Privacy notice

Reviewed Rentals (a UK limited company registration is in progress; this page will be updated with the registered company name, number and address once incorporated).

We are the data controller for the personal data described here. You can contact us about anything on this page at hello@reviewedrentals.com.

Waitlist sign-ups. We store your email address, the date you signed up, the exact consent wording you agreed to, and the time you agreed to it. We use this only to email you about the launch of Reviewed Rentals. Lawful basis: consent (UK GDPR Art. 6(1)(a)), backed by the PECR rules on marketing email. You can withdraw consent at any time using the unsubscribe link in any email or the unsubscribe page.

Review verification. When you submit a review we ask for your email address so we can confirm the review is genuine. We do not store your email address in readable form. It is converted to a one-way cryptographic hash and it is that hash we keep, so we can prevent duplicate reviews for the same property and match a later removal request to your review. Your email is never published and never shared with landlords or agents. Lawful basis: legitimate interests (Art. 6(1)(f)) in preventing fraudulent and duplicate reviews.

Review content and photos. The ratings, tags, free-text answers and any photos you upload are published once approved. Please do not include information that identifies you or other individuals. Photos are processed in your browser before upload: they are re-encoded, which removes EXIF metadata such as GPS location, device model and capture timestamps. The original file never leaves your device.

Moderation records. Automated checks for profanity, suspected AI-generated text and unsafe imagery produce flags stored against the review. These are internal only and never published. Lawful basis: legitimate interests in keeping the platform safe and accurate.

Administrator accounts. Our own staff accounts use email, password and two-factor authentication. Lawful basis: legitimate interests in securing the service.

We do not use cookies for advertising or analytics, and we do not track you across other websites. See our cookie notice.

Reviews name the landlord, company or letting agent a tenancy was held with. Where that person is an individual or a sole trader, the review contains their personal data.

Lawful basis: legitimate interests, UK GDPR Art. 6(1)(f). Our legitimate interests assessment is summarised below.

• Purpose. Prospective tenants routinely commit to a home and a deposit with no reliable information about how the landlord behaves. Publishing first-hand tenant experience protects tenants from foreseeable harm and gives good landlords public recognition. There is a clear public interest in transparency in the private rented sector.
• Necessity. The purpose cannot be achieved without identifying who the review is about — an anonymous review of an unnamed landlord has no value to a tenant deciding whether to sign a lease. We publish no more than is needed: the landlord or company name and, where relevant, the property address. We do not publish home addresses of individuals other than the let property, contact details, financial data, or any special category data.
• Balancing. Reviews concern a person's conduct in the course of business as a landlord, not their private or family life, so the expectation of privacy is lower. We reduce the impact through moderation before publication, rules requiring reviews to be honest first-hand experience rather than allegation or abuse, automated profanity and abuse screening, and the takedown, right of reply and rectification process set out in our review policy. On balance we consider our interests and those of tenants are not overridden by the rights of the landlord.

If you are a landlord or agent, you can object to processing (Art. 21), ask us to correct inaccurate information (Art. 16), ask for erasure where the conditions in Art. 17 are met, or exercise a right of reply. The process, and the timescales we work to, are set out in the review policy. We will never disclose a reviewer's identity or email address to you.

• Our hosting and database provider, which stores the data on our behalf inside the platform we build on.
• Our email delivery provider, used to send verification codes and launch updates.
• Automated content and image safety screening services, used to check submissions before publication.
• Law enforcement or regulators, where we are legally required to do so.

We do not sell personal data, and we never will.

• Unverified review submissions and their photos: deleted automatically 24 hours after submission.
• Verification codes: valid for 15 minutes, then deleted by the daily cleanup job.
• Hashed reviewer email records: kept for as long as the review is published, so we can act on a removal request.
• Published reviews and photos: kept until removed under our review policy or at the reviewer's request.
• Waitlist emails: kept until you unsubscribe, or until we no longer need the list, whichever comes first.
• Unfinished review drafts: stored only in your own browser's storage on your device (never sent to us) so you can resume where you left off, and automatically discarded after 30 days.

You have the right to access your data, have it corrected or erased, restrict or object to processing, withdraw consent, and to data portability where it applies. Because reviews are submitted without an account, we identify you by the email address you verified with — please write from that address so we can match the request.

Email hello@reviewedrentals.com. We respond within one month, as required by Art. 12.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.