PropertyGoose
    Book a Demo
    Legal

    Privacy Policy.

    What data we hold, how we process it, and your rights under UK GDPR.

    Last updated: 22 June 2026

    Who we are

    This policy explains how PropertyGoose LTD ("PropertyGoose", "we", "us") collects, uses and protects your personal data, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018). We are the data controller for the personal data we process through our tenant referencing, tenancy agreement, deposit registration and tenancy management services.

    Registered office: PropertyGoose LTD, Unit 3b, Aquila House, Pierhead Street, Cardiff, CF10 4PH. General enquiries: info@propertygoose.co.uk.

    The data we collect

    Depending on how you use PropertyGoose, we may collect:

    • Tenant & guarantor data — name, contact details, date of birth, current and previous addresses, identity documents, credit and affordability data, employment and previous-landlord references, income, Right to Rent status, and AML / PEP / sanctions results.
    • Landlord data — name and contact details, identity data (for AML where required), property and tenancy details.
    • Agent data — account and user details, agency information, and billing contacts.
    • Technical & usage data — IP address, device and browser information, and how you interact with our website and platform, collected via cookies and similar technologies.

    How we use your data

    We use personal data to:

    • carry out tenant referencing, including credit, affordability, identity and fraud checks;
    • produce tenancy agreements, register deposits and manage the tenancy lifecycle;
    • meet our legal and regulatory obligations, including anti-money-laundering and Right to Rent;
    • prevent and detect fraud, and keep our service and your account secure;
    • provide customer support and administer your account; and
    • send service messages and, where you have consented, marketing communications.

    Lawful bases for processing

    We rely on different lawful bases depending on the activity: performance of a contract (to deliver referencing and tenancy services), legal obligation (anti-money-laundering and Right to Rent checks), legitimate interests (fraud prevention, security and improving our service) and consent (marketing communications, which you can withdraw at any time). Where we rely on legitimate interests, we balance those interests against your rights and freedoms.

    Credit reference and affordability checks

    To help assess applications, verify identity, prevent fraud and meet our legal and regulatory obligations, we obtain information about applicants and guarantors from credit reference agencies (CRAs).

    We obtain this data through Creditsafe, which uses its data partner TransUnion to supply consumer credit and identity data. For enhanced references we may also use Experian. Both Creditsafe and TransUnion are authorised and regulated by the Financial Conduct Authority:

    • Creditsafe Business Solutions Limited — FCA Firm Reference Number 742313.
    • TransUnion International UK Limited — FCA Firm Reference Number 805757.

    The information we receive may include data relating to your identity, credit commitments, payment history and public-record information. It is used solely for legitimate business purposes — creditworthiness and affordability assessment, identity verification and fraud prevention — in accordance with applicable data protection laws.

    More information about how these CRAs process your personal data:

    Automated decision-making and profiling

    We use automated systems to support processes such as risk assessment, fraud prevention, affordability checks and identity verification. These tools may analyse personal data against predefined criteria to generate indicators, scores or recommendations. We do not make decisions that have a legal or similarly significant effect on you based solely on automated processing. Any such decision is subject to meaningful human review — you will not be subject to automatic rejection without human involvement.

    Who we share your data with

    We share data only as necessary to deliver the service, with our referencing and tenancy partners — including the credit reference agencies Creditsafe and TransUnion (and Experian, for enhanced references), the deposit schemes TDS, mydeposits and DPS, and partners such as Reposit, Just Move In and Alan Boswell Insurance — and with the infrastructure providers that host and secure our platform. We may also disclose data to law enforcement or regulators where required by law. We never sell your data.

    International transfers

    We process and store personal data within the UK and EEA. Where a provider operates outside the UK, we put appropriate safeguards in place — such as UK adequacy regulations or an International Data Transfer Agreement — so your data remains protected to the same standard.

    Data retention

    We keep personal data only for as long as necessary for the purposes set out above and to meet our legal and regulatory obligations — for example, anti-money-laundering records are retained for the period required by law. Referencing data is held for a limited period after a tenancy decision, then securely deleted.

    How we protect your data

    We use appropriate technical and organisational measures to keep your data secure, including encryption in transit and at rest, access controls, and ongoing monitoring. We restrict access to personal data to those who need it to deliver the service.

    Your rights

    Under UK GDPR you have the right to:

    • access the personal data we hold about you;
    • have inaccurate data rectified;
    • request erasure of your data, where applicable;
    • restrict or object to our processing;
    • data portability; and
    • withdraw consent at any time, where we rely on it.

    To exercise any right, contact our Data Protection Officer (below) or email info@propertygoose.co.uk. We will respond within one month.

    Data Protection Officer

    If you have any questions about how your personal data is processed, or wish to exercise your rights, you can contact our Data Protection Officer:

    Matthew Ryder, Director
    Email: matt@propertygoose.co.uk

    Cookies

    We use cookies and similar technologies as described in our Cookie Policy.

    Complaints

    You can complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data — at ico.org.uk — though we would welcome the chance to resolve any concern first.

    Changes to this policy

    We may update this policy from time to time to reflect changes in our service or the law. Any changes will be posted on this page. Last updated: 22 June 2026.