PLACEHOLDER — FOR LEGAL REVIEW. This draft has not been reviewed by a solicitor and must not be relied on.

Privacy notice

Keystone Compliance Ltd ("we") provides Letting Passport. This notice explains how we handle personal data.

Who is the controller

For account data (your name, email, billing details) we are the controller. For data you upload about properties, landlords and tenants, the letting agent or landlord using Letting Passport is the controller and we act as their processor. [TODO: confirm roles; ICO registration number.]

What we collect

Account details: name, email address, password hash, organisation.
Property data: addresses, landlord names and emails, compliance dates, uploaded certificates.
Billing data via Stripe; we do not store card numbers.
Technical logs: IP address, browser, error reports.

Sub-processors

Railway (hosting, EU/US — TODO confirm region), Stripe (payments), Resend (email), OpenRouter and the model provider it routes to (certificate reading), Cloudflare (DNS/CDN), Sentry (errors, optional).

Retention

[TODO: retention periods for certificates, audit logs and closed accounts.]

Your rights

You can ask for access, correction or deletion by emailing support@lettingpassport.co.uk. You can complain to the ICO.