Privacy Notice
Please read this notice carefully.
This privacy notice ("Notice") explains how LETLY LTD, registered in England and Wales with company number 16256509 and registered address at Henry Wood House, 4–5 Langham Place, London W1B 3DG, United Kingdom ("Letly", "us" or "we") collects, uses and shares personal data when you ("you", "Data Subject") access or use:
Letly's software application known as Letly, including any related API, App, or Website from time to time ("Platform");
Provision by Letly of access and use of the Platform and any associated services ("Services"); and
Any online documents provided as part of the Services ("Documents").
This Notice should be read alongside our Platform Terms & Conditions, which govern your use of the Platform and Services.
If you do not agree with this Notice, you must not access or use the Platform or Services.
Important Notice
By accessing or using the Platform you acknowledge that you have read and understood this Notice and the ways in which Letly Processes your Personal Data. The terms of this Notice include, in particular, information about your rights in Section 11 and how to contact us in Section 2.
You should print or save a copy of this Notice for future reference.
1. Definitions
The following defined terms are used in this Notice:
Data Protection Laws means the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003, and all other applicable laws relating to the Processing of Personal Data and privacy.
ICO means the UK Information Commissioner's Office.
Personal Data has the meaning given in the Data Protection Laws.
Processing has the meaning given in the Data Protection Laws, and the terms "Process" and "Processed" shall be construed accordingly.
2. Who We Are and How to Contact Us
2.1 Controller
For the purposes of the Data Protection Laws, Letly is the "data controller" for the Personal Data described in this Notice.
2.2 Contact Details
If you have questions about this Notice, or you wish to exercise any of your rights under the Data Protection Laws, you may contact us at:
Email: privacy@letly.ai
Post: LETLY LTD, Henry Wood House, 4–5 Langham Place, London W1B 3DG, United Kingdom
3. Scope of This Notice
3.1 What This Notice Covers
This Notice applies to Personal Data we Process:
when you browse our website;
when you contact us;
when you use the Platform (including as a landlord, tenant, or prospective tenant); and
when you provide services to us (including as a contractor, viewing host, photographer, or inventory clerk).
3.2 Third Party Controllers
In the course of a rental transaction, we may share Personal Data with the relevant landlord, tenants, guarantors, contractors, referencing providers or schemes. Those parties may act as separate data controllers in respect of your Personal Data for their own purposes and are responsible for providing their own privacy information.
4. Personal Data We Collect
We collect Personal Data in three ways: from you directly, automatically through your use of the Platform, and from third parties.
4.1 Data You Provide
Depending on how you use the Platform, the Personal Data you provide may include:
Identity and contact data: your name, email address, phone number, postal address, date of birth (where required), and any further information you submit in forms or messages.
Tenancy and application data: employment and income details, rental history, references, guarantor details, and documents you choose to upload.
Property and service data: property details you submit (including address, availability, and access instructions), preferences, and service requests.
Communications: messages and correspondence with us, including support requests. Where we record calls, we will tell you at the point of recording.
Payments (limited): we may receive payment status and identifiers from payment and banking partners. We do not typically store full card details on our servers where a regulated payment provider processes them.
4.2 Data Collected Automatically
When you use the Platform or our website, we may collect:
Device and usage data: IP address, device and browser details, pages viewed, timestamps, and interaction data.
Cookies and similar technologies: as further described in Section 10 (Cookies and Similar Technologies).
4.3 Data Received from Third Parties
We may receive Personal Data from:
property portals or referral sources where you enquire about a listing;
identity, right-to-rent, sanctions/AML, and referencing providers (including results, risk indicators, verification status, and, in some cases, the underlying data you provided to them);
banks and payment providers (including payment confirmation and account identifiers);
deposit protection schemes and compliance providers (including status confirmations and required reference numbers); and
other landlords, tenants, or guarantors involved in the same transaction (for example, a landlord providing details about a tenant, or a tenant providing details about a guarantor).
4.4 Sensitive Personal Data
Some Personal Data Processed for compliance purposes (including identity documents) may reveal sensitive details such as nationality or biometric identifiers. We Process such information only where necessary for compliance or to provide the Services, and we aim to minimise the volume we collect and retain.
5. Purposes and Lawful Bases of Processing
We Process Personal Data only where we have a lawful basis to do so. The principal purposes are set out below.
5.1 Provision and Operation of the Services
We Process Personal Data to onboard users, manage listings, respond to enquiries, schedule viewings, progress tenancies, coordinate maintenance, and provide customer support.
Lawful basis: performance of a contract; legitimate interests (operating and improving our business).
5.2 Compliance, Identity and Fraud Checks
We Process Personal Data to carry out identity verification, right-to-rent checks, deposit protection workflows, financial checks, fraud prevention, and security monitoring.
Lawful basis: legal obligation (where applicable); performance of a contract; legitimate interests (preventing fraud and protecting users).
5.3 Payments and Account Management
We Process Personal Data for rent collection, payout processing, reconciliation, dispute handling, and the maintenance of audit trails.
Lawful basis: performance of a contract; legal obligation; legitimate interests.
