Privacy Policy

Last updated: 10 June 2026

1. Who we are

LetTrack Ltd is the data controller for personal data you provide when creating an account. For personal data about tenants that you upload, we act as your data processor under the UK GDPR.

2. Data we collect

Account data: name, email, password hash, organisation name, role
Property data: addresses, compliance documents, inspection records
Tenant data: name, email, tenancy dates, rent amounts (uploaded by landlord/agent)
Usage data: log data, IP addresses, browser type (for security and analytics)

3. How we use your data

We use your data to: (a) provide the LetTrack service; (b) send transactional emails (e.g. invite links, compliance alerts); (c) improve the platform; (d) comply with our legal obligations.

4. Your rights

Under UK GDPR you have the right to: access your data, correct inaccurate data, erase your data (subject to legal retention obligations), restrict processing, portability, and to object to processing. Submit requests to privacy@lettrack.co.uk.

5. Data retention

Account data is retained for the duration of your subscription plus 30 days. Compliance documents may be retained for up to 6 years for legal compliance purposes. Audit logs are retained for 2 years.

6. Third parties

Supabase — database, authentication and file storage (hosted in the EU, AWS Ireland)
Vercel — application hosting
Resend — transactional email delivery
Stripe — payment processing
Sentry — error monitoring (anonymised where possible)
Google — “Sign in with Google” authentication (only if you choose it), and Google Analytics for website usage analytics (only if you accept analytics cookies)

7. Security

All data is encrypted in transit (TLS) and at rest. Row-level security is enforced at the database level. Documents are served via time-limited signed URLs only.

8. Cookies

See our Cookie Policy.

9. Contact

Data protection queries: privacy@lettrack.co.uk · ICO registration number: [pending] · DPO: [to be appointed before launch]