Privacy Policy

Privacy Policy

Letlaunch Ltd

Company Number: 16606562

Registered in England & Wales


Last updated: 6th December 2025


1. Introduction & Controller Details

This privacy statement applies to Letlaunch Ltd (“Letlaunch”, “we”, “us” or “our”). Letlaunch Limited is a private limited company registered in England and Wales under company number 16606562.

Our registered office is located at Letlaunch Ltd, Unit 6a, The Village, 17-23 King Street, Reading RG1 2HG

For the purposes of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), Letlaunch Ltd is the data controller responsible for determining how and why your personal data is processed. Letlaunch is registered with the Information Commissioner’s Office (ICO) under registration number ZC007907.

Letlaunch is committed to safeguarding your privacy and handling your personal data transparently and securely. This privacy statement explains the basis on which any personal data we collect from you, or that you provide to us, whether directly or indirectly, will be processed. Please read this document carefully to understand our practices and approach to handling personal information.

If you have any questions regarding this privacy statement or how we process personal data, you may contact our Data Protection Officer at:

Email: hello@letlaunch.co.uk

FAO: Data Protection Officer, Letlaunch Ltd


2. GDPR Definitions

Within this privacy statement, we use several terms defined under the UK General Data Protection Regulation (UK GDPR). These terms are important for understanding how personal data is handled:

Personal Data

Any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is someone who can be identified directly or indirectly - for example, by name, identification number, location data, online identifier, or factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Controller

The individual or organisation that determines the purposes and means of processing personal data. In many circumstances, Letlaunch acts as a controller.

Processor

A third party that processes personal data on behalf of a controller, following the controller’s instructions. Letlaunch may act as a processor when providing services to Users.

Processing

Any operation performed on personal data, whether automated or not. This includes activities such as: collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure via transmission or sharing, alignment, restriction, deletion, or destruction.


3. What We Do

Letlaunch is an online lettings technology platform designed to make the renting process more efficient and accessible for everyone involved in the property market.

We support Landlords in finding suitable tenants, creating legally compliant tenancies, and accessing a range of services to help manage rental properties.

We also support Tenants by helping them communicate with Landlords and enter into new tenancies. For the purposes of this privacy statement, the term “Tenants” also includes any individual guarantors acting on behalf of a Tenant.

Throughout this Privacy Statement, Landlords and Tenants are collectively referred to as Users.

Letlaunch provides various tools and services to assist both Landlords and Tenants throughout the renting lifecycle, from initial property search or property listing, through to tenancy creation and check in support.


4. Our Status Under GDPR

Letlaunch may act either as a data controller or a data processor, depending on the nature of the interaction and the specific service being provided.

When Letlaunch acts as a data processor

We act as a processor when we handle personal data on behalf of our Users, strictly following their instructions. This typically occurs when we provide services that support a User’s own responsibilities, such as assisting Landlords in managing tenant enquiries or processing Tenant data during tenancy creation.

When Letlaunch acts as a data controller

We act as a controller when we determine the purposes and means of processing personal data.

Examples include:

In these cases, Letlaunch is responsible for ensuring the processing complies with UK GDPR.


5. Lawful Bases for Processing Personal Data

Letlaunch processes personal data only where we have a lawful basis to do so, as defined under Article 6 of the UK GDPR. Depending on the circumstances, one or more of the following legal grounds will apply:

Consent

You have given clear, informed consent for your personal data to be processed for one or more specific purposes.

Where consent is relied upon:

Contract Performance

Processing is necessary for entering into or fulfilling a contract with you.

Examples include:

Legal Obligations

Processing is required to comply with the law. For example, Letlaunch may need to process or retain certain data for taxation, anti-fraud, or regulatory purposes.

Legitimate Interests

Processing is necessary for Letlaunch’s legitimate business interests, except where those interests are overridden by your rights or freedoms.

We rely on legitimate interests for activities such as:

Before relying on this lawful basis, Letlaunch carries out a balancing assessment to ensure that your rights and interests do not outweigh our legitimate interests.


6. Sensitive Personal Data

Letlaunch may process sensitive or special category personal data only in limited circumstances and only where a lawful exemption under Article 9 of the UK GDPR applies.

