Last updated: 8 April 2026
Who we are
Tenant Rights Panel is an online service for tenants in England and Wales to organise tenancy-related documents, view plain-English spotting notes, and receive expert feedback according to your plan. The operator name and registered details should appear on your receipt or contract with us where applicable.
What this service is not
We provide general information and workflow tools. We do not provide legal advice. For your specific case, contact Citizens Advice, a solicitor, or another qualified professional.
Data we process
- Account data: email address and password (via our authentication provider), and optional profile details you supply.
- Documents: files you upload to your panel (for example agreements, notices, and letters), associated metadata, and generated notes or review status on our systems.
- Payment data: card payments are processed by Stripe. We do not store your full card number on our own servers. Stripe acts as a payment processor under its own terms and privacy notice.
- Technical data: standard server and security logs may include IP address, device and browser type, and timestamps, as needed to run and protect the service.
- Contact form: if you use the contact page, we store your name (if provided), email, subject, and message in our database so our team can read and reply. If you are signed in, we may link the message to your account ID.
Why we use your data
We use personal data to:
- create and secure your account;
- provide your panel, uploads, notes, and expert review workflow;
- take payment and manage your plan;
- respond to support requests (including contact form messages) and comply with lawful obligations;
- maintain security and prevent abuse.
Where data is stored
We use Supabase and related infrastructure to host authentication, the database, and file storage. Data may be processed in the United Kingdom, the European Economic Area, or other locations supported by those providers, subject to their safeguards and agreements. Check Supabase and Stripe documentation for current regions and sub-processors.
How long we keep data
We keep account and panel data for as long as your account exists and as needed to provide the service, meet legal or accounting requirements, and resolve disputes. Uploaded documents may be kept for the same reasons unless we agree otherwise or the law requires deletion. Exact retention can depend on your requests and our legal obligations.
Your rights
Under UK data protection law you may have rights including access, rectification, erasure, restriction, objection, and data portability, depending on the circumstances. To exercise these rights or ask questions about your data, contact us using the details below. You may also complain to the Information Commissioner's Office (ICO) in the UK.
Cookies and similar technologies
We use cookies and similar technologies needed to keep you signed in and to operate the site securely. We do not use third-party advertising cookies on this app as part of this policy description; if that changes, we will update this page.
Children
The service is intended for adults dealing with their own tenancy. It is not directed at children.
Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the service after changes means you accept the updated policy, except where the law requires otherwise.
Contact
For privacy-related requests or questions about this policy, use our contact form.