Privacy Policy

Last updated: 16 April 2026

1. Who we are

TenantTruth.co.uk is a UK-based review platform for letting agents. References to "we", "us" or "our" refer to TenantTruth. We are committed to protecting your personal data in compliance with the UK GDPR and the Data Protection Act 2018.

2. What data we collect

When you create an account: your name and email address. When you submit a review: your ratings and written review text, the date and time of submission, and a link to your account. When you use the Platform: we may use Google Analytics 4 (GA4) to understand aggregated traffic (e.g. pages viewed, device type, general location). We do not collect payment card details or government identifiers.

3. How we use your data

We use your data to: create and manage your account; display your reviews and Verified Tenant badge; send you account-related emails (verification, password reset); improve the Platform and detect abuse; and comply with legal obligations. We do not sell your data to third parties. We do not use your data for targeted advertising.

4. Email verification

We use your email address to confirm your identity as a tenant. Once verified, your name (or chosen display name) and reviews are publicly visible on the Platform. Your email address is never displayed publicly.

5. Data storage and security

Your data is stored securely on Supabase infrastructure hosted within the European Economic Area. We use Row Level Security to ensure users can only access their own private data. All data is encrypted in transit using TLS.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal compliance. Published reviews may be anonymised rather than deleted to preserve the integrity of aggregate ratings.

7. Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict processing; and data portability. To exercise any of these rights, please contact privacy@tenanttruth.co.uk.

8. Cookies

We use essential cookies necessary to operate the Platform (session management). Where configured, Google Analytics 4 may set cookies or use similar technology to measure site usage in aggregate. If we display ads via Google AdSense, Google may use cookies or similar technologies to serve and measure advertising, as described in Google's policies. You can limit cookies in your browser settings, though some features (such as staying logged in) may not work without essential cookies.

9. Third-party services

We use Supabase for authentication and database services, and Vercel for hosting. These services process data on our behalf under data processing agreements. We do not share your data with any other third parties without your consent.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the Platform. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy-related queries or to exercise your rights, contact us at privacy@tenanttruth.co.uk. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.