Skip to main content

Privacy Policy

Last updated: April 13, 2026 — Version 2.0

1. Data Controller

GeraRent is operated by Gera Services (registered in England and Wales), a property rental platform. We are the data controller under the UK GDPR and Data Protection Act 2018.

2. What Personal Data We Collect

2.1 Identity and Contact Data

Full name, date of birth, email address, phone number, current address.

2.2 Property and Rental Data

Property addresses, rental prices, property descriptions and photos, availability calendars, lease terms, and booking history.

2.3 Tenant Verification Data

Credit check results (via authorised credit reference agencies), employment verification, reference letters, proof of identity, right-to-rent documentation (UK), and income evidence.

2.4 Financial Data

Rental payments, deposits, arrears, payment method type and last four digits, payout history for landlords.

2.5 Location Data

Property locations for search and matching. Approximate user location for relevant property suggestions.

2.6 Communications

Tenant-landlord messages through the platform (retained for dispute resolution).

2.7 Usage and Technical Data

IP address, browser type, device identifiers, session data, crash logs.

3. Legal Bases for Processing

PurposeLegal Basis
Account and booking managementContract (Art. 6(1)(b))
Tenant verification and credit checksLegitimate Interests + Consent (Art. 6(1)(a)(f))
Right-to-rent verification (UK)Legal Obligation (Art. 6(1)(c)) — Immigration Act 2014
Processing rental paymentsContract (Art. 6(1)(b))
Dispute resolutionLegitimate Interests (Art. 6(1)(f))
Fraud preventionLegitimate Interests (Art. 6(1)(f))
Marketing communicationsConsent (Art. 6(1)(a))

4. Data Retention

  • Tenancy records: 6 years from tenancy end (Limitation Act 1980)
  • Right-to-rent records: 1 year after tenancy end (Immigration Act 2014)
  • Credit check results: 6 months from application
  • Financial records: 6 years (HMRC)
  • Platform messages: 3 years from last activity
  • Analytics: 13 months rolling

5. Who We Share Your Data With

We do not sell your data. We share only as necessary:

  • Landlords and tenants — contact details and booking information (after confirmed booking)
  • Credit reference agencies (Equifax, Experian, or equivalent) — tenant verification
  • Right-to-rent verification services (UK)
  • Stripe — payment processing
  • Railway, Neon, Vercel — infrastructure
  • PostHog (EU, anonymised); Sentry (EU, errors)
  • Legal/regulatory authorities — when required by law

6. Your Rights

Access, rectify, erase, restrict, port, or object to your data. Note that tenancy and financial records may be subject to retention requirements. Email [email protected]. Complaints to the ICO.

7. Security

TLS 1.2+ in transit, AES-256 at rest, MFA on admin, regular audits. ICO notified within 72 hours of qualifying breach.

8. Cookies

Essential, functional, and (with consent) analytics cookies. See our Cookie Policy.

9. Contact