Who we are
PropTurn Ltd ("PropTurn", "we", "us") is a company registered in England & Wales with registered office in Newcastle upon Tyne, United Kingdom. Company number to be published here at incorporation. We are the data controller for personal data about our account holders, site visitors and recipients of our marketing. For the tenant / guest / staff data that flows through a management company’s PropTurn account, we act as data processor under that operator’s controllership.
Data we collect
From account holders (landlords, operators, providers): name, email, phone, property addresses, business name, VAT / company number, bank account for payouts (via Stripe, we never see full card numbers), photos of ID if required for onboarding, audit log of actions taken on the platform.
From site visitors: anonymised page views. By default the site sets only strictly-necessary cookies (no fingerprinting, no third-party tracking). Analytics cookies (Google Analytics 4) are loaded only if you explicitly opt in via the cookie banner; the full list is at /cookies. IP address for security logs (retained 30 days).
From marketing subscribers: email, role (landlord / operator / provider), opt-in timestamp.
Why we process it
- Run the account and deliver the service (contract).
- Issue statements, payouts, invoices and tax-authority filings (legal obligation + contract).
- Keep the platform secure and prevent fraud (legitimate interest).
- Send service updates you asked for, or marketing you opted into (consent, withdrawable at any time).
Retention
Account data is kept for the life of the account. After closure, audit logs and financial records are retained for 7 years to meet HMRC / Companies Act obligations. Marketing data is deleted immediately on unsubscribe. Security logs roll on a 30-day window.
Sub-processors
We list every sub-processor we use (hosting, database, payments, email, AI messaging) at /trust#subprocessors. That page updates before any material change takes effect.
International transfers
Most sub-processors are in the UK or EU. A small number of components (e.g. AI inference) are hosted in the US under the UK International Data Transfer Addendum + EU-US Data Privacy Framework. No personal data is transferred to jurisdictions outside those frameworks.
Your rights
Under UK GDPR you can request access, correction, deletion, restriction, portability, and object to processing. You can withdraw consent at any time. To exercise any of these, email privacy@propturn.co.uk. We respond inside 30 days.
You have the right to complain to the UK supervisory authority, the Information Commissioner’s Office, at ico.org.uk.
Cookies
See the cookie policy for the categories we use and how to control them.