ComplyLet Pro

Version 2026-08-12 · effective 12/08/2026

Privacy Policy

ComplyLet Pro Limited Last updated: 12 August 2026

ComplyLet Pro (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app and services, including compliance tracking, property management, and HMRC Making Tax Digital (MTD) submissions.

By using the App, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect the following information to provide and improve our services:

Personal Information

Full name, email address, phone number (optional), National Insurance Number (NINO), Unique Taxpayer Reference (UTR), and Government Gateway credentials (via secure OAuth when you authorise MTD submissions).

Property and Compliance Data

Property addresses, tenancy details, certificate documents (Gas Safety, EICR, EPC, Legionella), expiry dates, task descriptions, uploaded photos/files, and compliance dashboard data.

Financial and Tax Data

Income, expenses, bank transaction data (via Xero or direct import), and quarterly MTD cumulative updates. We do not currently collect or submit End of Period Statements or Final Declarations.

Usage and Technical Data

Device information, IP address, approximate location (for UK compliance), log data, app interactions, features used, and reminders triggered.

Payment Information

Processed securely by Stripe (we do not store card details).

We do not collect sensitive data (such as racial/ethnic origin or health information) unless you voluntarily include it in descriptions or notes.

2. How We Use Your Information & Lawful Basis (UK GDPR)

We process your data on the following lawful bases:

  • Contract — to provide the App, reminders, dashboard, compliance tools, and tax submission services.
  • Legitimate interest — to improve the service, send important updates, and prevent fines.
  • Consent — for optional marketing messages (you can withdraw anytime).
  • Legal obligation — when submitting to HMRC or meeting tax and record-keeping requirements.

Specific uses include:

  • Delivering certificate reminders, task automations, and the compliance dashboard.
  • Preparing and submitting MTD quarterly updates to HMRC (only after your explicit authorisation via Government Gateway).
  • Integrating with your bank or Xero account for accurate income/expense tracking.
  • Providing customer support and improving the App through analytics and bug fixes.
  • Complying with legal and HMRC obligations.

3. How We Share Your Information

We never sell your data. We only share the minimum necessary information with:

  • HMRC — only when you authorise us to submit MTD returns or related documents via secure OAuth.
  • Stripe — payments and subscription billing (we do not store card details).
  • Xero — optional bank transaction sync, only when you connect your account.
  • Supabase — database, authentication, file storage, and related backend services.
  • Vercel and Render — application hosting for the web app and integration API.
  • Anthropic — optional AI extraction when you scan a certificate document.
  • Resend — transactional and reminder email delivery.
  • Legal requirements — if required by law, court order, or to protect our rights (e.g. fraud prevention).

These providers process data under GDPR-compliant contracts where required.

4. International Transfers

Some service providers process data outside the UK. The web app is hosted on Vercel. The integration API that calls HMRC is hosted on Render. We protect those transfers using the UK International Data Transfer Addendum and EU Standard Contractual Clauses where required.

5. Data Retention

  • General app data is kept for as long as your account is active.
  • Tax-related data (MTD submissions, financial records, etc.) is retained for as long as required by HMRC rules (typically 6 years from the end of the relevant tax year) or as long as you remain a user, whichever is longer.
  • After account deletion, a detached archive of HMRC submission payloads and selected billing/audit rows may be retained for up to 6 years for HMRC record-keeping and dispute defence. Other personal data is securely deleted or anonymised according to our deletion process.

6. Security

We use industry-standard security measures including:

  • Secure OAuth 2.0 authorisation for HMRC
  • Encryption in transit and at rest
  • Fraud prevention headers on HMRC API calls
  • SSL/TLS, access controls, and least-privilege operational practices

While no system is 100% secure, we take every reasonable step to protect your information. We recommend using strong, unique passwords.

7. Idea Protection

The concept, features, design, and business model of ComplyLet Pro are our exclusive intellectual property. By using the App you agree not to use any knowledge gained from it to create, develop, or assist in building any competing landlord compliance or MTD tool for 24 months after your account ends.

8. Your Rights (UK GDPR)

You have the right to:

  • Access, correct, delete, or export your data
  • Withdraw consent for marketing
  • Object to or restrict processing

Because some data is required for HMRC submissions, certain rights may be limited while your tax obligations are active. You can exercise your rights in Account Settings or by emailing info@complyletpro.com. You also have the right to complain to the ICO (ico.org.uk).

9. Children’s Privacy

Our App is not intended for users under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes by email or in-app notice.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: info@complyletpro.com