Privacy notice
How we hold property information for lettings prospecting
This notice explains information we hold about residential properties in the areas we cover, where it came from, what we do with it, and what you can ask us to do about it. It is published under Article 14(7) of the UK GDPR, because we obtained this information from public sources rather than from you.
Who we are
The controller is Reya UKCO Limited, 239 Kensington High Street, Kensington, London, W8 6SA, United Kingdom, registered with the Information Commissioner under ZB542319; write to that address about anything in this notice.
What we do with the information, and why we are allowed to
We hold the postal addresses of residential properties in the areas we cover, together with public facts about how those properties have been sold and advertised, so that we can identify a property whose owner may have a current reason to let it and write to them once, by post, offering our lettings service. This is direct marketing; our lawful basis is Article 6(1)(f) — our legitimate interests — and we have carried out a written legitimate-interests assessment, adopted on 16 August 2026.
What information we hold
The postal address of a property, and public facts attached to that address: the price, date, type and tenure of past sales recorded by HM Land Registry, and how the property has been advertised — asking price or rent, bedrooms, status, the agent, and the dates on which we observed each of those. We hold no names, no email addresses, no telephone numbers, and no financial, special category, criminal-offence or children's data. Where somebody objects, we keep a record of the objection against the address, with no name in it.
Who else sees it
Letters are printed and posted for us by Stannp. The systems holding the data run on Render (hosting) and Cloudflare R2 (file storage). Reya — the platform we use to run this programme — operates those systems and holds the data on our behalf.
Where it is held
The data is held in the European Economic Area — the database in Frankfurt, files in Cloudflare's EU jurisdiction. A transfer to an EEA state is treated as approved under Article 45A of the UK GDPR by paragraph 4 of Schedule 21 to the Data Protection Act 2018, so no additional safeguards are relied on for it.
How long we keep it
An address resolved from a property advertisement is deleted 24 months after we last observed that property. A record that somebody has objected is kept permanently, because that is what honouring the objection requires.
The interest we are pursuing
Our interest is our own commercial interest in winning residential lettings instructions: to identify a property inside the areas we cover whose owner has, on public evidence, a live reason to consider letting — a collapsed sale, a withdrawn lettings listing, a let agreed with another agent, a lettings fall-through — and to put one letter in front of the person who decides, close enough in time for it to be useful to them.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it or delete it, or ask us to restrict how we use it. You can object to this marketing at any time, and we must stop — there is no exception to that right. Write to the address in the first paragraph. The right to data portability does not apply to this processing, because it applies only where processing rests on consent or a contract.
We do not rely on your consent for any of this, so there is no consent to withdraw; the right that matters here is the right to object, above.
Complaining
If you think we have handled your data wrongly, you can complain to us directly — write to the address in the first paragraph — before or instead of complaining to the Information Commissioner.
You can also complain to the Information Commissioner, the UK's data protection regulator, at ico.org.uk.
Where the information came from
None of this came from you. All of it came from publicly accessible sources: the address and sale history from HM Land Registry's Price Paid Data, published under the Open Government Licence v3.0; and the advertising facts from property advertisements published on Rightmove, which we retrieve through a third-party page-retrieval service.
Automated decisions
We score properties so that we can decide which approaches to make first. No decision is taken about you: nothing we do here produces a legal effect for you, or anything similarly significant, so this is not the kind of automated decision-making the law requires special safeguards for.
Why this notice, rather than a letter to everyone
We have not written to everyone whose address we hold to tell them this, because doing so would involve disproportionate effort — we hold addresses for far more properties than we will ever write to, and a notice by post is itself an unsolicited letter. The law allows that, and requires us to make this information publicly available instead, which is what this notice does.
What this notice does not cover
- Approaches to owners of properties that have not been advertised or sold recently. We hold addresses from public records that go back further, and we do not write to those owners on the strength of that alone.
- Telephone calls. We make none under this programme.
- Email or text message to an individual. We do not send either as part of this programme, and we do not collect an individual's email address or mobile number for it.