Privacy Notice
Who we are: Winkfield Properties Limited, trading as Let2 (“we”, “us”), 21 Yarm Road, Stockton-on-Tees TS18 3NJ, is the data controller for the personal data described here. We are registered with the Information Commissioner’s Office (ICO), registration number Z3575935.
Contact about your data: privacy@let2.com or write to us at the address above.
This notice explains how we use personal data — for visitors to this website, and for our tenants, applicants, guarantors, other adults proposed to live in a property (“proposed occupants”) and landlords.
- Website visitors / enquiries: when you contact us or submit a form (e.g. a repair request or enquiry) we collect the details you give — such as your name, email, phone, property address and message.
- Tenants, applicants, guarantors and landlords: the information needed to provide our letting and property-management services — e.g. contact details, identity and right-to-rent information, tenancy and payment records, and references.
- Proposed occupants: where an applicant names other adults who would live in the property, we hold their name and, if given, their age or date of birth (provided to us by the applicant), together with the results of any public-record checks described below.
- Where this involves information about criminal convictions or offences (including alleged offences and proceedings, e.g. from published court records), we process it only where the law allows, and we maintain an appropriate policy document as required by the Data Protection Act 2018.
- Most of the data we hold comes from you. We also obtain some data from other sources: from the person making an application (about any guarantor and any other adults who would live in the property); from references you or your referees provide; and from publicly available sources — such as the public insolvency register (The Gazette) and published court records — when we assess an application.
3. Why we use it — and our lawful basis
- To respond to your enquiry or request — our legitimate interests, or steps to enter a contract.
- To provide our letting and management services — performance of a contract.
- To meet legal duties (right-to-rent checks, tax, tenancy deposit protection) — legal obligation.
- For marketing, only where you have agreed — consent (which you can withdraw any time).
- To assess an application — including carrying out checks against publicly available records such as the insolvency register and published court listings, for applicants, guarantors and proposed occupants — our legitimate interests (letting and managing property responsibly and reducing risk to the landlord and to other occupants).
- Only as long as needed for the above and to meet legal requirements — e.g. tenancy and financial records generally for six years after the tenancy/transaction ends; website-enquiry details only as long as needed to deal with your request. We then securely delete or destroy it.
- For unsuccessful applicants and their proposed occupants we keep application and check data only for a short period — normally up to 6 months — and then delete it.
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects — a person is always involved in decisions about your application or tenancy. We use secure software, which may include AI-assisted tools, to help manage correspondence and records; these act under our instructions and do not make decisions about you by themselves.
7. Sending data outside the UK
Where data is processed outside the UK (e.g. by an IT provider) we ensure appropriate safeguards (such as UK-approved contractual clauses or an adequacy/data-bridge arrangement).
This website currently uses only strictly necessary/session cookies and does not use cookies to collect personal information. If that changes, we will ask for your consent to any non-essential cookies.
Under UK GDPR you can: access a copy of your data; have inaccurate data corrected; request erasure; restrict or object to processing; and ask for portability. Access is free (we may only charge for, or refuse, requests that are manifestly unfounded, excessive or repetitive), and we will respond within one month. To exercise a right, contact us using the details above.
You can complain to us, and you also have the right to complain to the Information Commissioner’s Office (ico.org.uk · 0303 123 1113).
Last updated: 29 June 2026