5.4 Service Improvement and Security
We Process Personal Data for analytics, debugging, quality assurance, training, and the prevention of abuse of the Platform and Services.
Lawful basis: legitimate interests.
5.5 Marketing and Communications
We Process Personal Data to send service messages (which are non-marketing) and, where permitted, marketing updates. You may opt out of marketing communications at any time (for example, via the unsubscribe link in a marketing email, or by contacting us using the details in Section 2.2).
Lawful basis: legitimate interests (for B2B and relationship marketing, where permitted by law) and/or consent (where required by law).
6. Automated Processing and Artificial Intelligence
6.1 Use of Automation
Letly uses automation, including artificial intelligence, to help operate the Services. Examples include:
responding to and routing enquiries;
summarising conversations and suggesting draft replies;
classifying requests and triggering operational workflows; and
detecting suspected fraud, abuse, or breaches of our policies.
6.2 Human Oversight
Our workflows are designed so that material decisions in the rental process can be reviewed by a human where appropriate, in particular where a decision could have a significant effect on you.
6.3 Requesting Human Review
If you believe an automated outcome is incorrect, you may contact us using the details in Section 2.2 to request human review.
7. Disclosures and Recipients
7.1 Categories of Recipient
We share Personal Data only as needed to deliver the Services. The categories of recipient include:
Other parties in a transaction: landlords, tenants, and guarantors (for example, where we share an application pack with a landlord).
Operational partners: viewing hosts, photographers, inventory clerks, maintenance contractors, and key/access partners.
Technology and support providers: hosting, analytics, communications tooling (email and SMS), and customer support systems.
Payments, banking and verification providers: regulated payment and banking partners, payment initiation providers, identity and right-to-rent providers, referencing agencies, sanctions/AML screening providers, deposit protection schemes, and compliance providers.
Professional advisers: lawyers, accountants, and insurers.
Regulators and authorities: where required by law, or to protect rights, ensure safety, and prevent fraud.
Counterparties to corporate transactions: in connection with a merger, acquisition, or asset sale, in which case Personal Data may be shared with advisers and relevant counterparties subject to appropriate safeguards.
7.2 No Sale of Personal Data
We do not sell your Personal Data. Where we use advertising cookies for marketing, you may control these via Cookie Preferences as described in Section 10 (Cookies and Similar Technologies).
8. International Transfers
8.1 Transfers Outside the UK
Some of our service providers may Process Personal Data outside the United Kingdom.
8.2 Safeguards
Where we transfer Personal Data internationally, we apply appropriate safeguards, including reliance on adequacy regulations or contractual protections such as the UK International Data Transfer Agreement and addendum.
9. Retention
9.1 General Principle
We retain Personal Data only for as long as needed for the purposes set out in this Notice, including to meet legal, tax, accounting, and regulatory requirements.
9.2 Typical Retention Periods
Account and transaction records: retained while you use the Services and typically for up to 6 years afterwards, to comply with legal obligations and manage claims.
Compliance records: retained for the period required by applicable law and industry practice.
Analytics data: retained for shorter periods, or held in aggregated or de-identified form where possible.
9.3 Anonymised Data
We may retain anonymised or aggregated data for longer periods, as such data no longer identifies you.
10. Cookies and Similar Technologies
10.1 Categories of Cookies
We may use cookies and similar technologies on our website and within the Platform, falling into the following categories:
Strictly necessary cookies: required to make the site and Platform work.
Analytics and performance cookies: used to understand usage and improve the Services.
Marketing cookies: used to measure and improve campaigns, where enabled.
10.2 Managing Cookies
You may manage non-essential cookies via our Cookie Preferences interface, and you may also adjust your browser settings to block cookies. Blocking cookies may affect site functionality.
11. Your Rights
11.1 Rights Available to You
Depending on your location and applicable law (including the UK GDPR), you may have the following rights in respect of your Personal Data:
to access your Personal Data;
to correct inaccurate Personal Data;
to request deletion of your Personal Data, where applicable;
to restrict or object to certain Processing;
to data portability, where applicable; and
to withdraw consent, where Processing is based on consent.
11.2 How to Exercise Your Rights
To exercise any of the rights set out in Section 11.1, contact us at privacy@letly.ai. We may need to verify your identity before responding to your request.
11.3 Complaints
If you are unhappy with how we handle your Personal Data, you may file a complaint with the ICO.
12. Children
The Platform and Services are not directed to children. If you believe a child has provided Personal Data to us, please contact us using the details in Section 2.2 and we will take appropriate steps.
13. Other Important Terms
13.1 Changes to This Notice: We may update this Notice from time to time. We will post the updated version on our website and, where appropriate, will notify you of material changes.
13.2 Governing Law: This Notice, its subject matter, and its formation (and any non-contractual disputes or claims) are governed by English law. We and you irrevocably agree to the exclusive jurisdiction of the courts of England and Wales.
13.3 Contact: Any questions about this Notice should be directed to privacy@letly.ai or to the postal address set out in Section 2.2.
Last updated: 10 January 2026
