Legal
How we collect, use and protect your personal information.
Last updated: 1 January 2026
Fresh Approach Projects Ltd t/a SecureMyTenancy ("we", "us", "our") is the data controller for the personal information you provide when using our website and services.
Our registered details are:
We collect and process the following categories of personal data:
Full name, date of birth, email address, telephone number, and postal address.
Annual income, employment status, employer details, National Insurance number, bank account name and number (for claims processing), and monthly rental amount.
Rental property address, tenancy details, landlord contact information, and financial disclosure information (CCJs, IVAs, bankruptcy history).
Payment transaction references and amounts. We do not store full card details, payments are processed securely by Stripe. Please refer to Stripe's Privacy Policy for further information.
IP address, browser type and version, pages visited, time and date of visits, and referring website. This data is collected automatically when you use our website.
Information collected via cookies and similar technologies. See our Cookie Policy for full details.
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
| Purpose | Legal Basis |
|---|---|
| Processing your application and providing our service | Performance of a contract (Article 6(1)(b)) |
| Verifying your identity and conducting referencing checks | Performance of a contract (Article 6(1)(b)) |
| Processing payments | Performance of a contract (Article 6(1)(b)) |
| Complying with legal and regulatory obligations | Legal obligation (Article 6(1)(c)) |
| Preventing fraud and ensuring security | Legitimate interests (Article 6(1)(f)) |
| Improving our services and website analytics | Legitimate interests (Article 6(1)(f)) or Consent (Article 6(1)(a)) |
| Sending you service-related communications | Performance of a contract (Article 6(1)(b)) |
| Sending you marketing communications | Consent (Article 6(1)(a)) |
We use your personal data to:
We do not sell your personal data. We may share it with:
All third parties are required to handle your data securely and in accordance with applicable data protection law.
Some of our third-party service providers are located outside the UK. Where we transfer your personal data internationally, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreements (IDTAs) or adequacy decisions, as required by UK GDPR Article 46.
| Data Type | Retention Period | Reason |
|---|---|---|
| Application and financial data | 7 years from end of tenancy | Financial services regulatory requirements |
| Account data | Until account deletion + 1 year | Operational and legal purposes |
| Payment records | 7 years | HMRC and financial compliance |
| Claims records | 7 years from settlement | Legal obligations and dispute resolution |
| Website analytics data | 26 months | Standard analytics retention |
| Marketing consent records | Until consent withdrawn + 3 years | Evidence of consent |
You have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you (subject access request).
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your data where there is no longer a legal basis for us to hold it.
Right to restriction
Ask us to limit how we use your data in certain circumstances.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests or for direct marketing.
Rights re: automated decisions
Not to be subject to a decision based solely on automated processing that significantly affects you.
Right to withdraw consent
Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, please contact us at privacy@securemytenancy.co.uk. We will respond within one calendar month. We may need to verify your identity before fulfilling your request.
Our referencing assessment process may use automated tools to help evaluate application eligibility. Where a decision significantly affects you and is made solely by automated means, you have the right to:
To request a human review of an automated decision, contact us at privacy@securemytenancy.co.uk.
We use cookies and similar technologies on our website. For full details of the cookies we use, why we use them, and how to manage your preferences, please see our Cookie Policy.
Under the Privacy and Electronic Communications Regulations 2003 (PECR), we are required to obtain your consent before sending you marketing communications by electronic means, including email, SMS, or push notifications.
We will only send you marketing communications where you have given your express consent. You may withdraw your consent at any time by:
Service-related communications — such as application updates, payment confirmations, and claim notifications — are sent on the basis of contract performance and do not require your separate consent under PECR.
We do not use automated calling systems, send unsolicited marketing texts, or share your contact details with third parties for marketing purposes without your prior consent.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data transmission (TLS), access controls, and regular security reviews. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised date. We encourage you to review this policy periodically.
If you have concerns about how we handle your personal data, please contact us in the first instance at privacy@securemytenancy.co.uk.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:
Questions about this policy? Contact us or email privacy@securemytenancy.co.uk.