Privacy Policy

Last updated: 7 April 2026

ComplianceCrib ("we", "us") is committed to protecting your personal data. This policy explains what data we collect, why we collect it, how we store it, and your rights.

Who we are

ComplianceCrib is a UK-based landlord compliance tool. If you have questions about this policy or your data, contact us at hello@compliancecrib.co.uk.

What data we collect

When you use our compliance report tool, we collect the following information:

• Email address
• Property type (e.g. flat, terraced, HMO)
• EPC rating
• Tenancy status and start date
• Whether you have a written tenancy agreement
• Rental income bracket (not exact figures)
• Self-employment income bracket (not exact figures)
• Whether the property is jointly owned
• Number of occupants and households (for HMO properties)

We do not collect your name, address, exact income, bank details, or any payment information through the compliance report form.

Why we collect it

We use your data for these purposes only:

• To generate your personalised compliance report
• To send you compliance deadline reminders by email (if you opt in)
• To understand which compliance areas are most relevant to our users, so we can improve the tool

We will never sell your data to third parties. We will never share your individual data with anyone outside ComplianceCrib.

How we store your data

Your data is stored securely on Supabase, a cloud database provider. Supabase stores data in EU-based data centres with encryption at rest and in transit. Access to the database is restricted to ComplianceCrib only.

How long we keep your data

We keep your data for as long as you have an active relationship with ComplianceCrib (e.g. you are receiving emails from us or using the tool). If you ask us to delete your data, we will do so within 30 days.

Your rights

Under UK data protection law (UK GDPR), you have the right to:

• Access your data: Ask us what data we hold about you
• Correct your data: Ask us to fix any inaccuracies
• Delete your data: Ask us to permanently delete all data we hold about you
• Export your data: Ask us to provide your data in a portable format
• Withdraw consent: Unsubscribe from emails at any time

To exercise any of these rights, email hello@compliancecrib.co.uk. We will respond within 30 days.

Cookies

ComplianceCrib does not use tracking cookies. We do not use Google Analytics or any third-party tracking tools. We use Vercel's built-in analytics which collects anonymous, aggregated page view data only, with no personal identifiers.

Third-party services

We use the following third-party services to operate ComplianceCrib:

• Supabase (database hosting, EU servers)
• Netlify (website hosting)
• Resend (email delivery, when we send you deadline reminders)

Each of these services has its own privacy policy. We have selected providers that comply with UK and EU data protection standards.

Changes to this policy

If we make changes to this policy, we will update it on this page and change the "Last updated" date above. For significant changes, we will notify you by email.

Complaints

If you are unhappy with how we handle your data, you can contact us at hello@compliancecrib.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.