Privacy policy

We Want To Rent is the controller of the personal data described in this policy. We use it to run a collaborative rental-search service, keep it secure and respond when you ask for help.

We do not sell personal data. We do not use third-party advertising trackers or build advertising profiles. Information in a shared hunt or home is visible to its owner, the owner’s existing team and people who accept a direct invitation to that workspace.

Blog request and product-link counters are aggregate totals, including repeat requests and bots. Google Search Console supplies aggregate search impressions and clicks. Public source material and editorial drafts may be sent to OpenAI to assist drafting; private rental records and account data are not included in those prompts. An administrator reviews articles before publication.

Depending on how you use the Service, we collect:

• Account information, such as your name, email address, sign-in method, account settings and security credentials. Passwords are stored only in hashed form.
• Rental-search content, including hunt and team names, listing links, addresses, map coordinates, prices, notes, workflow stages, viewing details, photos and videos.
• Brief content, including the areas you are looking in, your budget, when you want to move and what you write about what you are after. A brief you choose to share is read by letting agents — see “Briefs you share with letting agents” below.
• Technical information, such as IP address, device and browser type, request times, security events, diagnostic logs and app version.
• Support communications and any information you choose to include when contacting us.

We use personal data to:

• create and secure your account, authenticate you and deliver the features you request;
• share hunt content with the teammates you choose;
• send service emails such as email confirmations, password resets, invitations and important account notices;
• provide support, investigate faults, prevent abuse and maintain service reliability;
• understand aggregate product usage and improve the Service; and
• meet legal obligations and establish, exercise or defend legal claims.

Under UK data-protection law, we rely primarily on performing our contract with you, our legitimate interests in operating and securing the Service, and compliance with legal obligations. Where the law requires consent, you may withdraw it at any time.

The app does not need your device’s background location. A listing location may come from a Rightmove or OpenRent link you add, or from you or a teammate searching an address or moving a map pin. Address searches are sent to our geocoding provider, and map tiles are loaded from a map provider when you view a map.

We store the listing URL you paste. For a recognised Rightmove or OpenRent link, our server requests that public page once and stores only its displayed address, latitude and longitude when available. We do not import the rest of the advert. If you follow a saved link, the destination site also receives information in the ordinary way described by its own privacy policy.

You can write a brief saying where you are looking, your budget and when you want to move, and share it with letting agents. Sharing is always a choice you make: a brief you do not share is visible only to your own team.

A shared brief is read by every approved agency whose registered working areas cover the places it names. They see the areas, the budget, when you want to move and the text you wrote — and nothing that identifies you. Your name and email address are not shown. An agency that wants to reply opens a conversation inside the Service, and your name becomes visible to that agency at that point so it has something to call you.

The text of a brief is written by you and shown to third parties as you wrote it, so please keep out anything you would not say to a stranger. We cannot un-share a brief an agency has already read. You can stop sharing at any time, which removes it from every agency’s list; conversations already opened continue until you or the agency closes them.

If you start a brief from the public form before you have an account, we hold what you entered and your email address until you confirm it from the link we send. Nothing is shared with any agency until the address is confirmed and you have made an account. We round your location to roughly a hundred metres before looking up the area, and we never store the precise position. If you do not confirm, we delete what you entered within a week; if you confirm but never make an account, we delete it within thirty days.

We disclose information only where needed:

• Your team. Members can see the content and activity in shared hunts available to them.
• Letting agents. An approved agency whose working areas match a brief you chose to share can read it, and can open a conversation with you. Your email address is never shown to them.
• Service providers. Hosting, database, private file storage, email delivery, geocoding, security and map providers process limited information for us under appropriate safeguards.
• Cloudflare. The public rental brief uses Turnstile to prevent automated abuse. Cloudflare processes browser and device signals to perform this security check. We send the verification token to Cloudflare, but do not include your account details or brief content in that verification request. See the Turnstile Privacy Addendum.
• Google. If you choose Google sign-in, Google provides a verified email address, name and stable account identifier according to your Google permissions.
• Legal and safety recipients. We may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a business reorganisation.

We use technical and organisational safeguards including access controls, encrypted connections, hashed passwords, private media storage and authenticated checks before serving team content. The text you write in a brief and the email address held for a brief started before you had an account are encrypted at rest.

No online service can guarantee absolute security. Please use a strong, unique password where you set one, protect your password-reset links and recovery codes, and tell us if you suspect unauthorised access.

We keep account and rental-search information while your account is active and as needed to provide the Service. When you request deletion, we remove or anonymise personal data unless it must be kept for security, dispute resolution, legal compliance or another lawful reason.

An unfinished brief from the public form is deleted within a week if the email address is never confirmed, and within thirty days if it is confirmed but never turned into an account.

Some information can remain temporarily in encrypted backups and operational logs until they cycle out. Content shared with or sent to another person may also remain in that person’s account or systems.

Some providers may process information outside the UK. Where personal data is transferred internationally, we use an adequacy regulation, approved contractual safeguards or another lawful transfer mechanism as required, together with additional safeguards where appropriate.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to receive a portable copy. You may also complain to your local data-protection authority. In the UK, that is the Information Commissioner’s Office.

You can permanently delete your account and its private records in Account settings. To make another request, email [email protected] from the address on your account. We may need to verify your identity before acting. You can also change your email, password, and linked Google or Apple sign-in there.

The website uses cookies and local storage needed for sign-in, security and core functionality. The mobile app stores an authentication token securely on your device and may cache recent data so the app remains useful without a connection. We do not currently use advertising cookies or third-party behavioural analytics.

The Service is intended for adults arranging a home and is not directed to anyone under 18. If you believe a child has given us personal data, contact us so we can investigate and remove it where appropriate.

We may update this policy as the Service or law changes. The latest version will always appear here, with its effective date. We will provide additional notice when a change materially affects your rights.

For privacy questions or requests, email [email protected]. For product help, visit our Support page.