Privacy notice

Reviewed Rentals is operated by Reviewed Rentals Limited, a company registered in England and Wales (company number 17436416). Registered office: 49 Jamaica Street, Level One, Basecamp Liverpool, Liverpool, United Kingdom, L1 0AH.

We are the data controller for the personal data described here. You can contact us about anything on this page at hello@reviewedrentals.com.

Waitlist sign-ups. We store your email address, the date you signed up, the exact consent wording you agreed to, and the time you agreed to it. We use this only to email you about the launch of Reviewed Rentals. Lawful basis: consent (UK GDPR Art. 6(1)(a)), backed by the PECR rules on marketing email. You can withdraw consent at any time using the unsubscribe link in any email or the unsubscribe page.

Review verification. When you submit a review we ask for your email address so we can confirm the review is genuine. We do not store your email address in readable form. It is converted to a one-way cryptographic hash and it is that hash we keep, so we can prevent duplicate reviews for the same property and match a later removal request to your review. Your email is never published and never shared with landlords or agents. Lawful basis: legitimate interests (Art. 6(1)(f)) in preventing fraudulent and duplicate reviews.

Review content and photos. The ratings, tags, free-text answers and any photos you upload are published once approved. Please do not include information that identifies you or other individuals. Photos are processed in your browser before upload: they are re-encoded, which removes EXIF metadata such as GPS location, device model and capture timestamps. The original file never leaves your device.

Moderation records. Automated checks for profanity, suspected AI-generated text and unsafe imagery produce flags stored against the review. These are internal only and never published. Lawful basis: legitimate interests in keeping the platform safe and accurate.

Landlord & Agent Portal accounts. Landlords and letting agents can create an account to claim their profile. We store the email address and password you sign in with (the password is stored only in scrambled, one-way form, so we can never read it), when the account was created and when you last signed in. Lawful basis: contract (Art. 6(1)(b)) — we need these details to provide the account you asked for.

Profile and property claims. When you claim a landlord or agency profile we ask for your name, your role at the company, a contact email and a description of the evidence that shows you own or manage it. When you add a property to your profile we record which address you claimed and when. Our team uses this only to check the claim is genuine and to contact you about it. Lawful basis: legitimate interests (Art. 6(1)(f)) in making sure only the real landlord or agent can speak for a profile.

Replies and complaints. Official responses you write are checked by our team and, once approved, published under the review with an “Official response” label and your profile name — not your personal name. If you make a formal complaint about a review, we keep your complaint, the wording challenged, any correction proposed, the tenant’s reply and our decision as a record of the case. We only ever pass the substance of a complaint to the tenant, never your contact details, and we never pass the tenant’s identity to you. Lawful basis: legitimate interests in giving landlords a fair right of reply and in handling disputes fairly, and legal obligation (Art. 6(1)(c)) where the law requires us to act on a complaint.

Our own staff accounts. Reviewed Rentals team accounts use email, password and two-factor authentication. Lawful basis: legitimate interests in securing the service.

We do not use cookies for advertising or analytics, and we do not track you across other websites. See our cookie notice.

Reviews name the landlord, company or letting agent a tenancy was held with. Where that person is an individual or a sole trader, the review contains their personal data.

Lawful basis: legitimate interests, UK GDPR Art. 6(1)(f). Our legitimate interests assessment is summarised below.

• Purpose. Prospective tenants routinely commit to a home and a deposit with no reliable information about how the landlord behaves. Publishing first-hand tenant experience protects tenants from foreseeable harm and gives good landlords public recognition. There is a clear public interest in transparency in the private rented sector.
• Necessity. The purpose cannot be achieved without identifying who the review is about — an anonymous review of an unnamed landlord has no value to a tenant deciding whether to sign a lease. We publish no more than is needed: the landlord or company name and, where relevant, the property address. We do not publish home addresses of individuals other than the let property, contact details, financial data, or any special category data.
• Balancing. Reviews concern a person's conduct in the course of business as a landlord, not their private or family life, so the expectation of privacy is lower. We reduce the impact through moderation before publication, rules requiring reviews to be honest first-hand experience rather than allegation or abuse, automated profanity and abuse screening, and the takedown, right of reply and rectification process set out in our review policy. On balance we consider our interests and those of tenants are not overridden by the rights of the landlord.

If you are a landlord or agent, you can object to processing (Art. 21), ask us to correct inaccurate information (Art. 16), ask for erasure where the conditions in Art. 17 are met, or exercise a right of reply. The process, and the timescales we work to, are set out in the review policy. We will never disclose a reviewer's identity or email address to you.

• Our hosting and database provider, which stores the data on our behalf inside the platform we build on, including portal sign-in.
• Our email delivery provider, used to send verification codes, account and claim emails, complaint notices and launch updates.
• Automated content and image safety screening services, used to check submissions before publication.
• Law enforcement or regulators, where we are legally required to do so.

We do not sell personal data, and we never will.

• Unverified review submissions and their photos: deleted automatically 24 hours after submission.
• Verification codes: valid for 15 minutes, then deleted by the daily cleanup job.
• Hashed reviewer email records: kept for as long as the review is published, so we can act on a removal request.
• Published reviews and photos: kept until removed under our review policy or at the reviewer's request.
• Waitlist emails: kept until you unsubscribe, or until we no longer need the list, whichever comes first.
• Unfinished review drafts: stored only in your own browser's storage on your device (never sent to us) so you can resume where you left off, and automatically discarded after 30 days.
• Landlord & Agent Portal accounts and claim details: kept while your account is open. If you ask us to close your account, we delete your sign-in details and claim evidence. Published official responses stay on the profile unless you ask us to remove them.
• Rejected profile claims (including the contact email and evidence notes provided): deleted automatically 60 days after our decision.
• Formal complaint records: kept for two years from our decision, then permanently deleted. While a complaint is still open it is kept until we decide it.

You have the right to access your data, have it corrected or erased, restrict or object to processing, withdraw consent, and to data portability where it applies. Because reviews are submitted without an account, we identify tenants by the email address they verified with — please write from that address so we can match the request. Landlords and agents with a portal account should write from the email address they sign in with.

Email hello@reviewedrentals.com. We respond within one month, as required by Art. 12.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.