Privacy Policy
This policy explains how Collect Rent, operated by Code Smart Web Ltd, processes and protects personal data across landlord, agency and tenant workflows.
Last updated: 27 March 2026
1. Who we are
Collect Rent is operated by Code Smart Web Ltd. For purposes of UK data protection law, we act as a data controller for account, billing and platform security data, and as a processor for operational data managed by landlords and agencies.
2. Data we collect
- Account data: name, email, phone, login and authentication metadata.
- Operational data: portfolio, property, unit, tenancy, payment schedule, arrears and repair records.
- Communication data: email/SMS notifications and delivery outcomes.
- Billing data: subscription plan state, Stripe customer and subscription references.
- Security data: IP logs, user agent details, and audit trail events.
3. How we use personal data
- To provide and secure the Collect Rent platform.
- To run rent collection, arrears and maintenance workflows requested by account administrators.
- To process subscription billing and service provisioning.
- To send operational notifications and account-critical alerts.
- To monitor abuse, enforce limits and maintain service reliability.
4. Payments and Stripe
Payment processing is provided by Stripe. Collect Rent does not store full payment card details. Stripe Connect is used for portfolio-level payment routing and subscription billing events.
5. Lawful bases
- Contract: to deliver the service you requested.
- Legitimate interests: to maintain security, prevent misuse and improve service quality.
- Legal obligations: where retention or disclosure is required by law.
- Consent: where required for specific communications or optional data use.
6. Retention
We retain data only as long as needed for contractual, operational and legal purposes. Retention periods may vary by data category, with security and billing logs stored for audit and fraud-prevention requirements.
7. Your rights
Under UK GDPR, you may have rights to access, correct, erase, restrict, object, or request portability of your data, subject to legal and contractual limitations.
Requests can be sent to our support contact listed below.
8. Security controls
We apply technical and organizational controls including encrypted transport, role-based access, audit logging, OTP verification flows, and provider-level safeguards for payment processing.