Privacy

Who is responsible

Martin Kind, trading as TenancyAudit, 4 George Williams Way, Colchester CO1 2JZ, is the controller. Email: [email protected].

What we collect

At checkout, Stripe collects your email address, your card details (we never see your card number) and your answers to the order questions: property postcode or address, property type and bedrooms, current and proposed rent. For the audit, your questionnaire answers, sent through the form on our site or by email. They include the lead tenant's surname, which we need to look up the deposit.

Why

To produce and deliver the report you ordered and to honour the delivery guarantee. The legal basis is the contract between us.

Who else handles it

Stripe processes payments (see Stripe's own privacy notice). Microsoft 365 hosts our email. Cloudflare, which sits in front of this site, and our hosting provider's web server handle visitor IP addresses in the normal course of serving pages. The property postcode is sent to PropertyData to fetch asking-rent figures; no name or email goes with it. Form answers pass through our hosting provider's server, which emails them straight to us and keeps no copy once they are delivered. Nothing is sold or shared for marketing.

If you are a tenant named in an audit

Your landlord asked us to check the paperwork for your tenancy. They gave us your surname, how many tenants there are and the tenancy details, and told you they were doing so. We use your surname, with the postcode, only to look up your deposit on the deposit protection schemes' own lookup pages. We use the rest only for that audit. The legal basis is legitimate interests: your landlord's interest, and ours, in checking that the tenancy paperwork is correct and your deposit is protected. We keep it for the period below. You have the rights listed at the end of this page, including the right to object.

How long

Orders, reports and the related email are kept for six years for tax and record-keeping, then deleted. Questionnaire answers are kept for six years after the audit, the usual time limit under the Limitation Act 1980 for a claim about the report, then deleted.

Cookies

This website sets no cookies and runs no analytics scripts. Stripe's checkout page sets its own; Stripe explains those on its pages.

If you arrive from one of our adverts, a short script on the page adds the advert's reference to the order buttons, so we can see which advert led to an order. It stores nothing on your device, and the reference reaches Stripe only if you click through to checkout.

Your rights

You can ask for a copy of what we hold, ask us to correct or delete it, or object to how we use it, by emailing us. You can complain to the Information Commissioner's Office at ico.org.uk.

Last updated: 2026-09-19.