Privacy notice: Up to Let waiting list

This notice explains what we do with the details you give us when you join the Up to Let waiting list on uptolet.com. We have written it in plain English. If anything is unclear, contact us using the details below.

Who we are

Up to Let is run by [COMPANY NAME], which is the controller of your personal data for the waiting list. [CONFIRM: Trade Works 247 is run by the same company and uses the same waiting list]

Company name

[COMPANY NAME]

Registered address

[REGISTERED ADDRESS]

Company number

[COMPANY NUMBER] (registered in [England and Wales])

ICO registration number

[ICO REGISTRATION NUMBER]

Contact email

[CONTACT EMAIL]

What we collect

• Your email address.
• Whether you are a landlord, a contractor or a tenant.
• If you are a landlord: roughly how many properties you manage (a range, such as 4 to 9).
• If you are a contractor: one general trade category (for example plumbing, electrical, locksmith or general). If you tick several trades or describe another trade, we keep only that one category.
• A record of your consent: that you ticked the box, which version of the wording you saw, when you agreed and which website you used.
• Whether you have confirmed your email address, and where you are in the queue.
• For security and to stop abuse: a scrambled (hashed) version of your IP address and of your browser details. We cannot read the originals back from these.

We do not ask for your name, phone number or postal address, and we do not collect any special category data.

Why we use it

• To keep your place on the waiting list and confirm your email address.
• To email you about the launch and invite you to join when it is your turn.
• To decide who to invite first (for example, smaller portfolios before larger ones).
• To protect the sign-up form from spam and misuse.

We do not sell your data, and we do not use it for advertising.

Our lawful basis

We rely on your consent (UK GDPR Article 6(1)(a)), which you give by ticking the box on the sign-up form. Under the Privacy and Electronic Communications Regulations (PECR) we only email you about the launch because you asked us to. You can withdraw your consent at any time (see below).

[CONFIRM: whether the short-lived security records (hashed IP address and browser details) rely on legitimate interests, UK GDPR Article 6(1)(f), instead of consent]

How long we keep it

• If you do not confirm your email address, we delete your sign-up after 7 days.
• The hashed security records are deleted after 30 days.
• If we have not invited you within 12 months, we will email you once and then delete your details. [CONFIRM]
• If you go on to create an account, your waiting-list record is anonymised 30 days after you register. [CONFIRM]
• If you leave the list, we delete your details within 30 days, keeping only a scrambled record of your email address so that we do not contact you again. [CONFIRM]

Who processes it for us

• Hosting: Microsoft Azure, in the UK [PLACEHOLDER: confirm the region, for example UK South, and the Microsoft contracting entity].
• Email delivery: [PLACEHOLDER: name of the email provider and where it stores data].
• Website hosting for this page: [PLACEHOLDER: provider].

These companies act only on our instructions and under a written contract. [PLACEHOLDER: confirm whether any data leaves the UK and, if so, the safeguards used]

Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct it if it is wrong;
• ask us to delete it;
• ask us to restrict how we use it, or object to how we use it;
• ask for your data in a portable format; and
• withdraw your consent at any time.

To use any of these rights, email [CONTACT EMAIL]. We will reply within one month. It is free.

How to unsubscribe or leave the list

Every email we send has a link to unsubscribe and a link to remove me from the list. Either works straight away and you do not need to log in. You can also email [CONTACT EMAIL]. Withdrawing your consent does not affect anything we did before you withdrew it.

How to complain

If you are unhappy with how we have used your data, please contact us first at [CONTACT EMAIL]. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator:

• Online: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Changes to this notice

If we change this notice, we will update the date below. If the change is significant, we will email you.

Last updated: [DATE, set when finalised] (interim draft prepared 5 October 2026)

Back to the Up to Let home page