Privacy policy

Property Licence is the data controller for the personal data described in this policy. It is an independent business based in the United Kingdom, not a council or government body.

Our business address is 20-22 Wenlock Road, London, N1 7GU. Email [email protected] with a privacy question or data request.

The checker sends the postcode you type to our server. If you choose an address, it also sends the address, street and Unique Property Reference Number. We use these details to find the council and check area or street licensing rules.

Lookup logs contain the postcode, matched council, result and time. They do not contain your name or email. We use them to find coverage gaps and failed checks.

Our server access logs contain your IP address, requested page, time and browser details. We use these logs for security and abuse checks.

An account contains your name, email address, verification state and sign-in method. Email sign-in stores a secure password hash. We never store your password as readable text. Google receives and processes data when you choose Google sign-in.

Your watchlist stores each saved property address, postcode, street, property reference, council and licence result. It also stores the compliance dates, notes and reminder settings you add, the alerts created for the property and their email delivery status.

Files that you upload to a property are encrypted before they are stored. We also store their names, file types, sizes, checksums and version history. The app accepts PDFs and images. Only a signed-in user who owns the saved property can download them.

We need your email address to verify the account, reset your password, send property alerts and answer support requests. We do not send unrelated marketing email unless you ask for it.

RevenueCat manages subscription access and lifecycle emails. We send RevenueCat an internal account ID and your subscription state. Stripe processes web payments and may collect your email, billing details, payment method, transaction details and fraud signals.

Property Licence stores the product, payment platform, subscription status, renewal state and expiry date. We do not receive or store your full card number, bank details or card security code.

We use Clicky to count page visits, referrers, rough location and device type. Clicky does not receive your Property Licence account ID from us.

A paid advert can add campaign labels such as source, medium and campaign name to the link. Your browser keeps these labels in local storage. After you sign in, we save the first labels against your account so we can count which campaigns lead to payment and a saved property. We do not store an advert click ID or use these labels to show personalised adverts.

We do not use Google Analytics, Meta Pixel or a remarketing pixel. We do not sell personal data or share it with a data broker.

Account sessions use a secure first-party cookie. This keeps you signed in. Sign-in, password reset and account security cannot work without it.

Campaign labels use first-party local storage until they are saved after sign-in. The app then removes that browser copy. Clicky may use a first-party session identifier for traffic counts.

We process account, watchlist, alert and subscription data because it is needed to provide the service you request and manage your subscription.

We use legitimate interests for checker logs, service security, limited traffic analytics, campaign measurement and data quality work. These records help us run and improve the service without building an advertising profile.

We may keep payment and business records when the law requires it. We do not collect special category data or make automated decisions that have a legal or similarly important effect on you.

We keep your account, watchlist, compliance items, uploaded files, alerts and first campaign labels while the account is open. Removing a saved property also removes its compliance items and files. You can ask us to delete the account. We can keep records that are needed for tax, payment disputes, fraud prevention or another legal duty after account deletion.

Server access logs are kept for up to 30 days. Lookup logs are kept for up to 12 months, then deleted or turned into totals that do not identify a person. Clicky controls its own analytics retention.

Email providers, payment providers and sign-in providers keep their own service records under their policies and legal duties.

Our UK hosting provider runs the app and database. Resend sends account and alert emails. RevenueCat manages subscription access. Stripe processes web payments. Google processes Google sign-in when you choose it. Clicky provides traffic counts.

Each provider receives only the data needed for its job. Their own privacy policies explain how they handle data. We may also disclose data when a court, regulator or law requires it.

Our app and main database run on UK infrastructure. Some providers, including Clicky, Google, Resend, RevenueCat and Stripe, may process data in the United States or another country. We use their contractual data protection terms and other approved safeguards where they are required.

You can ask for a copy of your personal data, ask us to correct it, delete it, limit how it is used, provide it in a portable form, or object to processing based on legitimate interests. The right that applies can depend on why we hold the data.

Email [email protected]. We may ask you to prove that you own the account. We aim to answer within one month.

You can complain to the Information Commissioner's Office. Its postal address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Its helpline is 0303 123 1113.

The site uses HTTPS. Access to production systems and secrets is limited. Database queries use parameters, account cookies use secure settings in production, and payment card data stays with the payment provider. File downloads require the active account and saved property owner to match.

No online service can remove every risk. If a breach creates a risk to users, we will follow the UK reporting and notification rules that apply.

The service is made for landlords and property professionals. It is not designed for children and we do not knowingly collect data from them.

We will change the date at the top when this policy changes. We will tell account holders before a material new use of their personal data starts.