When We Process Sensitive Data on Behalf of Users

If a User (such as a Landlord or Tenant) requires a service that involves sensitive data - for example, information relating to identity documents or background checks - Letlaunch processes this data strictly under the lawful basis established by the User. In these situations, Letlaunch acts as a data processor, following the User’s instructions.

When We Process Sensitive Data as a Controller

Letlaunch may also process sensitive personal data for internal purposes, such as:

In these cases, we rely on the exemptions available under Article 9(2), including processing necessary for employment, social protection, or similar obligations.

Our Approach to Sensitive Data

Letlaunch processes sensitive personal data:


7. Landlords - How We Collect, Use & Process Personal Data

How personal data is collected

Landlords who wish to learn more about Letlaunch’s services may provide their details to us in several ways, including:

Landlords may provide personal data when:

Where we interact with individuals representing companies or organisations, the exchange is treated as a business-to-business interaction.

Types of personal data collected

Data that Letlaunch may collect about Landlords includes (but is not limited to):

Letlaunch does not knowingly collect sensitive personal data from Landlords unless necessary and permitted by law.

When a Landlord visits our website, we may also collect information about website usage (such as browsing behaviour and navigation patterns) through cookies or similar technologies.

Who controls the personal data

When a Landlord uses our services - for example, by listing a property - the Landlord acts as the data controller for the Tenant-related personal data processed as part of the service. Letlaunch processes such data on behalf of the Landlord.

Who processes the personal data

Where Letlaunch processes personal data under a Landlord’s instructions, Letlaunch acts as a data processor.

Landlord personal data may also be processed by:

All such processing is carried out in compliance with UK GDPR and ePrivacy requirements.

Where personal data is stored and how it is used

Landlord personal data is stored securely in Letlaunch’s internal systems and databases. This data may be used to:

How long personal data is stored

Letlaunch retains Landlord personal data:

Where a Landlord withdraws marketing consent or where data is no longer required, the data will be deleted or archived in accordance with Article 5 of the UK GDPR.

Where data is archived, we retain minimal necessary information to record:


8. Tenants - How We Collect, Use & Process Personal Data

How personal data is collected

Tenants may provide personal data to Letlaunch when they:

Tenants (and any applicable guarantors) provide personal data so that Letlaunch can:

Additional personal data may be provided through ongoing communications across email, phone, in-app messaging, or other platforms.

Types of personal data collected

Letlaunch may collect the following types of data from Tenants:

General tenant data:

Data collected for tenancy setup or move-in services

For optional move-in or home setup services, we may process:

Referencing data

During referencing, we may collect:

Sensitive personal data

Letlaunch may occasionally process sensitive personal data where strictly necessary and lawful, such as identity documentation, financial verification data, or information required for referencing.

Website usage data

When Tenants visit Letlaunch’s website, we may collect data relating to:

This occurs through cookies and similar technologies.

Who controls the personal data

The role of controller depends on the stage of the process:

When Tenants use Letlaunch to search for properties

Letlaunch acts as the controller for Tenant data collected to provide the property search service and to share relevant information with Landlords when a Tenant expresses interest.

When data is shared with a Landlord

Once Letlaunch discloses Tenant data to a Landlord, e.g. when a Tenant sends an enquiry or expresses interest in a property. the Landlord becomes the controller for that data for the purposes of responding to the Tenant or progressing the tenancy.

When Letlaunch facilitates tenancy creation

Where Letlaunch is instructed by the Tenant to help create a tenancy (for example, placing a holding deposit through our platform), the Tenant is the controller for personal data provided to Letlaunch for that specific purpose.

Move-in services

If Letlaunch offers optional move-in or home setup services in partnership with third-party providers:

Who processes the personal data

Tenant data may be processed by:

Processing is always carried out in accordance with UK GDPR and the ePrivacy Directive.

Where personal data is stored and how it is used

Tenant personal data is stored securely within Letlaunch’s systems and may be used to:

How long personal data is stored

Letlaunch retains Tenant personal data:

Where a Tenant withdraws marketing consent or where retention is no longer necessary, personal data will be deleted or archived following Article 5 of the UK GDPR. Where data is archived, only minimal information necessary for compliance (such as proof of consent withdrawal) is retained.


9. Referencing Services

To provide Letlaunch’s referencing services, we may need to obtain and process personal data relating to Tenants and, where applicable, Guarantors (together referred to as “Applicants”). This section explains how we collect, use and share this information during the referencing process.

