Privacy Policy
1. Who is responsible for your data
NETWRXSOLUTIONS LIMITED (company number SC502612, registered office 6 Wentworth Crescent, Dundee DD2 3SE) is the data controller for personal data processed through LetReady. This policy explains what we collect, why, who we share it with and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
2. What we collect
- Account details: your name, email address and a one-way hash of your password (we never store the password itself).
- Property records you enter: property addresses, tenancy start dates, rent, facts about the property (for example whether it has gas or is furnished), and the dates, references, providers, notes and document links for certificates, licences and paperwork.
- Billing information: your subscription plan and status, and Stripe identifiers. Card numbers are entered directly with Stripe and never reach our servers.
- Service data: when reminder emails were sent, sign-in sessions, and standard server logs (IP address, browser type, pages requested) kept briefly for security and troubleshooting.
We do not ask for, and you should not enter, personal details about your tenants. The service holds information about you and your properties.
3. Why we use it and our legal basis
- To provide the service you signed up for (storing your records, calculating statuses, showing your dashboard, exporting your data): performance of our contract with you.
- To send reminder emails about upcoming and overdue dates: performance of the contract. You can switch reminders off on your Account page at any time.
- To send account emails such as password resets and important notices about the service, pricing or these terms: performance of the contract and our legitimate interest in running the service securely.
- To take payment and keep tax records: performance of the contract and our legal obligations.
- To keep the service secure and investigate misuse: our legitimate interests.
We do not send marketing emails, sell your data, or use it for advertising or profiling.
4. Who we share it with
We use a small number of service providers who process data on our behalf under contract:
- Vercel hosts the application.
- Turso hosts the database that stores your account and property records.
- Stripe processes subscription payments and issues receipts.
- Resend delivers reminder and account emails.
- Cloudflare provides DNS for our domain.
Some of these providers store or process data outside the United Kingdom, including in the United States and the European Union. Where they do, transfers are protected by the UK adequacy regulations or by the UK International Data Transfer Agreement or Addendum, as applicable. We may also disclose data where the law requires it.
5. How long we keep it
- Account and property records: for as long as your account exists, and for 30 days after you ask us to delete it, so you can change your mind.
- Billing records: six years after the transaction, as required by UK tax law.
- Server logs: up to 30 days.
- Password reset links: one hour, after which they expire.
6. Cookies
LetReady sets one cookie, letready_session, which keeps you signed in. It is strictly necessary for the service and is removed when you sign out or after 30 days. We do not use analytics, advertising or tracking cookies, so no cookie banner is shown.
7. Security
Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Passwords are hashed with scrypt. Access to production systems is restricted to the people who need it to run the service. No system is perfectly secure; if we become aware of a breach that affects you we will tell you and the Information Commissioner's Office as the law requires.
8. Your rights
You have the right to:
- access the personal data we hold about you (the Export page gives you most of it instantly);
- have inaccurate data corrected (you can edit records yourself at any time);
- have your data deleted, subject to the retention periods above;
- object to or restrict processing based on legitimate interests;
- receive your data in a portable format (the CSV export);
- complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how we handle your data. We would appreciate the chance to resolve it first.
To exercise any of these rights, contact us in writing to NETWRXSOLUTIONS LIMITED, 6 Wentworth Crescent, Dundee DD2 3SE.
9. Changes to this policy
If we change how we use your data in a way that affects you, we will email you before the change takes effect. The date at the top shows when this policy was last revised. See also our Terms of Service.