Legal

    Privacy Policy.

    What data we hold, how we process it, and your rights under UK GDPR.

    DRAFT — pending legal review. This document is a structural placeholder and has not been reviewed by a solicitor. Do not publish as-is.

    Data controller

    PropertyGoose LTD, Unit 3b, Aquila House, Pierhead Street, Cardiff, CF10 4PH. Contact: info@propertygoose.co.uk.

    Data we collect

    • Tenant data — identity documents, credit data, employment and previous-landlord references, income and affordability, Right to Rent status, AML/PEP/sanctions results.
    • Agent data — account details, agency information, billing contacts.
    • Landlord data — identity (for AML), property and tenancy details, contact information.

    Lawful basis for processing

    We rely on different lawful bases depending on the activity: performance of a contract (to deliver referencing and tenancy services), legal obligation (anti-money-laundering and right-to-rent checks), legitimate interests (fraud prevention and improving our service) and consent (marketing communications, which you can withdraw at any time).

    Recipients / third parties

    We share data, only as necessary to deliver the service, with our referencing and tenancy partners — including CreditSafe, TDS, mydeposits, DPS, Reposit, Just Move In and Alan Boswell Insurance — and with the infrastructure providers that host and secure our platform. We never sell your data.

    Data retention

    We keep personal data only for as long as necessary for the purposes set out above and to meet our legal and regulatory obligations — for example, anti-money-laundering records are retained for the period required by law. Referencing data is held for a limited period after a tenancy decision, then securely deleted.

    International transfers

    We process and store personal data within the UK and EEA. Where a provider operates outside the UK, we put appropriate safeguards in place — such as UK adequacy regulations or an International Data Transfer Agreement — so your data remains protected.

    Your rights

    Under UK GDPR you have the right to access, rectification, erasure, restriction, portability and to object to processing. To exercise any right, contact info@propertygoose.co.uk.

    Complaints

    You may complain to the Information Commissioner's Office (ICO) at ico.org.uk.

    Cookies

    See our Cookie Policy.

    Updates

    Last updated: 7 June 2026.