Privacy Policy

Last updated: April 2026

1. Data controller

Bion Strategy Ltd (company number 11672459), trading as RightTo.Rent, is the data controller for your personal data. You can contact us at support@rightto.rent.

2. What data we collect

We collect the following personal data when you use our service:

• Personal details: full name, email address, phone number, postal or correspondence address
• Property details: property address, property type, number of bedrooms, number of tenants, HMO status
• Tenancy details: tenancy type, start date, rent amount, rent frequency, payment method, whether a break clause exists, whether a written tenancy agreement is in place
• Deposit details: deposit amount, date received, date registered, protection scheme used, and scheme reference number
• Compliance information: gas safety certificate status, EICR status and expiry date, smoke alarm status, carbon monoxide alarm status, EPC rating, certificate and expiry date, How to Rent guide service status, complaints procedure status
• Tenant details: tenant names and email addresses
• Pet information: whether a pet has been requested, and if so, pet type, breed, and name
• Advertising information: whether the property is being advertised, and confirmation of bidding compliance
• Free-text additional information: any further details you choose to provide in the open-text field of the intake form
• Payment information: processed by Stripe; we do not store your card details
• Technical data: IP address and browser type, collected automatically via Cloudflare Web Analytics

If you complete the free compliance check but do not purchase a pack, we retain your form data for 30 days to allow you to return and complete your purchase. After this period, unpurchased form data is deleted. You can request deletion at any time by contacting us at support@rightto.rent.

3. Lawful basis for processing

We process your data on the following bases under UK GDPR:

• Contract: To deliver the compliance pack you have purchased.
• Legitimate interests: To improve our service and communicate with you about your order.
• Consent: Where you have opted in to our waitlist or marketing communications.

4. How we use your data

• To prepare and deliver your personalised compliance documents
• To communicate with you about your order
• To notify you when the landlord database registration opens (if you join the waitlist)
• To improve our service through anonymised analytics

5. Data sharing

We share your data only with the following third parties, and only as necessary to deliver our service:

• Stripe: payment processing
• Tally: form data collection
• Cloudflare: website hosting and analytics

We do not sell your data to third parties.

6. Data retention

We retain your personal data for as long as necessary to deliver our service and comply with legal obligations. Order data is retained for six years in line with HMRC requirements. You may request deletion of your data at any time by contacting us.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact support@rightto.rent.

8. Cookies

We use Cloudflare Web Analytics, which does not use cookies and does not track individual users. We do not use any other cookies or tracking technologies.

9. Complaints

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date.