Legal
How Good To Let handles your data. The short version: we collect very little, and reading the site needs no account at all.
We collect as little as we can. Reading the guidance on Good To Let asks nothing of you - no account, no sign-up, no personal details. We ask for an email address only when you choose to give one: to get a sign-in link that keeps your place, to hear from us when a rule changes, or so a letting agent can come back to you after their survey. You can also sign in with your Google or Microsoft account instead of a link. Everything else we gather is anonymous.
Where a letting agent runs a short survey on Good To Let, your answers are stored without your name or any contact details - they are anonymous market signal. The survey ends with one optional field: if you choose to leave your email address so the agent can come back to you, it is stored with your answers and used for that purpose only. Leave it blank and your response stays anonymous. Beyond that and what an account keeps, we collect no personal information from people reading the site.
When you check a property, we make a report on its own private link. It keeps the energy register's reference for the property, the postcode you typed and when you checked - nothing that names you. If you answer its certificate questions, the report keeps the dates you give, and anyone with its link can see and change them. If you tell it which of the homes sold at its postcode is this one, or that it isn't among them, the report keeps that answer and the day you gave it - HM Land Registry's reference for the address, never the address itself - and anyone with its link can see and change it. If you type the address in yourself, the report keeps what you typed and the spot you marked on the map, in place of the register's reference. That map comes from OpenFreeMap, which sees your device's internet address when it sends the map to your screen, as any website does. For a property picked from the list, the address and its energy record are read from the official energy register, not stored with the report. We keep the register's answer for at most a day. To have a report removed, email its link to hi@goodtolet.com and we will delete it.
You sign in with a link we email you, with your Google or Microsoft account, or with a passkey you make on My account - there is no password. When you ask for a sign-in link, we make an account for that email address, if there isn't one already; the first time you sign in with Google or Microsoft, we make it then. It keeps the address, when it was used to sign in, any passkeys you make, whether you get the update and, if you watch a property, which report you watch and since when, which reminders about its dates we have emailed you and when, and which changes to it we have told you about and when - by email, or on the report itself when you started watching. For each passkey, your account keeps its public part, the name of the device or password manager that holds it, and when it was made and last used - the private part is never sent to us. If you sign in with Google, Google also gives us your name, your profile picture and its own reference for your Google account; if you sign in with Microsoft, Microsoft gives us your name, your Microsoft username and its own references for your Microsoft account and for the organisation it belongs to. Your account keeps those too - nothing else about you. Asking for a link, starting a Google or Microsoft sign-in and being signed in all use essential cookies, which keep the sign-in secure. You can delete your account yourself on My account. That removes it, with your passkeys, your watch, your reminders, the changes we told you about and your subscription to the update, and signs you out. A report you made stays, with the answers in it, for anyone holding its link.
When you sign up for the update, you are asking for a sign-in link: we make an account for your email address if there isn't one already - even if you never follow the link - and it uses the same essential cookies as any sign-in. Following the link subscribes you and signs you in; until you follow it, you are not subscribed. Your account then keeps that you are subscribed, and since when, so we can send you the update. Signed in, you can also switch the update on or off on My account. The subscription goes when your account does.
The public pages set no advertising or tracking cookies. We measure how the site performs using privacy-friendly analytics that do not use cookies and do not build a profile of you. The only cookies we set are essential ones, and only when you ask for a sign-in link or sign in: they keep the sign-in secure and keep you signed in.
We do not sell personal data. An email address you leave with a letting agent's survey is shared with that agent, so they can come back to you - nobody else. We use a small set of trusted suppliers to host and run the site, and they only handle data on our instructions. We may disclose information where the law requires it.
Under UK data protection law you have rights over any personal data an organisation holds about you. Where you left an email address with a survey, we can find it and remove it on request. Where you did not, the answers we hold are anonymous and we cannot link them to you. Either way, email us at hi@goodtolet.com and we will help.