where legally required

We use essential cookies to keep you logged in and to maintain your session. We do not use third-party advertising cookies.

You can manage cookie preferences using the consent banner displayed on your first visit.

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to processing or request restriction
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, email privacy@rentaplace.io. We will respond within 30 days.

We use industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), JWT authentication, and IP-based access controls. We regularly review our security practices.

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy-related queries: privacy@rentaplace.io

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).