Privacy Policy
1. Who is responsible for your data
NETWRXSOLUTIONS LIMITED (company number SC502612, registered office 6 Wentworth Crescent, Dundee DD2 3SE) is the data controller for personal data processed through LetReady. This policy explains what we collect, why, who we share it with and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
2. What we collect
- Account details: your name, email address and a one-way hash of your password (we never store the password itself).
- Property records you enter: property addresses, tenancy start dates, rent, facts about the property (for example whether it has gas or is furnished), and the dates, references, providers, notes and document links for certificates, licences and paperwork.
- Billing information: your subscription plan and status, and Stripe identifiers. Card numbers are entered directly with Stripe and never reach our servers.
- Service data: when reminder emails were sent, sign-in sessions, and standard server logs (IP address, browser type, pages requested) kept briefly for security and troubleshooting.
- Feedback you choose to send: the message, whether it is a problem or an idea, the page you were on, and the browser you used. If you are signed in we store your account id. If you are not, we store an email only when you type one. That email is not copied onto our issue list.
- Checklist download: if you request the free landlord checklist, we store your email address. If you tick the optional box, we also store that choice and send two short tips emails (around day 3 and day 10). Each tips email includes a one-click unsubscribe link.
We record which link or ad brought you to the site.
We do not ask for, and you should not enter, personal details about your tenants. The service holds information about you and your properties.
3. Why we use it and our legal basis
- To provide the service you signed up for (storing your records, calculating statuses, showing your dashboard, exporting your data): performance of our contract with you.
- To send reminder emails about upcoming and overdue dates: performance of the contract. You can switch reminders off on your Account page at any time.
- To send account emails such as password resets and important notices about the service, pricing or these terms: performance of the contract and our legitimate interest in running the service securely.
- To take payment and keep tax records: performance of the contract and our legal obligations.
- To keep the service secure and investigate misuse: our legitimate interests.
- To see which links lead to sign-ups, limited to the link or ad that brought you here: our legitimate interest in measuring those campaigns.
- To read feedback you send and fix or consider it: the request you made by submitting the note.
- To let Google Ads measure a trial, if you agree: consent. You can reject that, and you can change your mind later.
- Optional checklist tips emails: only if you tick the box on the checklist form. You can unsubscribe from a link in any tips email.
We do not send marketing emails except the optional checklist tips sequence above, and we do not sell your data. Google Ads measures whether an advert led to a trial only if you accept cookies. We do not build advertising profiles of our own.
4. Who we share it with
We use a small number of service providers who process data on our behalf under contract:
- Vercel hosts the application.
- Turso hosts the database that stores your account and property records.
- Stripe processes subscription payments and issues receipts.
- Resend delivers reminder and account emails.
- Cloudflare provides DNS for our domain.
- Google (Google Ads, tag
AW-18492789192) receives advertising measurement only if you accept cookies, so we can see whether an advert led to a trial.
Some of these providers store or process data outside the United Kingdom, including in the United States and the European Union. Where they do, transfers are protected by the UK adequacy regulations or by the UK International Data Transfer Agreement or Addendum, as applicable. We may also disclose data where the law requires it.
5. How long we keep it
- Account and property records: for as long as your account exists, and for 30 days after you ask us to delete it, so you can change your mind.
- Billing records: six years after the transaction, as required by UK tax law.
- Server logs: up to 30 days.
- Password reset links: one hour, after which they expire.
- Your cookie choice: about six months, then we ask again.
- Which link brought you here: up to 30 days.
- Checklist download and tips emails: until you unsubscribe from tips or ask us to delete the record, typically no longer than 90 days after download.
- Google Ads and Meta cookies: only after you accept, for the period those companies set. If you reject, or later change your mind, we stop allowing them.
6. Cookies
LetReady sets three cookies because the site needs them. They are not used to advertise to you:
letready_sessionkeeps you signed in. It is removed when you sign out or after 30 days.letready_consentremembers whether you accepted or rejected advertising cookies, so we do not ask on every page. It lasts about six months.letready_touchis a first-party cookie. On your first visit we store the page you landed on, the referring site, and any campaign fields in the link (source, medium, campaign and content). A friend referral link is recorded as a referral. We keep that first visit for up to 30 days and attach it to your account if you sign up. A later advert does not replace it. We do not send this cookie to Google or Meta. The same details may be held in this browser tab until you sign up if the cookie cannot be stored.
A banner offers Accept and Reject, with neither choice selected in advance. Google and Meta are not allowed to use cookies until you click Accept. If you have already chosen, you can change it at any time from Cookie settings in the footer, or .
If you accept, we load Google's tag and allow advertising and analytics storage, including cookies that measure whether an advert led to a trial. That covers ad storage, ad user data, ad personalisation and analytics storage. If you reject, those stay off.
Google's tag is not loaded until you click Accept. Before you choose, and if you reject, your browser makes no request to Google from this site, so Google receives nothing from us, not even a cookieless signal. A sign-up is reported to Google Ads only after you have accepted and an account has actually been created, and only once.
The Meta pixel is not loaded until you click Accept, and only when a pixel id is set for this site. After that it can record a page view, a completed sign-up, and a purchase with the price in pounds. Each of those events has an id so it can be matched, and not counted twice, if we later send the same event from our server. If you reject, or have not chosen yet, the pixel is not loaded. If the pixel id is not set, it is not loaded at all.
7. Security
Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Passwords are hashed with scrypt. Access to production systems is restricted to the people who need it to run the service. No system is perfectly secure; if we become aware of a breach that affects you we will tell you and the Information Commissioner's Office as the law requires.
8. Your rights
You have the right to:
- access the personal data we hold about you (the Export page gives you most of it instantly);
- have inaccurate data corrected (you can edit records yourself at any time);
- have your data deleted, subject to the retention periods above;
- object to or restrict processing based on legitimate interests;
- receive your data in a portable format (the CSV export);
- complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how we handle your data. We would appreciate the chance to resolve it first.
To exercise any of these rights, contact us by email at hello@getletready.co.uk or in writing to 6 Wentworth Crescent, Dundee DD2 3SE.
9. Changes to this policy
If we change how we use your data in a way that affects you, we will email you before the change takes effect. The date at the top shows when this policy was last revised. See also our Terms of Service.