Privacy Policy

Last updated: June 2025. This policy applies to all users of rentedandrated.co.uk and rentedandrated.com.

1. Who we are

Rented & Rated is operated as a sole trader based in London, United Kingdom. We are the data controller for personal data collected through our platform at rentedandrated.co.uk and rentedandrated.com.

You can contact us about data protection matters at: rentedandrated@gmail.com

2. What data we collect

Account data: When you create an account, we collect your email address, full name, and your role (tenant or landlord). This is required to use the platform.

Review data: When you submit a review, we collect the content of your review, star ratings, property address, tenancy dates, and any photos you upload. We also collect any verification documents you upload to support your review — these are stored privately and never shown publicly.

Issue tracker data: When you log a maintenance issue, we collect the issue description, category, severity, dates, property address, and any photos you upload.

Move-In Toolkit data: When you use the Move-In Toolkit, we collect your move-in report data including room checklists, notes, and photos. AI-generated descriptions of your photos are also stored.

Technical data: We collect standard technical data including your IP address, browser type, and pages visited. This is used to operate and improve the platform.

3. How we use your data

We use your personal data to:

• Create and manage your account
• Publish your reviews on landlord profiles (your name is never shown — only your review content and tenancy dates)
• Verify your tenancy before publishing a review
• Calculate and display landlord statistics and transparency scores
• Send you email notifications about your reviews or issues (where you have opted in)
• Moderate content and prevent misuse of the platform
• Respond to legal requests or complaints
• Improve and develop the platform

We do not use your data for advertising, and we do not sell your data to third parties.

4. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

• Contract: Processing your account data and reviews is necessary to provide the service you have signed up for
• Legitimate interests: We have a legitimate interest in moderating content, preventing abuse, and improving the platform
• Legal obligation: We may process data where required to comply with UK law
• Consent: Where we send you optional email notifications, we do so based on your consent which you can withdraw at any time

5. Who we share data with

We share your data with the following third-party services that help us operate the platform:

• Supabase (supabase.com) — our database and file storage provider. Your data is stored on Supabase servers in the EU. Supabase is GDPR compliant.
• Netlify (netlify.com) — our website hosting provider. Netlify processes technical data such as IP addresses in order to serve the website.
• Resend (resend.com) — our email delivery provider, used to send notification emails.
• Anthropic (anthropic.com) — provider of the AI model used in our Move-In Toolkit photo scanner. Photos uploaded for AI scanning are sent to Anthropic's API. Please see Anthropic's privacy policy for details of how they handle this data.

We do not share your personal data with landlords, letting agents, or any other third parties, except where required by law.

6. How long we keep your data

• Account data: Kept for as long as your account is active, plus 12 months after deletion
• Reviews: Kept indefinitely as part of the public record, but anonymised if you delete your account
• Verification documents: Deleted after your review has been verified or rejected (within 90 days)
• Issue tracker data: Kept for as long as your account is active
• Move-In reports: Kept for as long as your account is active
• Technical logs: Kept for up to 90 days

7. Your rights under UK GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, please email us at rentedandrated@gmail.com. We will respond within 30 days.

8. Cookies

We use essential cookies only — these are required for the platform to function (for example, to keep you logged in). We do not use advertising cookies or tracking cookies.

You can disable cookies in your browser settings, but this may affect your ability to use the platform.

9. Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure database access controls, and restricted access to personal data. However, no internet transmission is completely secure and we cannot guarantee the absolute security of your data.

10. Children

Rented & Rated is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of significant changes by email. The date at the top of this page shows when the policy was last updated.

12. Contact & complaints

If you have any questions about this privacy policy or how we handle your data, please contact us at:

Email: rentedandrated@gmail.com
Platform: rentedandrated.co.uk
Location: London, United Kingdom

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.