Privacy Policy
Who we are
Let IQ is a property compliance tracking service for private landlords in England, operated by Tristan Bates trading as Let IQ. Our website is let-iq.com. You can contact us at hello@let-iq.com.
For the information you give us about yourself as an account holder (your name, email address, sign-in details and billing status) we are the data controller. For the information you upload about your properties, tenants and finances, you are the controller and we process it on your instructions under the Data Processing Agreement.
What information we collect
We collect and process the following information:
- Account information: your name and email address
- Property information: property addresses and related details
- Compliance documents: gas safety certificates, EICRs, EPCs, Legionella risk assessments, and other statutory documents you upload
- Tenancy information: tenancy agreements, deposit details, and tenant information
- Financial information: bank statements you upload for rent reconciliation purposes
- Payment information: billing details processed by Stripe on our behalf
- Usage data: how you interact with the Let IQ platform
How we use your information
We use your information to:
- Provide the Let IQ compliance management service
- Track compliance deadlines and generate alerts and reports
- Process your subscription payment via Stripe
- Send service emails including compliance alerts, reports, and onboarding communications
- Improve the platform
We do not sell your data to third parties. We do not use your data for advertising purposes.
Legal basis for processing
We process your data under the following lawful bases under UK GDPR:
- Contract: processing necessary to provide the service you have subscribed to
- Legitimate interests: service improvement and security
- Legal obligation: where we are required to retain records by law
Who we share your data with
We share your data only with the following third party processors:
- Stripe Inc: payment processing. Stripe is PCI DSS compliant. See stripe.com/privacy
- DigitalOcean LLC: cloud infrastructure and data hosting. All account data is hosted in London, United Kingdom
- Cloudflare Inc: the bot check on our sign-up form (Turnstile). When you sign up, your IP address and browser signals are sent to Cloudflare to confirm you are a person; Cloudflare may process them outside the UK under the UK International Data Transfer Addendum and its data processing terms. See cloudflare.com/privacypolicy
- our transactional email provider: delivery of the emails we send you (sign-in links, alerts, reports). Your email address and the content of those messages pass through it
We do not share your data with any other third parties without your explicit consent.
Data retention
We retain your data for as long as your account is active. If your subscription ends, you keep read-only access for 90 days to retrieve your documents; the account is then closed, and a closed account’s data is permanently deleted 90 days after closure (backups expire within a further 14 days). You can close the account yourself at any time from Settings, with the same 90-day deletion window. We may retain certain records for longer where required by law.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to processing of your personal data
- Request restriction of processing
- Data portability — to request a copy of your personal data in a machine-readable format, contact us at hello@let-iq.com. We will respond within 30 days.
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights contact us at hello@let-iq.com. We will respond within 30 days.
Cookies
We use only essential cookies necessary to operate the platform. We do not use advertising or tracking cookies.
Data security
Your data is hosted on DigitalOcean infrastructure in London, United Kingdom. All traffic to and from the service is encrypted in transit (TLS). Data is stored on access-controlled servers with restricted file permissions; passwords are stored only as salted hashes, and mailbox credentials you give us are held in files readable only by the service. Access to your data is restricted to the operator, and every sign-in and administrative action is logged.
Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by email. The current version is always available at www.let-iq.com/privacy.
Contact and complaints
For any privacy related questions contact us at hello@let-iq.com.
If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.