Credit Checks and Data Shared With Credit Reference Agencies

To carry out referencing, Letlaunch may conduct a soft credit check on the Applicant using a trusted credit reference agency. This type of check does not affect the Applicant’s credit score.

To perform this service, Letlaunch must share certain personal data with the credit reference agency, which will then act as an independent controller of the data it receives. The agency will also store some of this information.

A typical dataset received from the credit reference agency may include, but is not limited to:

Letlaunch uses this information solely to compile a referencing report for the Landlord. In doing so, Letlaunch acts as a processor, following the Landlord’s instructions, while the Landlord acts as the controller.

Open Banking and Financial Information (If Used)

With the Applicant’s explicit consent, Letlaunch may use a secure Open Banking provider to obtain financial information required for referencing. This enables Letlaunch to confirm income levels and assess affordability on behalf of the Landlord.

The data provided to Letlaunch may include:

The Open Banking provider acts as an independent controller for the data it receives and processes. Letlaunch will receive only the information needed to produce the referencing report. Letlaunch then processes this data strictly as a processor, acting under the Landlord’s instruction.

How Referencing Data Is Used

Referencing data is used by Letlaunch to:

Letlaunch does not use referencing data for any other purpose unrelated to the referencing process.

Who Controls Referencing Data?

The Landlord is the controller of data used to assess the Applicant’s suitability for a tenancy. Letlaunch acts as the processor, analysing the data and producing the required reports.

Credit reference agencies and Open Banking providers act as independent controllers for the information they receive directly.

How Long Referencing Data Is Retained

Referencing data is retained only for as long as necessary to fulfil its purpose, and in accordance with:

After this period, data is deleted or securely archived in accordance with GDPR principles.


10. Payment Data

How payment data is collected

Users provide payment information to Letlaunch as part of:

Payment data may be provided during onboarding, checkout, or at the point a User requires Letlaunch to process or transfer funds.

Types of payment data collected

The payment-related data Letlaunch may collect includes:

Letlaunch will only collect the payment information necessary to provide the requested service. Letlaunch does not store this information, only processes it.

Who controls the personal data

Payment data is controlled by the User, who provides the data to Letlaunch so that we may process payments on their behalf. Letlaunch processes this data strictly in accordance with the User’s instructions and our terms and conditions.

Who processes the personal data

Payment data may be processed by:

These third parties act as either processors or independent controllers, depending on their role, and operate in compliance with financial regulations and applicable data protection laws.

How payment data is used

Letlaunch may use payment data for the following purposes:

Letlaunch does not use payment data for any purpose unrelated to payment processing or compliance.


11. Employees - How Letlaunch Collects, Uses & Processes Employee Personal Data

How personal data is collected

Employees of Letlaunch provide personal data through various means, including:

This data is required to establish, maintain, and manage the employment relationship between Letlaunch and its employees.

Types of personal data collected

Letlaunch may collect the following categories of employee personal data:

General employee data:

Sensitive personal data

Letlaunch may collect health-related or other special category data only where necessary and proportionate, typically for:

Sensitive data is handled with heightened security and restricted access.

Who controls the personal data

Letlaunch acts as the data controller for all personal data relating to its employees.

Who processes the personal data

In addition to internal processing by Letlaunch, employee personal data may be processed through:

Letlaunch shares only the minimum necessary information with these providers. Data is also disclosed to government authorities when required by law (e.g., HMRC for taxation and payroll reporting).

How personal data is used

Letlaunch processes employee data to fulfil obligations including:

All processing is carried out in accordance with UK GDPR, employment law, and Letlaunch’s internal policies.

How long personal data is stored

Employee personal data is retained:

Data may be archived rather than deleted immediately where needed for compliance, legal defence, or regulatory purposes.


12. Third-Party Contractors

How personal data is collected

Letlaunch works with a range of third-party contractors to help deliver certain services. During these engagements, Letlaunch may collect personal data relating to individuals associated with these third-party businesses. This information may come from:

This data is collected to ensure that Letlaunch can coordinate, instruct, and manage third-party service providers effectively.

Types of personal data collected

Personal data we may collect from or about third-party contractors includes:

Letlaunch does not knowingly collect sensitive personal data from contractors.

