Privacy Policy

Last updated: 17 July 2026  ·  RRACheck (rracheck.co.uk)

1. Who we are

RRACheck is operated by NZN Engineering Software and Consultancy Limited (Company No. 13384743), registered in England and Wales. Our registered address is available on request. We operate the website rracheck.co.uk ("the Service").

For data protection purposes, NZN Engineering Software and Consultancy Limited is the data controller. Contact us at hello@rracheck.co.uk with any privacy questions.

2. What data we collect

We collect the following personal data when you use RRACheck:

  • Account data: your name, email address and encrypted password
  • Property data: rental property addresses you enter
  • Tenant data: tenant names, email addresses, phone numbers and tenancy details you enter
  • Financial data: rent amounts, deposit amounts and income/expense records you enter for MTD purposes
  • Compliance records: certificate dates, Right to Rent check records and maintenance logs you create
  • Payment data: your Stripe customer ID and subscription reference. We do not store card numbers — payments are processed by Stripe.
  • Usage data: your IP address, browser type and pages visited, collected automatically for security and fraud prevention purposes

3. How we use your data

We use your personal data to:

  • Provide and operate the RRACheck compliance platform
  • Send the Renters' Rights Act 2025 Information Sheet to your tenants on your behalf
  • Send you compliance reminder emails (certificate expiry alerts, deadline reminders)
  • Process subscription payments through Stripe
  • Respond to your support and contact form enquiries
  • Where you connect RRACheck to HMRC (Making Tax Digital), submit income and expense data to HMRC on your behalf with your explicit authorisation
  • Improve the Service and prevent fraud

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

  • Contract: processing necessary to provide the Service you have signed up to
  • Legitimate interests: fraud prevention, security and improving the Service
  • Legal obligation: retaining financial records as required by law
  • Consent: where we ask for your consent (e.g. marketing emails)

5. Sharing your data

We do not sell your personal data. We share data only with:

  • Stripe: payment processing. Stripe's privacy policy: stripe.com/gb/privacy
  • HMRC: only where you explicitly authorise RRACheck to submit MTD data on your behalf
  • Your tenants: we email the Information Sheet and other documents to tenants on your instruction
  • Hosting providers: our servers are operated by JaguarPC (US) under standard contractual clauses

We do not share your data with any third-party marketing companies.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it by law (for example, financial records which must be kept for 6 years under HMRC requirements).

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Delete your personal data (subject to legal retention obligations)
  • Restrict or object to processing
  • Data portability — receive your data in a machine-readable format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email hello@rracheck.co.uk. We will respond within 30 days.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.

8. Cookies

We use a single session cookie (RRACHECK) to keep you logged in. This is a strictly necessary cookie and does not require consent. We do not use tracking, analytics or advertising cookies.

9. Security

We use industry-standard security measures including encrypted passwords, HTTPS, SQLite database with restricted file system access and Stripe for payment processing. We never store card numbers or CVVs.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a notice on the Service. Continued use of RRACheck after changes constitutes acceptance of the updated policy.

11. Contact us

For any privacy-related questions:
Email: hello@rracheck.co.uk
Company: NZN Engineering Software and Consultancy Limited, Company No. 13384743