Bricklanecom privacy & data

The controller of personal data described in this notice is Bricklane Technologies Limited (company number 09170265), registered at 19-23 Ironmonger Row, London, EC1V 3QN.

Name, title, date of birth, gender, passport or other photographic identification (e.g. driving licence)

Postal address, email address, telephone numbers.

Income and income sources, employment details, bank details, credit history and credit check results, County Court Judgments, bank statements, and source-of-funds information.

Website and device data IP address, browser and device information, pages visited and other analytics data collected through our website and through cookies

Correspondence with us, recordings of telephone calls where notified, complaints, queries, feedback.

Some tenants and applicants choose to share information about a disability, a medical condition, or receipt of disability-related benefits

assess your application and contribute, with the Property Owner and its property manager, to the decision on whether to grant a tenancy

verify your identity and complete KYC, AML and sanctions checks

meet our legal, regulatory, accounting, tax and audit obligations (including in relation to anti-money laundering, sanctions and right to rent)

we may collect device and analytics data for the purposes of operating, securing and improving our services

Up to 18 months from the application decision, unless retention is required to meet anti-money-laundering or other legal obligations.

For the duration of the tenancy and for 6 years from the end of the tenancy, to meet the limitation period, tax and audit requirements.

At least 5 years from the end of the relevant relationship or transaction, in line with the Money Laundering Regulations 2017.

Up to 7 years, depending on subject matter and any open legal or regulatory issues.

Bricklane is based in the United Kingdom and most of our processing takes place in the UK.

we rely on an appropriate safeguard recognised under Article 46 of the UK GDPR - such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another mechanism approved under that Article.

At the end of the relevant period, we will securely delete or anonymise the data, or continue to hold it in a restricted form where required by law.

Right of access - you have the right to ask for a copy of the personal data we hold about you.

Right to rectification - you have the right to ask us to correct personal data that is inaccurate or incomplete.

Right to erasure - you have the right, in some circumstances, to ask us to delete personal data we hold about you.

Right to object - you have the right to object to certain processing, including processing based on legitimate interests.

Right to withdraw consent - where we rely on your consent for processing, you can withdraw it at any time

We do not sell your personal data.