Who controls the personal data

Letlaunch acts as the data controller for personal data relating to third-party contractors, as it determines how this data is used for the purposes of service coordination and delivery.

Who processes the personal data

Personal data relating to contractors may be processed by:

Third-party processors act only on Letlaunch’s instructions and are bound by contractual and legal data protection obligations.

How personal data is used

Letlaunch uses contractor-related personal data to:

Letlaunch only shares contractor information where it is necessary to fulfil a service requirement.

How long personal data is stored

Personal data relating to third-party contractors is retained:

After this period, data is securely deleted or archived according to GDPR principles.


13. Sharing Information

Letlaunch may share personal data with carefully selected third parties when necessary to deliver our services, fulfil contractual obligations, improve our platform, or comply with legal requirements. We only share the minimum information needed for the relevant purpose, and all third parties are required to process personal data in accordance with data protection law.

Third parties we may share information with

1. Other Letlaunch Users

For example, we may share your contact details with a Landlord if you request to view a property they have advertised.

2. Suppliers and Sub-Contractors

We may share relevant information with trusted contractors to help facilitate services requested by Users. This may include sharing your name, contact information, and property access details so they can arrange appointments or complete the required work.

3. Analytics and Search Engine Providers

We may share anonymised or pseudonymised information with analytics providers (such as Google Analytics) to help us understand how users interact with our website and to support improvements and optimisation.

Other situations where we may disclose personal data

1. Business Transfers

If Letlaunch or substantially all of its assets are acquired by a third party, personal data held by Letlaunch may be transferred as part of the acquisition. Any acquiring company would be required to handle your data in accordance with this privacy statement unless notified otherwise.

2. Legal, Regulatory, or Compliance Obligations

Letlaunch may disclose personal information when legally required to do so, including:

This may include sharing information with fraud-prevention services or credit-risk organisations.


14. Transfers of Personal Data Outside the UK/EEA

Letlaunch may store or process personal data outside the United Kingdom (UK) or European Economic Area (EEA) where necessary to provide our services. Any such transfers are carried out in compliance with applicable data protection legislation.

Storing personal data

Letlaunch uses secure cloud-based service providers to store personal data. Some of these providers may operate or store data in countries located outside the UK or EEA. Where this occurs, we ensure that appropriate safeguards are in place to protect your personal data.

Processing personal data

Letlaunch may use third-party service providers located outside the UK or EEA to support the delivery of our services. These may include:

When transferring data internationally, Letlaunch uses only providers that meet approved data protection standards, such as:

Where Letlaunch is acting as a processor

In some cases, Letlaunch processes personal data on behalf of a Landlord or other third-party controller. If the controller instructs us to transfer personal data to a jurisdiction outside the UK or EEA:

Letlaunch will not transfer data internationally unless appropriate safeguards are in place.


15. Data Retention

Letlaunch retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, contractual, and operational obligations. Our approach is consistent with Article 5 of the UK GDPR and is guided by Letlaunch’s internal data retention policy.

General Principles of Retention

Letlaunch will retain personal data:

Personal data may be held beyond these periods only where strictly necessary and appropriately justified, always balancing Letlaunch’s operational needs with the rights and freedoms of the data subject.

Where Letlaunch is the Controller

When Letlaunch determines the purpose and means of processing:

Archiving is used only where required to maintain a record for compliance (e.g. proof of consent withdrawal or regulatory reporting).

Where Letlaunch is the Processor

When Letlaunch processes data on behalf of a Landlord or another controller:

Letlaunch will not retain data longer than instructed, unless required to do so by law.


16. Cookies

Letlaunch uses cookies and similar technologies to distinguish you from other visitors to our website. This helps us:

By continuing to browse the Letlaunch website, you agree to our use of cookies unless you adjust your browser settings to refuse them. A cookie is a small text file stored on your browser or device. It contains information that is transferred to your device’s hard drive to support website functionality and analytics.

Types of cookies we use

Strictly Necessary Cookies

These cookies are essential for the operation of our website. They enable core functions, such as:

Without these cookies, some parts of the website may not function properly.

Analytical / Performance Cookies

These cookies help us:

This enables Letlaunch to ensure the website is user-friendly and performs effectively.

Functionality Cookies

These cookies allow our website to:

This enhances your overall experience on the site.

Targeting Cookies

These cookies record:

This information helps us make our content and advertising more relevant to your interests.

