Privacy Policy

1. Who We Are

SocialRent ("we", "us", "our") operates the SocialRent platform at socialletuk.com. We are a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We take your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights under applicable data protection law.

For any privacy-related enquiries, contact our Data Protection Officer at: info@socialrent.co.uk

2. Data We Collect

We collect the following categories of personal data:

2.1 Registration Data

• Full name and email address
• Password (stored in encrypted form)
• Account role (landlord or organisation)

2.2 Landlord Data

• Full property address and postcode
• Property details (type, bedrooms, condition, photos)
• Landlord name, phone number, and email address
• Mortgage and insurance information (disclosed voluntarily)
• Financial information such as desired monthly rent

2.3 Organisation Data

• Company name, company number, and organisation type
• Contact name, email address, and phone number
• Target locations and property requirements
• Client group information and care provision details
• Financial stability and compliance information

2.4 Usage and Technical Data

• IP address and browser type
• Pages visited and time spent on the Platform
• Device information
• Log data and error reports

2.5 Payment Data

Payment processing is handled by Stripe. We do not store full card details. We receive transaction confirmation, subscription status, and billing period data from Stripe.

3. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR:

• Contractual necessity: To provide the Platform services, including account management, matching, and subscription billing.
• Legitimate interests: To improve our Platform, prevent fraud, ensure security, and send relevant service updates.
• Legal obligation: To comply with applicable laws, including anti-money laundering and financial regulations.
• Consent: For marketing communications where we have obtained your explicit consent.

4. How We Use Your Data

• To create and manage your Platform account.
• To facilitate the matching process between landlords and organisations.
• To communicate match notifications and Platform updates via email.
• To process subscription payments via Stripe.
• To conduct vetting and verification of users prior to approval.
• To facilitate introductions and meetings between matched parties.
• To comply with legal and regulatory requirements.
• To improve and develop the Platform's features and performance.
• To prevent fraud, abuse, and unauthorised access.

5. Confidentiality Between Parties — How We Protect Your Identity

SocialRent operates strict data minimisation and confidentiality protocols between Landlords and Organisations:

• Landlords will never see an Organisation's name, contact information, or identity unless both parties have agreed to proceed and signed a formal introductory agreement facilitated by SocialRent.
• Organisations will never see a Landlord's name, phone number, full address, or contact details. They may view anonymised property information including photos, postcode area, bedroom count, and property type only.
• Introductions are conducted manually by SocialRent staff who contact each party separately. Contact details are only exchanged after both parties give informed consent and a contract framework is in place.

This intermediary model is fundamental to our service and protects the privacy and commercial interests of all parties.

6. Sharing Your Data

We do not sell your personal data. We may share data with:

• Stripe: For secure payment processing (stripe.com — subject to Stripe's privacy policy).
• Email service providers: To send transactional and notification emails.
• Hosting and infrastructure providers: Who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or regulatory obligation.
• Professional advisors: Including lawyers and accountants, under confidentiality obligations.

All third-party processors are bound by UK GDPR-compliant data processing agreements.

7. Data Retention

• Active accounts: Data is retained for the duration of your account.
• Closed accounts: We retain data for up to 6 years after account closure to comply with legal and tax obligations.
• Property listings: Retained for the subscription period and up to 2 years thereafter for audit purposes.
• Match records: Retained for 6 years following a completed Arrangement.

Data is securely deleted or anonymised once retention periods expire.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your data (subject to legal obligations).
• Right to restriction: To request we limit processing of your data in certain circumstances.
• Right to portability: To receive your data in a machine-readable format.
• Right to object: To object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, to withdraw it at any time.

To exercise any of these rights, contact us at info@socialrent.co.uk. We will respond within 30 days. If you are dissatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use essential cookies to maintain your session and Platform functionality. We may use analytical cookies (where consent is given) to understand how users interact with the Platform. We do not use advertising or tracking cookies.

10. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS).
• Encrypted password storage.
• Role-based access controls restricting staff access to personal data.
• Regular security reviews and access audits.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours as required by UK GDPR.

11. International Transfers

Your data is processed primarily within the United Kingdom. Where data is transferred to third-party processors outside the UK, we ensure appropriate safeguards are in place (such as UK International Data Transfer Agreements or adequacy decisions).

12. Children

Our Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or Platform notification. We encourage you to review this Policy periodically.

14. Contact Us

For any privacy or data protection enquiries:

• Email: info@socialrent.co.uk
• Data Controller: SocialRent
• Supervisory Authority: Information Commissioner's Office (ICO) — ico.org.uk