Our roles
London Property Compliance LTD (company 17021630), London, United Kingdom, provides DueSafe. Contact info@lpcuk.uk about privacy. LPC is a controller for account administration, subscriptions, support and security. For landlord, tenant and portfolio records entered by a customer, the customer normally acts as controller and LPC processes the records on its documented instructions under /dpa. An LPC service booking creates a separate service relationship.
Information and purposes
Account information includes business and contact details, email verification, team roles, access decisions and subscription references. Portfolio information can include property addresses, landlord and tenant contacts, tenancy and rent records, compliance documents, repair reports and photographs. Security records include sign-in attempts, session information and access/change events. We use account data to provide the contract, handle payments and support, meet legal obligations, and pursue legitimate interests in securing and administering the service. We use consent where required for optional analytics. Customers must establish their own lawful basis for portfolio data.
Who processes information
Hostinger provides application hosting and delivery. Google Workspace delivers transactional messages, and Google Drive holds encrypted recovery archives. Stripe processes subscription payments and associated billing data; card details are entered on Stripe’s pages and are not stored in the DueSafe database. Google Analytics is optional on public pages only and loads after consent; it is not included in the private workspace. Provider functions and safeguards are described in /dpa. We do not sell tenant records or use portfolio information for advertising.
Storage, transfers and security
The application and persistent SQLite database are hosted with Hostinger. Encrypted recovery copies are stored separately in Google Drive and restore checks run in isolation. Provider infrastructure may involve processing outside the UK; applicable contractual transfer safeguards must be maintained. A precise hosting-region assurance is available from support after verification; we do not claim that every provider processes exclusively in the UK. HTTPS, account-scoped authorisation, role checks, private document delivery, expiring sign-in codes and protected backups help reduce risk. No service can guarantee absolute security.
Retention
Portfolio data is kept to provide the customer’s account and returned or deleted on verified instructions or closure, subject to legal requirements. Contact support to agree closure/export handling. Account and billing records may need to be kept for tax, contract and dispute obligations; retention must be limited to the applicable need. Access-event records are retained for up to 12 months. Email verification codes expire after 10 minutes. Encrypted backups are recovery snapshots; an erasure request includes review of backup retention, and erased records must not be put back into live use after a restore. We do not promise that old backups disappear immediately.
Your rights and contact
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. Withdraw optional analytics consent using Cookie settings. If your data was entered by a landlord or agent, contact that business first; LPC assists it as processor. We verify identity before disclosing or deleting information. Contact info@lpcuk.uk. You can also complain to the Information Commissioner’s Office at ico.org.uk. We do not make legal-compliance decisions about you through automated profiling.