Who we are
Lentals (a trading name of Ogen Group Ltd, Company No. 17042093) is a UK property management SaaS platform. Ogen Group Ltd is the data controller registered with the Information Commissioner's Office (ICO). ICO registration number: [TO BE ADDED].
Our registered website is lentals.com. For any privacy-related queries, contact us at support@lentals.com.
What data we collect and why
Landlords
Lawful basis: contract performance + legitimate interest
- Name, email address, phone number
- Billing address and payment method (via Stripe — we never store card data)
- Property addresses and details
- Tenancy records and financial data
Tenants
Lawful basis: legitimate interest for service messages; consent for marketing
- Name, phone number, email address
- Tenancy details (property address, rent, deposit scheme)
- Maintenance issue reports, photos, and messages
- Document access and acknowledgement records
- Right to Rent documents (special category — extra protections apply)
Contractors
Lawful basis: legitimate interest
- Name, phone number
- Job records and communication history
How we use your data
- To operate the platform and deliver the service
- To serve required tenancy documents and log acknowledgements (legal compliance under Renters' Rights Act 2025)
- To send service notifications (issue updates, status changes) — legitimate interest
- To send marketing messages — only with explicit opt-in consent
- To maintain legally-required audit trails
Third-party processors
All third-party processors listed below have Data Processing Agreements (DPAs) in place.
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Billing address, email |
| Twilio | SMS and OTP delivery | Phone numbers |
| AWS | Cloud hosting and storage | All platform data |
| Cloudflare | CDN and security | IP addresses, request metadata |
| Resend | Transactional email | Email addresses |
Data retention
| Data | Retention |
|---|---|
| Audit trail and tenancy documents | 6 years after tenancy ends (Limitation Act 1980 + Renters' Rights Act) |
| Tenant personal details | Anonymised 12 months after tenancy ends |
| Contractor personal details | Anonymised 12 months after last job |
| Landlord account data | Deleted 12 months after account closure |
| Financial records | 6 years (HMRC requirement) |
| OTP codes | Deleted immediately after use or expiry |
Your rights under UK GDPR
- Right to access — Subject Access Request, responded to within 30 days
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — where not overridden by legal retention obligations
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interest
- Right to restrict processing — request that we limit how we use your data
- Right to withdraw consent — at any time, for any processing based on consent
To exercise any of these rights, email support@lentals.com.
Cookies
- Essential cookies: session management and authentication — no consent required
- Analytics cookies: only loaded after explicit consent
- No marketing or analytics cookies load before consent is given
Complaints
If you have concerns about how we handle your data, please contact us at support@lentals.com.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113.
See also: Terms of Service · GDPR & Data