← Back to home

    GDPR & Data Protection

    How Rentisity protects your personal data and complies with GDPR.

    Rentisity is committed to protecting personal data and fully complying with the General Data Protection Regulation (GDPR) and Irish Data Protection legislation. We treat your data with care and respect your rights.

    What data we process

    Account information

    Name, email address, phone number, password, profile picture, role (tenant, landlord, service provider), and account settings.

    Property and tenancy data

    Property addresses, rent amounts, lease terms, application information, messages, and other details you share when listing or searching for properties.

    Verification documents

    When you choose to verify your identity, we process documents you upload (e.g., government ID, proof of employment, educational certificates). These are processed securely and stored separately.

    Usage data

    Pages visited, features used, click patterns, device type, IP address (anonymized), and browser information. This helps us improve Rentisity.

    Communication data

    Messages, emails, and support requests you send through Rentisity are stored to provide customer support and improve our service.

    Legal basis for processing

    Under GDPR, we only process your data when we have a legal reason to do so:

    Contractual necessity

    We process data required to provide you with Rentisity services (login, property listings, applications, messaging).

    Legal obligations

    We process data when required by Irish law (e.g., know-your-customer checks, RTB compliance, fraud prevention).

    Legitimate interests

    We process data to improve Rentisity, prevent fraud, maintain security, and provide customer support.

    User consent

    Where required (e.g., marketing emails, analytics), we process data only when you've given clear, freely-given consent. You can withdraw consent at any time.

    How we protect your data

    Encryption

    All data in transit uses industry-standard TLS/SSL encryption. Sensitive data at rest is encrypted using AES-256.

    Access controls

    Only authorized Rentisity staff with a legitimate business need can access your data. All access is logged and monitored.

    Audit logging

    We maintain audit logs of all data access and modifications to detect unauthorized activity.

    Regular testing

    We conduct regular security assessments, penetration testing, and vulnerability scans.

    Data processors

    We carefully vet any third-party service providers and ensure they comply with GDPR via Data Processing Agreements (DPAs).

    Data retention

    We retain your data only as long as necessary. Here's our retention policy by data type:

    Active accounts

    As long as your account is active and for 2 years after deletion (to comply with tax and legal obligations).

    Messages and documents

    Retained for the duration of your tenancy/rental relationship, plus 7 years (to satisfy legal requirements).

    Verification documents

    Retained for compliance and fraud prevention, then securely deleted unless a legal hold applies.

    Analytics and logs

    Anonymized usage data retained for 12 months; server logs retained for 90 days.

    Your rights

    Under GDPR, you have the following rights. You can exercise any of these by contacting us via our data request form:

    Right of access

    You can request a copy of all personal data we hold about you.

    Right of rectification

    You can request that we correct inaccurate or incomplete data.

    Right of erasure ("right to be forgotten")

    You can request deletion of your data, subject to legal retention obligations.

    Right to restrict processing

    You can request that we limit how we use your data while we investigate a dispute.

    Right to data portability

    You can request your data in a structured, portable format (e.g., CSV) to transfer to another service.

    Right to object

    You can object to certain processing, including marketing emails and analytics.

    Right to withdraw consent

    If we process your data based on consent, you can withdraw it at any time.

    Supervisory authority

    If you believe Rentisity is not complying with GDPR or your data protection rights, you have the right to lodge a complaint with the supervisory authority:

    Data Protection Commission (Ireland)

    21 Fitzwilliam Square, Dublin 2, Ireland

    Phone: 1800 437 737 | Email: info@dataprotection.ie

    Have questions about your data?