Letting

Privacy policy

This policy explains what personal data Letting collects, why, how long we keep it and what rights you have. Last updated: September 2026.

Who we are

Letting (letting.io) operates this website and the Letting property management software. You can reach us about anything in this policy at [email protected].

Two roles

For data about visitors to letting.io and about our own account holders, Letting decides how the data is used. For data that account holders put into Letting about their tenants, owners and contractors, the account holder decides how it is used and Letting processes it on their behalf and on their instructions.

Data we collect

  • Account data: your email address, the number of units you manage, the plan and billing period you chose, and the code we send to confirm your email.
  • Usage data: pages visited, the source that brought you to the site (such as campaign tags and the referring page), your IP address, browser and device type.
  • Portfolio data you enter: properties, units, tenants, leases, bank lines, maintenance requests, inspection photos and notes, owners and statements.
  • Messages you send to [email protected].
  • Billing data: plan, invoices and payment status. Card details are handled by our payment provider and never stored by Letting.

Data the demo uses

The homepage demo reads the rent roll and bank file you paste or upload inside your browser. That data is not sent to us or stored. If you ask the demo to draft a reminder email, the text of that request is sent to our server to produce the draft and is not kept afterwards.

Why we use it

  • To create your account and confirm your email address.
  • To provide the software you pay for, including sending statements and reminders you set up.
  • To bill your plan and keep invoices as the law requires.
  • To answer support requests.
  • To keep the service secure, prevent abuse and fix faults.
  • To send you service emails about your account. We send product news only if you agree, and you can unsubscribe at any time.

Where the GDPR or UK GDPR applies, we rely on the contract with you for providing the service, on legal obligations for billing records, on our legitimate interest in keeping the service secure and understanding how the website is used, and on your consent for optional marketing emails.

Who we share it with

We use service providers for hosting, email delivery, payments and error monitoring. They process data only on our instructions and under agreements that protect it. We do not sell personal data and we do not share it with advertisers.

International transfers

Some providers may process data outside your country. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions or standard contractual clauses.

How long we keep it

  • Unconfirmed signups: deleted after 7 days.
  • Account and portfolio data: for as long as your account is active, then deleted within 90 days after it closes, unless you ask us to delete it sooner.
  • Billing records: for as long as tax law requires.
  • Support emails: up to 2 years after the conversation ends.

How we protect it

Data is encrypted in transit and at rest, backed up daily and accessible only to the people who need it. Read more on the Letting security page.

Your rights

You can ask to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent at any time. Write to [email protected] from the email address on your account. If you are a tenant or owner whose data is kept by a letting agent or landlord using Letting, please contact them first, and we help them answer your request.

Complaints

If you are not happy with how we handled your data, tell us first at [email protected]. You can also complain to your local data protection authority.

Cookies

We use essential cookies to keep you signed in, protect forms from abuse and remember your choices. We do not use advertising cookies.

Changes to this policy

When we change this policy we update the date at the top. If a change affects how we use your data in a significant way, we tell account holders by email before it applies.