Legal

Privacy Policy

How ComplyLetUK collects, uses and protects your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: 28 April 2026 · Effective from: 28 April 2026

1. Who we are

ComplyLetUK ("we", "us", "our") is a landlord compliance and London property management service operating from the United Kingdom. We are the data controller of any personal information you provide to us through this website.

You can reach us at:

• Email: contact@complyletuk.co.uk
• Phone: 01299 575021
• Website: complyletuk.co.uk

2. What we collect

We only collect personal data that you actively give us. Specifically:

When you fill in our enquiry form

• Your name
• Email address
• Phone number (optional)
• Property address (optional)
• The service you're interested in
• Any message or details you choose to include
• Your preferred contact method and time (optional)

When you email or call us

• Your contact details and any information you share in your message or call

Automatically (technical data)

• Basic anonymous traffic information collected by our hosting provider (Netlify) — such as page views and approximate region — used only to keep the site running and secure

We do not use advertising cookies or third-party tracking pixels on this website. We do not collect special category data (e.g. health, religion, ethnicity).

3. Why we use it (lawful basis)

What we do	Lawful basis
Reply to your enquiry and send a confirmation email	Performance of pre-contractual steps at your request (UK GDPR Art. 6(1)(b))
Provide compliance, certificate, licence or property management services you've signed up for	Performance of a contract (UK GDPR Art. 6(1)(b))
Keep records for accounting, tax and legal compliance	Legal obligation (UK GDPR Art. 6(1)(c))
Protect our website from abuse and keep it secure	Legitimate interest (UK GDPR Art. 6(1)(f))
Send occasional service updates or compliance newsletters	Consent — only if you've opted in (UK GDPR Art. 6(1)(a))

4. Who we share it with

We only share your data with carefully chosen service providers ("processors") who help us run our business. They are contractually bound to handle your data securely and only on our instructions. They are:

• Netlify, Inc. — website hosting and form submission storage
• Resend.com — email delivery (used to send your confirmation email and notify our team)
• Our IT, accounting and legal advisors — only where strictly necessary

We may also share data if we are required to do so by law, by a court order, or to protect our legal rights.

We never sell your personal data to third parties. We do not pass it to advertisers, data brokers, or marketers outside our own service.

5. International transfers

Some of our service providers (e.g. Netlify, Resend) are based in the United States. Where personal data is transferred outside the UK, we rely on the UK Government's adequacy decisions, the UK International Data Transfer Agreement (IDTA), or Standard Contractual Clauses to ensure your data has the same protection as it does in the UK.

6. How long we keep it

• Enquiries that don't lead to a contract: up to 12 months, then deleted
• Customer records (active clients): for the duration of our service relationship and 6 years after the relationship ends, in line with HMRC and contract law requirements
• Email correspondence: retained as part of customer records or deleted at your request
• Anonymous website analytics: retained by Netlify for up to 30 days

7. Your rights

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — ask for a copy of the data we hold about you
• Right to rectification — ask us to correct anything inaccurate
• Right to erasure ("right to be forgotten") — ask us to delete your data, subject to our legal obligations to retain certain records
• Right to restrict processing — ask us to pause using your data while we look into it
• Right to data portability — ask for your data in a machine-readable format
• Right to object — including to direct marketing at any time
• Right to withdraw consent at any time (where we relied on consent)
• Right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113

To exercise any of these rights, email contact@complyletuk.co.uk. We'll respond within one calendar month. Exercising your rights is free.

8. Security

We take the security of your data seriously. Specifically:

• Our website uses HTTPS encryption end-to-end
• Form submissions are transmitted over TLS and stored encrypted at rest by Netlify
• Email is sent through authenticated providers using SPF, DKIM and DMARC
• Access to customer data is restricted to staff who need it
• We review our security practices regularly

Despite our best efforts, no system is 100% secure. If you have any concerns about the security of your data, please contact us immediately.

9. Cookies

This website uses only strictly necessary cookies required for it to function (for example, to remember your form input if the page reloads). We do not use marketing or tracking cookies, and you do not need to consent to anything for the site to work.

If we add any non-essential cookies in the future, we will update this policy and ask for your consent first via a cookie banner.

10. Children

This website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have done so, please contact us and we will delete it.

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or in the law. The "last updated" date at the top of this page will tell you when. If the changes are significant, we'll let existing customers know by email.