First-party cookies (Letlaunch cookies)

Letlaunch uses first-party cookies for core website functions.

How to block first-party cookies

You can disable first-party cookies via your browser settings, however:

Third-party cookies

Letlaunch may use third-party services, such as Google Analytics, to collect anonymous usage data. These cookies help us understand how visitors interact with our website, including:

These cookies do not collect personal data that identifies you.

How to block third-party cookies

You can block third-party cookies via your browser settings. However, doing so may affect website performance or limit certain features.

Further information about cookies

For more details on cookies and how to manage them, you can visit:


17. Your Right to Complain

If you have concerns about the way Letlaunch handles or processes your personal data, you have the right to make a complaint.

Complaining to the Supervisory Authority

The supervisory authority for data protection in the United Kingdom is the Information Commissioner’s Office (ICO). You can raise a concern or submit a formal complaint by following the instructions on the ICO’s website: www.ico.org.uk

The ICO can provide guidance and support regarding your data protection rights and our obligations under the law.

2. Complaining to Letlaunch Directly

If you prefer to contact Letlaunch first, we welcome the opportunity to address your concerns.

You can contact us at: hello@letlaunch.co.uk

FAO: Data Protection Officer, Letlaunch Ltd

We take all complaints seriously and will investigate your concerns promptly and fairly.


18. Contacting You

Letlaunch applies rigorous technical and organisational measures to protect the personal data we process and to minimise the risk of unauthorised access or disclosure. However, if an incident occurs that meets the criteria for notification under data protection legislation, Letlaunch will take the following steps:

Notification to the Supervisory Authority

If required under the UK GDPR, Letlaunch will notify the Information Commissioner’s Office (ICO) of a personal data breach without undue delay.

Notification to Affected Individuals

Where a breach is likely to result in a high risk to the rights and freedoms of affected individuals, Letlaunch will contact those individuals promptly and provide:

Letlaunch is committed to transparency and to keeping affected Users informed in circumstances where the law requires us to do so.


19. Changes to This Privacy Statement

Letlaunch may update this privacy statement from time to time to reflect:

When changes are made, Letlaunch will publish the updated version on our website. Where appropriate, and particularly if changes are material, we may notify you through email or other direct communication methods. We encourage you to review this page periodically to stay informed about how we protect and process your personal information.


20. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), individuals have a number of rights regarding their personal data. Letlaunch is committed to upholding these rights and ensuring transparency in how we process personal information.

Upon request, and where technically feasible, Letlaunch will confirm:

These rights include the following:

Right to be informed

You have the right to understand:

Right of access

You may request a copy of the personal data Letlaunch holds about you, along with supplementary information regarding its use.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure (“right to be forgotten”)

You may request deletion of your personal data where:

Some limitations apply where retention is required by law or for legal claims.

Right to restrict processing

You may request the restriction of your data in specific circumstances - for example, if you contest accuracy or object to processing.

Right to data portability

Where processing is based on consent or contract, and carried out by automated means, you may request your personal data in a commonly used, machine-readable format. Where technically feasible, you may also request that Letlaunch transfers it directly to another controller.

Right to object

You may object to:

Letlaunch will stop processing unless we can demonstrate compelling legitimate grounds or where required for legal claims.

Right to withdraw consent

Where processing is based on your consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to lodge a complaint

You may raise a concern with the Information Commissioner’s Office (ICO) at any time.

Identification required

To protect your data, Letlaunch may request proof of identity before responding to a rights request. Acceptable forms of ID include:

Letlaunch may request additional information if necessary to confirm your identity.


21. Contact Details

If you have questions about this privacy statement, our data protection practices, or how your personal information is handled, you can contact us using the details below:

Letlaunch Ltd

Contact Name: Data Protection Officer

Address: Unit 6a, The Village, 17-23 King Street, Reading RG1 2HG

Email: hello@letlaunch.co.uk

Our Data Protection Officer is responsible for overseeing compliance with data protection laws and this privacy statement. You may contact them with any requests, concerns, or general enquiries about how Letlaunch processes personal data.

See all that you can accomplish with letlaunch.

Get Started →

Have a Question?

Raise a support ticket with the letlaunch team

NAME

USER TYPE

EMAIL

MESSAGE

ATTACHMENT (optional)