1.Who We Are
RentersRightsAct.info is operated as an independent information hub providing guidance on the Renters' Rights Act 2025 in England. We are the data controller responsible for your personal data collected through this website.
Website: www.rentersrightsact.info
Email: support@rentersrightsact.info
Data Controller: RentersRightsAct.info
We are registered with the Information Commissioner's Office (ICO) as a data controller. If you have any questions about how we handle your personal data, please contact us at the email address above.
2.What Personal Data We Collect
2.1 Data You Provide During Registration
When you create a free account on RentersRightsAct.info we collect the following information:
- Full name
- Home address (street address, town/city, postcode)
- Email address (verified via one-time passcode)
- Telephone number (optional, not verified)
- Registration date and time
- Unique member number
2.2 Data Collected Automatically
When you visit our website we may automatically collect certain technical information including:
- IP address
- Browser type and version
- Device type (desktop, mobile, tablet)
- Pages visited and time spent on each page
- Referring website or search term
- Cookies and similar tracking technologies (see Section 8)
2.3 Data From Your Use of Our Services
When you use our tools and services we may collect:
- Compliance checklist progress and completion status
- AI chatbot conversation history (stored locally in your browser, not on our servers)
- Podcast notification preferences
- Email notification preferences
- Blog and content interaction data
3.How We Use Your Personal Data
We use your personal data only for the purposes described below. We will never use your data in a way that is incompatible with these purposes without first obtaining your consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and verification | Name, email, address, phone (optional) | Contract performance |
| Sending verification codes | Email address | Contract performance |
| Sending law update alerts and newsletters | Email address, preferences | Legitimate interests / Consent |
| Personalising your experience | Name, checklist progress | Contract performance |
| Improving our website and services | Usage data, analytics | Legitimate interests |
| Complying with legal obligations | All data as required | Legal obligation |
| Sending podcast notifications | Email address | Consent |
| Future subscription billing | Email, name, payment data | Contract performance |
4.Who We Share Your Data With
We do not sell, rent or trade your personal data with any third party. We only share your data with the following trusted service providers who help us operate the website, and only to the extent necessary:
Vercel Inc — Website hosting and deployment (servers based in the EU/US)
Resend Inc — Transactional email delivery (verification codes and account emails)
Anthropic PBC — AI chatbot responses — your questions are processed by the Claude API. Do not include sensitive personal information in chatbot queries.
Supabase Inc — Database storage (when implemented for user data storage)
Stripe Inc — Payment processing (when Landlord Pro subscription is launched)
All third party processors are contractually bound to handle your data securely and only for the purposes we specify. We require all processors to maintain appropriate technical and organisational security measures.
5.How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes described in this policy:
When your account is deleted we will remove or anonymise your personal data within 30 days, except where we are required to retain it by law.
6.Your Rights Under UK GDPR
Under UK GDPR you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@rentersrightsact.info:
Right of access — You can request a copy of all personal data we hold about you.
Right to rectification — You can ask us to correct any inaccurate data we hold about you.
Right to erasure — You can ask us to delete your personal data in certain circumstances.
Right to restrict processing — You can ask us to limit how we use your data.
Right to data portability — You can request your data in a structured, machine-readable format.
Right to object — You can object to processing based on legitimate interests.
Right to withdraw consent — Where processing is based on consent you can withdraw it at any time.
Right to complain — You have the right to lodge a complaint with the ICO at ico.org.uk.
We will respond to all data subject requests within 30 days. There is no charge for making a request.
7.How We Protect Your Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction. These measures include:
- All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
- Verification codes are signed using HMAC-SHA256 and expire after 10 minutes
- Passwords (when implemented) will be hashed using industry standard algorithms
- Access to personal data is restricted to authorised personnel only
- Regular security reviews of our systems and processes
- All third party processors are required to maintain appropriate security standards
8.Cookies
Our website uses cookies and similar technologies to improve your experience and analyse how the site is used. We use the following types of cookies:
Essential cookies
Required for the website to function (session management, security tokens). These cannot be disabled.
Analytics cookies
Help us understand how visitors use the site (page views, traffic sources). These can be disabled without affecting core functionality.
Preference cookies
Remember your settings and preferences between visits.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website. By continuing to use our website you consent to our use of cookies as described above.
9.Children's Privacy
RentersRightsAct.info is not intended for use by children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child please contact us immediately at support@rentersrightsact.info and we will delete it promptly.
10.International Data Transfers
Some of our third party service providers are based outside the UK and European Economic Area. Where we transfer your data internationally we ensure appropriate safeguards are in place including:
- Standard Contractual Clauses approved by the ICO
- Transfers to countries with UK adequacy decisions
- Binding Corporate Rules where applicable
11.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify registered users of any significant changes by email. The date at the top of this policy indicates when it was last updated.
Your continued use of our website after any changes constitutes your acceptance of the updated policy.
12.Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data please contact us:
Information Commissioner's Office
Websiteico.org.uk
Telephone0303 123 1113
AddressWycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF